2025 CVE Vulnerabilities
45,184 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-52552 | MEDIUM | 6.1 | 0.2% | Jun 21, 2025 | FastGPT is an AI Agent building platform. Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable t... |
| CVE-2025-52486 | MEDIUM | 6.1 | 0.2% | Jun 21, 2025 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In version... |
| CVE-2025-52485 | MEDIUM | 5.4 | 0.2% | Jun 21, 2025 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In version... |
| CVE-2025-6375 | MEDIUM | 5.5 | 0.2% | Jun 21, 2025 | A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function... |
| CVE-2025-46158 | MEDIUM | 6.2 | 0.2% | Jun 20, 2025 | An issue in redoxOS kernel before commit 5d41cd7c allows a local attacker to cause a denial of service via the `setitime... |
| CVE-2025-2443 | MEDIUM | 6.1 | 0.3% | Jun 20, 2025 | An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass... |
| CVE-2025-6353 | MEDIUM | 5.4 | 0.3% | Jun 20, 2025 | A vulnerability classified as problematic was found in code-projects Responsive Blog 1.0. Affected by this vulnerability... |
| CVE-2025-6347 | MEDIUM | 5.4 | 0.3% | Jun 20, 2025 | A vulnerability was found in code-projects Responsive Blog 1.0/1.12.4/3.3.4. It has been declared as problematic. This v... |
| CVE-2025-6193 | MEDIUM | 5.9 | 0.8% | Jun 20, 2025 | A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in ce... |
| CVE-2025-6345 | MEDIUM | 5.4 | 0.3% | Jun 20, 2025 | A vulnerability was found in SourceCodester My Food Recipe 1.0 and classified as problematic. Affected by this issue is ... |
| CVE-2025-52733 | MEDIUM | 6.5 | 0.2% | Jun 20, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anonform Ab ANON::... |
| CVE-2025-52719 | MEDIUM | 4.3 | 0.2% | Jun 20, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss ProfileGrid profi... |
| CVE-2025-52713 | MEDIUM | 6.4 | 0.2% | Jun 20, 2025 | Server-Side Request Forgery (SSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder all... |
| CVE-2025-52711 | MEDIUM | 4.3 | 0.1% | Jun 20, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allo... |
| CVE-2025-52710 | MEDIUM | 5.9 | 0.2% | Jun 20, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ninja Team File Ma... |
| CVE-2025-52707 | MEDIUM | 6.5 | 0.2% | Jun 20, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firelight Fireligh... |
| CVE-2025-50051 | MEDIUM | 6.5 | 0.2% | Jun 20, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chad Butler WP-Mem... |
| CVE-2025-50050 | MEDIUM | 6.5 | 0.2% | Jun 20, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BlueGlass Interact... |
| CVE-2025-50049 | MEDIUM | 6.5 | 0.2% | Jun 20, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prismtechstudios M... |
| CVE-2025-50048 | MEDIUM | 6.5 | 0.2% | Jun 20, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Atakan Au Automati... |
| CVE-2025-50047 | MEDIUM | 6.5 | 0.2% | Jun 20, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Sitekit ... |
| CVE-2025-50046 | MEDIUM | 6.5 | 0.2% | Jun 20, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP WPComple... |
| CVE-2025-50045 | MEDIUM | 6.5 | 0.2% | Jun 20, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProWCPlugins Relat... |
| CVE-2025-50044 | MEDIUM | 6.5 | 0.2% | Jun 20, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows Cross Sit... |
| CVE-2025-50043 | MEDIUM | 6.5 | 0.2% | Jun 20, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Code En... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now