2025 CVE Vulnerabilities
45,356 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-3765 | HIGH | 8.8 | 0.4% | Apr 17, 2025 | A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Managemen... |
| CVE-2025-3764 | HIGH | 8.8 | 0.4% | Apr 17, 2025 | A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Thi... |
| CVE-2025-3763 | HIGH | 7.8 | 0.3% | Apr 17, 2025 | A vulnerability classified as critical has been found in SourceCodester Phone Management System 1.0. This affects the fu... |
| CVE-2025-25455 | HIGH | 7.5 | 0.5% | Apr 17, 2025 | Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanMTU2. |
| CVE-2025-25454 | HIGH | 7.5 | 0.5% | Apr 17, 2025 | Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via wanSpeed2. |
| CVE-2025-32415 | HIGH | 7.5 | 0.5% | Apr 17, 2025 | In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer un... |
| CVE-2025-29661 | HIGH | 7.2 | 0.4% | Apr 17, 2025 | Litepubl CMS <= 7.0.9 is vulnerable to RCE in admin/service/run. |
| CVE-2025-29181 | HIGH | 7.2 | 0.3% | Apr 17, 2025 | FOXCMS <= V1.25 is vulnerable to SQL Injection via $param['title'] in /admin/util/Field.php. |
| CVE-2025-29180 | HIGH | 7.2 | 0.3% | Apr 17, 2025 | In FOXCMS <=1.25, the installdb.php file has a time - based blind SQL injection vulnerability. The url_prefix, domain, a... |
| CVE-2025-29039 | HIGH | 7.2 | 1.0% | Apr 17, 2025 | An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x41dda8 |
| CVE-2025-43013 | HIGH | 7.5 | 0.1% | Apr 17, 2025 | In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible |
| CVE-2025-39594 | HIGH | 7.1 | 0.2% | Apr 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Arigato Autore... |
| CVE-2025-39586 | HIGH | 8.5 | 0.3% | Apr 17, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileG... |
| CVE-2025-39583 | HIGH | 7.1 | 0.2% | Apr 17, 2025 | Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly ... |
| CVE-2025-39569 | HIGH | 8.5 | 0.3% | Apr 17, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in taskbuilder Taskbu... |
| CVE-2025-39568 | HIGH | 7.5 | 0.4% | Apr 17, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Arture B.V. StoreContrl ... |
| CVE-2025-39567 | HIGH | 7.1 | 0.2% | Apr 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamalli Web Direc... |
| CVE-2025-39558 | HIGH | 7.1 | 0.2% | Apr 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perk... |
| CVE-2025-39542 | HIGH | 8.8 | 0.3% | Apr 17, 2025 | Incorrect Privilege Assignment vulnerability in Jauhari Xelion Xelion Webchat xelion-webchat allows Privilege Escalation... |
| CVE-2025-39535 | HIGH | 7.2 | 0.4% | Apr 17, 2025 | Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authenticat... |
| CVE-2025-39533 | HIGH | 8.8 | 0.3% | Apr 17, 2025 | Missing Authorization vulnerability in Starfish Reviews Starfish Review Generation & Marketing starfish-reviews allows P... |
| CVE-2025-39532 | HIGH | 7.5 | 0.3% | Apr 17, 2025 | Missing Authorization vulnerability in spicethemes Spice Blocks spice-blocks allows Exploiting Incorrectly Configured Ac... |
| CVE-2025-39527 | HIGH | 8.8 | 0.4% | Apr 17, 2025 | Deserialization of Untrusted Data vulnerability in bestweblayout Rating by BestWebSoft rating-bws allows Object Injectio... |
| CVE-2025-39526 | HIGH | 8.1 | 0.5% | Apr 17, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-39521 | HIGH | 7.1 | 0.2% | Apr 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani Conta... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now