2025 CVE Vulnerabilities

45,352 CVEs published in 2025.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2025-6288MEDIUM5.4A vulnerability, which was classified as problematic, has been found in PHPGurukul Bus Pass Management System 1.0. Affec...
CVE-2025-48058MEDIUM6.3PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to version 6.7.2, there is a...
CVE-2025-6287MEDIUM5.4A vulnerability classified as problematic was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by thi...
CVE-2025-6286MEDIUM6.1A vulnerability classified as problematic has been found in PHPGurukul COVID19 Testing Management System 2021. Affected ...
CVE-2025-6285MEDIUM6.1A vulnerability was found in PHPGurukul COVID19 Testing Management System 2021. It has been rated as problematic. This i...
CVE-2025-6284MEDIUM4.3A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability a...
CVE-2025-6281MEDIUM6.3A vulnerability has been found in OpenBMB XAgent up to 1.0.0 and classified as critical. Affected by this vulnerability ...
CVE-2025-36050MEDIUM6.2IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be ...
CVE-2025-6270MEDIUM5.3A vulnerability, which was classified as critical, has been found in HDF5 up to 1.14.6. Affected by this issue is the fu...
CVE-2025-50200MEDIUM5.5RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in...
CVE-2025-6269MEDIUM5.3A vulnerability classified as critical was found in HDF5 up to 1.14.6. Affected by this vulnerability is the function H5...
CVE-2025-6268MEDIUM4.3A vulnerability classified as problematic has been found in Luna Imaging up to 7.5.5.6. Affected is an unknown function ...
CVE-2025-49014MEDIUM5.5jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function f_s...
CVE-2025-48886MEDIUM4.8Hydra is a layer-two scalability solution for Cardano. Prior to version 0.22.0, the process assumes L1 event finality an...
CVE-2025-32896MEDIUM6.5# Summary Unauthorized users can perform Arbitrary File Read and Deserialization attack by submit job using restful api...
CVE-2025-5234MEDIUM5.4The Gutenverse News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘elementId’ parameter in a...
CVE-2025-4965MEDIUM5.4The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin...
CVE-2025-4571MEDIUM5.4The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modifi...
CVE-2025-5490MEDIUM4.8The Football Pool plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions u...
CVE-2025-5524MEDIUM4.9The OceanWP theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Select HTML tag in all versions up ...
CVE-2025-4479MEDIUM5.4The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
CVE-2025-4367MEDIUM5.4The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpdm_user_dashbo...
CVE-2025-6201MEDIUM6.4The Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more plugin for WordPress is...
CVE-2025-50183MEDIUM6.5OpenList Frontend is a UI component for OpenList. Prior to version 4.0.0-rc.4, a vulnerability exists in the file previe...
CVE-2025-50182MEDIUM6.1urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does no...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now