2025 CVE Vulnerabilities
45,320 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-64098 | MEDIUM | 5.9 | 0.4% | Feb 3, 2026 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). ... |
| CVE-2025-52633 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | HCL AION is affected by a Permanent Cookie Containing Sensitive Session Information vulnerability. It is storing sensiti... |
| CVE-2025-52623 | MEDIUM | 6.5 | 0.2% | Feb 3, 2026 | HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability. This can allow au... |
| CVE-2025-71179 | MEDIUM | 6.1 | 0.2% | Feb 3, 2026 | Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via the search parameter to t... |
| CVE-2025-70849 | MEDIUM | 6.1 | 0.2% | Feb 3, 2026 | Arbitrary File Upload in podinfo thru 6.9.0 allows unauthenticated attackers to upload arbitrary files via crafted POST ... |
| CVE-2025-70559 | MEDIUM | 6.5 | 0.2% | Feb 3, 2026 | pdfminer.six before 20251230 contains an insecure deserialization vulnerability in the CMap loading mechanism. The libra... |
| CVE-2025-70311 | MEDIUM | 6.5 | 0.2% | Feb 3, 2026 | JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 paramet... |
| CVE-2025-69848 | MEDIUM | 5.4 | 0.3% | Feb 3, 2026 | NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scr... |
| CVE-2025-69431 | MEDIUM | 6.1 | 0.3% | Feb 3, 2026 | The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following. Attackers can format a USB dri... |
| CVE-2025-69430 | MEDIUM | 6.1 | 0.3% | Feb 3, 2026 | An Incorrect Symlink Follow vulnerability exists in multiple Yottamaster NAS devices, including DM2 (version equal to or... |
| CVE-2025-69429 | MEDIUM | 6.1 | 0.3% | Feb 3, 2026 | The ORICO NAS CD3510 (version V1.9.12 and below) contains an Incorrect Symlink Follow vulnerability that could be exploi... |
| CVE-2025-67189 | MEDIUM | 6.5 | 0.4% | Feb 3, 2026 | A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204_B20210112. The... |
| CVE-2025-65924 | MEDIUM | 4.1 | 0.2% | Feb 3, 2026 | ERPNext thru 15.88.1 does not sanitize or remove certain HTML tags specifically `<a>` hyperlinks in fields that are inte... |
| CVE-2025-65923 | MEDIUM | 5.4 | 0.2% | Feb 3, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability was discovered within the CSV import mechanism of ERPNext thru 15.88.1... |
| CVE-2025-63372 | MEDIUM | 4.3 | 0.4% | Feb 3, 2026 | Articentgroup Zip Rar Extractor Tool 1.345.93.0 is vulnerable to Directory Traversal. The vulnerability resides in the Z... |
| CVE-2025-58348 | MEDIUM | 5.5 | 0.1% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58347 | MEDIUM | 5.5 | 0.1% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58346 | MEDIUM | 5.5 | 0.1% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58345 | MEDIUM | 5.5 | 0.1% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58344 | MEDIUM | 6.2 | 0.2% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58343 | MEDIUM | 5.5 | 0.1% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58342 | MEDIUM | 6.2 | 0.2% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58341 | MEDIUM | 6.2 | 0.2% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58340 | MEDIUM | 6.2 | 0.2% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-52629 | MEDIUM | 6.1 | 0.1% | Feb 3, 2026 | HCL AION is susceptible to Missing Content-Security-Policy. An The absence of a CSP header may increase the risk of cr... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now