2025 CVE Vulnerabilities
45,348 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-6493 | MEDIUM | 5.5 | 0.4% | Jun 22, 2025 | A weakness has been identified in CodeMirror up to 5.65.20. Affected is an unknown function of the file mode/markdown/ma... |
| CVE-2025-6492 | MEDIUM | 5.5 | 0.4% | Jun 22, 2025 | A vulnerability has been found in MarkText up to 0.17.1 and classified as problematic. Affected by this vulnerability is... |
| CVE-2025-6485 | MEDIUM | 6.3 | 6.0% | Jun 22, 2025 | A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been classified as critical. This affects the ... |
| CVE-2025-6478 | MEDIUM | 4.3 | 0.2% | Jun 22, 2025 | A vulnerability was found in CodeAstro Expense Management System 1.0. It has been rated as problematic. Affected by this... |
| CVE-2025-6477 | MEDIUM | 4.8 | 0.3% | Jun 22, 2025 | A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. A... |
| CVE-2025-6476 | MEDIUM | 4.3 | 0.2% | Jun 22, 2025 | A vulnerability was found in SourceCodester Gym Management System 1.0. It has been classified as problematic. Affected i... |
| CVE-2025-6475 | MEDIUM | 4.8 | 0.3% | Jun 22, 2025 | A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This iss... |
| CVE-2025-6473 | MEDIUM | 6.1 | 0.3% | Jun 22, 2025 | A vulnerability, which was classified as problematic, was found in code-projects School Fees Payment System 1.0. This af... |
| CVE-2025-6453 | MEDIUM | 4.3 | 0.4% | Jun 22, 2025 | A vulnerability classified as critical has been found in diyhi bbs 6.8. Affected is the function Add of the file /src/ma... |
| CVE-2025-6452 | MEDIUM | 4.8 | 0.3% | Jun 22, 2025 | A vulnerability was found in CodeAstro Patient Record Management System 1.0. It has been rated as problematic. This issu... |
| CVE-2025-52923 | MEDIUM | 4.3 | 0.1% | Jun 22, 2025 | Sangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command. |
| CVE-2025-52919 | MEDIUM | 4.3 | 0.2% | Jun 21, 2025 | In Yealink RPS before 2025-05-26, the certificate upload function does not properly validate certificate content, potent... |
| CVE-2025-52918 | MEDIUM | 5 | 0.2% | Jun 21, 2025 | Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized acces... |
| CVE-2025-52917 | MEDIUM | 4.3 | 0.3% | Jun 21, 2025 | The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive req... |
| CVE-2025-1987 | MEDIUM | 6.1 | 0.5% | Jun 21, 2025 | A Cross-Site Scripting (XSS) vulnerability has been identified in Psono-Client’s handling of vault entries of type websi... |
| CVE-2025-3629 | MEDIUM | 4.3 | 0.2% | Jun 21, 2025 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's... |
| CVE-2025-5289 | MEDIUM | 5.4 | 0.2% | Jun 21, 2025 | The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Stored... |
| CVE-2025-5143 | MEDIUM | 5.4 | 0.2% | Jun 21, 2025 | The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... |
| CVE-2025-52552 | MEDIUM | 6.1 | 0.2% | Jun 21, 2025 | FastGPT is an AI Agent building platform. Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable t... |
| CVE-2025-52486 | MEDIUM | 6.1 | 0.2% | Jun 21, 2025 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In version... |
| CVE-2025-52485 | MEDIUM | 5.4 | 0.2% | Jun 21, 2025 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In version... |
| CVE-2025-6375 | MEDIUM | 5.5 | 0.2% | Jun 21, 2025 | A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function... |
| CVE-2025-46158 | MEDIUM | 6.2 | 0.2% | Jun 20, 2025 | An issue in redoxOS kernel before commit 5d41cd7c allows a local attacker to cause a denial of service via the `setitime... |
| CVE-2025-2443 | MEDIUM | 6.1 | 0.3% | Jun 20, 2025 | An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass... |
| CVE-2025-6353 | MEDIUM | 5.4 | 0.3% | Jun 20, 2025 | A vulnerability classified as problematic was found in code-projects Responsive Blog 1.0. Affected by this vulnerability... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now