2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-30051 | MEDIUM | 6.8 | 0.1% | Oct 23, 2026 | The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, ... |
| CVE-2025-30050 | CRITICAL | 9.4 | 0.2% | Oct 23, 2026 | CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified ... |
| CVE-2025-30049 | HIGH | 8.2 | 0.2% | Oct 23, 2026 | The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 a... |
| CVE-2025-30047 | CRITICAL | 9.4 | 0.4% | Oct 23, 2026 | CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an H... |
| CVE-2025-30046 | CRITICAL | 9 | 0.3% | Oct 23, 2026 | In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run w... |
| CVE-2025-30045 | HIGH | 8.6 | 0.2% | Oct 23, 2026 | CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF documen... |
| CVE-2025-30043 | HIGH | 7.1 | 0.2% | Oct 23, 2026 | CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is ac... |
| CVE-2025-69723 | MEDIUM | 6.1 | 0.2% | Oct 22, 2026 | A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascri... |
| CVE-2025-65200 | CRITICAL | 9.6 | 0.3% | Oct 22, 2026 | An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a... |
| CVE-2025-71434 | HIGH | 8.2 | 0.3% | Oct 22, 2026 | Weaver E-cology 8.0, 9.0, and 10.0 prior to 10.76 contains an unauthenticated SQL injection vulnerability in the /api/do... |
| CVE-2025-55702 | HIGH | 8.7 | 0.3% | Oct 21, 2026 | When a client sends a POST with Expect: 100-continue and the origin answers before reading the body, Apache Traffic Serv... |
| CVE-2025-31699 | HIGH | 8.9 | 0.3% | Oct 21, 2026 | Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request ... |
| CVE-2025-60476 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 a... |
| CVE-2025-60469 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) of GPAC Project/MP4Bo... |
| CVE-2025-60497 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers t... |
| CVE-2025-60493 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows... |
| CVE-2025-60492 | MEDIUM | 5.5 | 0.3% | Oct 21, 2026 | A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 allows attack... |
| CVE-2025-60491 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows ... |
| CVE-2025-60490 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP... |
| CVE-2025-60487 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before 2.5 allow... |
| CVE-2025-60478 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box before 2.5 ... |
| CVE-2025-71438 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attack... |
| CVE-2025-60489 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box befor... |
| CVE-2025-60479 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box before 2.5 ... |
| CVE-2025-0326 | HIGH | 7.4 | 0.1% | Oct 21, 2026 | The system fails to invalidate existing access tokens associated with sub-organization users during sensitive account ma... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now