2025 CVE Vulnerabilities
45,356 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-30712 | HIGH | 8.1 | 0.5% | Apr 15, 2025 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th... |
| CVE-2025-30708 | HIGH | 7.5 | 0.5% | Apr 15, 2025 | Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Search and Register Users). ... |
| CVE-2025-30707 | HIGH | 7.5 | 0.5% | Apr 15, 2025 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management). Supported versions ... |
| CVE-2025-30706 | HIGH | 7.5 | 0.6% | Apr 15, 2025 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are aff... |
| CVE-2025-30701 | HIGH | 7.3 | 0.4% | Apr 15, 2025 | Vulnerability in the RAS Security component of Oracle Database Server. Supported versions that are affected are 19.3-19... |
| CVE-2025-30690 | HIGH | 7.2 | 0.2% | Apr 15, 2025 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is a... |
| CVE-2025-30686 | HIGH | 7.6 | 0.5% | Apr 15, 2025 | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: EMC). Sup... |
| CVE-2025-2497 | HIGH | 7.8 | 0.3% | Apr 15, 2025 | A maliciously crafted DWG file, when parsed through Autodesk Revit, can cause a Stack-Based Buffer Overflow vulnerabilit... |
| CVE-2025-27939 | HIGH | 7.5 | 0.7% | Apr 15, 2025 | An attacker can change registered email addresses of other users and take over arbitrary accounts. |
| CVE-2025-21587 | HIGH | 7.4 | 0.7% | Apr 15, 2025 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE... |
| CVE-2025-1656 | HIGH | 7.8 | 0.2% | Apr 15, 2025 | A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vuln... |
| CVE-2025-1277 | HIGH | 7.8 | 0.2% | Apr 15, 2025 | A maliciously crafted PDF file, when parsed through Autodesk applications, can force a Memory Corruption vulnerability. ... |
| CVE-2025-1276 | HIGH | 7.8 | 0.2% | Apr 15, 2025 | A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vuln... |
| CVE-2025-1275 | HIGH | 7.8 | 0.3% | Apr 15, 2025 | A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overf... |
| CVE-2025-1274 | HIGH | 7.8 | 0.2% | Apr 15, 2025 | A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A ma... |
| CVE-2025-1273 | HIGH | 7.8 | 0.2% | Apr 15, 2025 | A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vuln... |
| CVE-2025-32438 | HIGH | 8.8 | 0.2% | Apr 15, 2025 | make-initrd-ng is a tool for copying binaries and their dependencies. Local privilege escalation affecting all NixOS use... |
| CVE-2025-32012 | HIGH | 7.5 | 0.6% | Apr 15, 2025 | Jellyfin is an open source self hosted media server. In versions 10.9.0 to before 10.10.7, the /System/Restart endpoint ... |
| CVE-2025-31497 | HIGH | 7.5 | 0.3% | Apr 15, 2025 | TEIGarage is a webservice and RESTful service to transform, convert and validate various formats, focussing on the TEI f... |
| CVE-2025-27791 | HIGH | 8.3 | 0.4% | Apr 15, 2025 | Collabora Online is a collaborative online office suite based on LibreOffice technology. In versions prior to 24.04.12.4... |
| CVE-2025-3617 | HIGH | 7.8 | 0.2% | Apr 15, 2025 | A privilege escalation vulnerability exists in the Rockwell Automation ThinManager. When the software starts up, files a... |
| CVE-2025-33027 | HIGH | 7.8 | 0.2% | Apr 15, 2025 | In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers... |
| CVE-2025-33026 | HIGH | 7.8 | 0.2% | Apr 15, 2025 | In PeaZip through 10.4.0, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypass... |
| CVE-2025-32780 | HIGH | 7.3 | 0.2% | Apr 15, 2025 | BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.6.2 is vulnerab... |
| CVE-2025-32948 | HIGH | 7.5 | 0.5% | Apr 15, 2025 | The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send request... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now