2025 CVE Vulnerabilities
45,356 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-3698 | HIGH | 7.5 | 0.3% | Apr 16, 2025 | Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to information leakage ris... |
| CVE-2025-3663 | HIGH | 8.2 | 8.0% | Apr 16, 2025 | A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. This issue a... |
| CVE-2025-30100 | HIGH | 7.8 | 0.1% | Apr 16, 2025 | Dell Alienware Command Center 6.x, versions prior to 6.7.37.0 contain an Improper Access Control Vulnerability. A low pr... |
| CVE-2025-32923 | HIGH | 7.1 | 0.2% | Apr 15, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoodLayers Tourmas... |
| CVE-2025-32784 | HIGH | 7.5 | 0.2% | Apr 15, 2025 | conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting. In versions prior to 2025... |
| CVE-2025-31360 | HIGH | 7.5 | 0.4% | Apr 15, 2025 | Unauthenticated attackers can trigger device actions associated with specific "scenes" of arbitrary users. |
| CVE-2025-30984 | HIGH | 7.1 | 0.2% | Apr 15, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dzynit SEO Tools s... |
| CVE-2025-30970 | HIGH | 7.1 | 0.2% | Apr 15, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in scottwallick Easy ... |
| CVE-2025-29471 | HIGH | 8.3 | 5.9% | Apr 15, 2025 | Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code ... |
| CVE-2025-27011 | HIGH | 7.5 | 0.5% | Apr 15, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-27008 | HIGH | 7.5 | 0.4% | Apr 15, 2025 | Missing Authorization vulnerability in NotFound Unlimited Timeline unlimited-timeline allows Accessing Functionality Not... |
| CVE-2025-26953 | HIGH | 7.5 | 0.4% | Apr 15, 2025 | Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrain... |
| CVE-2025-26908 | HIGH | 7.6 | 0.4% | Apr 15, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gurmehub Kargo Ent... |
| CVE-2025-26748 | HIGH | 8.1 | 0.3% | Apr 15, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in looswebstudio Arkhe arkhe allows PHP Local File Inclusion.This issue ... |
| CVE-2025-26746 | HIGH | 7.1 | 0.2% | Apr 15, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in caalami Advanced C... |
| CVE-2025-26730 | HIGH | 7.5 | 0.4% | Apr 15, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NotFound Macro Calculator wi... |
| CVE-2025-22263 | HIGH | 7.1 | 0.2% | Apr 15, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Global Ga... |
| CVE-2025-32021 | HIGH | 7.5 | 0.3% | Apr 15, 2025 | Weblate is a web based localization tool. Prior to version 5.11, when creating a new component from an existing componen... |
| CVE-2025-31499 | HIGH | 8.8 | 0.6% | Apr 15, 2025 | Jellyfin is an open source self hosted media server. Versions before 10.10.7 are vulnerable to argument injection in FFm... |
| CVE-2025-30736 | HIGH | 7.4 | 0.3% | Apr 15, 2025 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.26, ... |
| CVE-2025-30735 | HIGH | 8.1 | 0.3% | Apr 15, 2025 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Page a... |
| CVE-2025-30730 | HIGH | 7.5 | 0.4% | Apr 15, 2025 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported ... |
| CVE-2025-30728 | HIGH | 7.5 | 0.3% | Apr 15, 2025 | Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Core). Supported versions that ... |
| CVE-2025-30724 | HIGH | 7.5 | 0.3% | Apr 15, 2025 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services). Supported versions that... |
| CVE-2025-30716 | HIGH | 7.5 | 0.5% | Apr 15, 2025 | Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Frame... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now