2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-27772 | HIGH | 7.4 | — | Aug 17, 2026 | UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `... |
| CVE-2025-27771 | HIGH | 7.4 | — | Aug 17, 2026 | UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `... |
| CVE-2025-27770 | HIGH | 7.4 | — | Aug 17, 2026 | UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `... |
| CVE-2025-27621 | HIGH | 7.7 | — | Aug 17, 2026 | UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the U... |
| CVE-2025-7639 | HIGH | 7.1 | — | Aug 14, 2026 | The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to ta... |
| CVE-2025-59323 | HIGH | 8.4 | — | Aug 12, 2026 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partition... |
| CVE-2025-59322 | HIGH | 7.5 | — | Aug 12, 2026 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted v... |
| CVE-2025-59319 | HIGH | 7.2 | — | Aug 12, 2026 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and... |
| CVE-2025-59327 | HIGH | 7.5 | — | Aug 12, 2026 | In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, i... |
| CVE-2025-59325 | HIGH | 7.5 | — | Aug 12, 2026 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to encrypt the initramfs contents, allowing for the offline... |
| CVE-2025-41770 | HIGH | 7.5 | — | Aug 12, 2026 | An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an rem... |
| CVE-2025-54512 | HIGH | 7 | — | Aug 11, 2026 | A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to e... |
| CVE-2025-0046 | HIGH | 7 | — | Aug 11, 2026 | Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrar... |
| CVE-2025-8087 | HIGH | 7 | — | Aug 11, 2026 | A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges ... |
| CVE-2025-30241 | HIGH | 8.6 | — | Aug 10, 2026 | Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input pro... |
| CVE-2025-30239 | HIGH | 8.5 | 0.2% | Aug 10, 2026 | In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive co... |
| CVE-2025-30238 | HIGH | 8.6 | 0.2% | Aug 10, 2026 | In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to e... |
| CVE-2025-30237 | HIGH | 8.7 | 0.3% | Aug 10, 2026 | The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not c... |
| CVE-2025-15683 | HIGH | 8.8 | — | Aug 10, 2026 | TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An ... |
| CVE-2025-15682 | HIGH | 8.7 | — | Aug 10, 2026 | TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server. An unauth... |
| CVE-2025-71412 | HIGH | 7.1 | — | Aug 7, 2026 | Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion... |
| CVE-2025-71409 | HIGH | 7.1 | — | Aug 7, 2026 | Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages ... |
| CVE-2025-63235 | HIGH | 7.5 | — | Aug 7, 2026 | In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CON... |
| CVE-2025-49506 | HIGH | 7.5 | — | Aug 6, 2026 | APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with regards to hashes or p... |
| CVE-2025-15028 | HIGH | 7.2 | 0.3% | Aug 6, 2026 | The FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More plugin for WordPress is ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now