2025 CVE Vulnerabilities
45,348 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-53073 | MEDIUM | 4.2 | 0.2% | Jun 24, 2025 | In Sentry 25.1.0 through 25.5.1, an authenticated attacker can access a project's issue endpoint and perform unauthorize... |
| CVE-2025-49147 | MEDIUM | 5.3 | 0.3% | Jun 24, 2025 | Umbraco, a free and open source .NET content management system, has a vulnerability in versions 10.0.0 through 10.8.10 a... |
| CVE-2025-23260 | MEDIUM | 4.3 | 0.2% | Jun 24, 2025 | NVIDIA AIStore contains a vulnerability in the AIS Operator where a user may gain elevated k8s cluster access by using t... |
| CVE-2025-50699 | MEDIUM | 6.1 | 0.2% | Jun 24, 2025 | PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in odms/admin/view-user-q... |
| CVE-2025-50695 | MEDIUM | 6.1 | 0.2% | Jun 24, 2025 | PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in /admin/view-booking-de... |
| CVE-2025-50693 | MEDIUM | 6.5 | 0.3% | Jun 24, 2025 | PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Insecure Direct Object Reference (IDOR) in odms/requ... |
| CVE-2025-6569 | MEDIUM | 6.1 | 0.3% | Jun 24, 2025 | A vulnerability classified as problematic was found in code-projects School Fees Payment System 1.0. Affected by this vu... |
| CVE-2025-5318 | MEDIUM | 5.4 | 1.5% | Jun 24, 2025 | A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_... |
| CVE-2025-6434 | MEDIUM | 4.3 | 0.3% | Jun 24, 2025 | The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking ... |
| CVE-2025-6431 | MEDIUM | 6.5 | 0.3% | Jun 24, 2025 | When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing... |
| CVE-2025-6430 | MEDIUM | 6.1 | 0.3% | Jun 24, 2025 | When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was ... |
| CVE-2025-6429 | MEDIUM | 6.5 | 0.4% | Jun 24, 2025 | Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in... |
| CVE-2025-6428 | MEDIUM | 4.3 | 0.2% | Jun 24, 2025 | When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correc... |
| CVE-2025-6425 | MEDIUM | 4.3 | 0.3% | Jun 24, 2025 | An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified ... |
| CVE-2025-39201 | MEDIUM | 6.1 | 0.1% | Jun 24, 2025 | A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to... |
| CVE-2025-5258 | MEDIUM | 6.4 | 0.2% | Jun 24, 2025 | The Conference Scheduler plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter... |
| CVE-2025-43877 | MEDIUM | 5.4 | 0.2% | Jun 24, 2025 | WRC-1167GHBK2-S contains a stored cross-site scripting vulnerability in WebGUI. If exploited, an arbitrary script may be... |
| CVE-2025-36519 | MEDIUM | 5.3 | 0.3% | Jun 24, 2025 | Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B... |
| CVE-2025-47943 | MEDIUM | 6.3 | 0.3% | Jun 24, 2025 | Gogs is an open source self-hosted Git service. In application version 0.14.0+dev and prior, there is a stored cross-sit... |
| CVE-2025-6552 | MEDIUM | 4.3 | 0.4% | Jun 24, 2025 | A vulnerability was found in java-aodeng Hope-Boot 1.0.0. It has been classified as problematic. Affected is the functio... |
| CVE-2025-48470 | MEDIUM | 4.1 | 0.2% | Jun 24, 2025 | Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scr... |
| CVE-2025-48468 | MEDIUM | 6.4 | 0.2% | Jun 24, 2025 | Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to ... |
| CVE-2025-48467 | MEDIUM | 6.5 | 0.2% | Jun 24, 2025 | Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially leading to r... |
| CVE-2025-48462 | MEDIUM | 4.2 | 0.2% | Jun 24, 2025 | Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block ot... |
| CVE-2025-48461 | MEDIUM | 5 | 0.4% | Jun 24, 2025 | Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now