2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-66595 | MEDIUM | 5.4 | 0.1% | Feb 9, 2026 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product is vulnerable to... |
| CVE-2025-66594 | MEDIUM | 5.3 | 0.2% | Feb 9, 2026 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Detailed messages are displayed... |
| CVE-2025-66607 | MEDIUM | 5.3 | 0.2% | Feb 9, 2026 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The response header contains ... |
| CVE-2025-66605 | MEDIUM | 5.3 | 0.2% | Feb 9, 2026 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Since there are input fields ... |
| CVE-2025-66604 | MEDIUM | 5.3 | 0.1% | Feb 9, 2026 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The library version could be ... |
| CVE-2025-66601 | MEDIUM | 6.1 | 0.2% | Feb 9, 2026 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not specify... |
| CVE-2025-66599 | MEDIUM | 6.9 | 0.3% | Feb 9, 2026 | A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Physical paths could be displ... |
| CVE-2025-15564 | MEDIUM | 5.5 | 0.2% | Feb 7, 2026 | A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::... |
| CVE-2025-15477 | MEDIUM | 6.5 | 0.2% | Feb 7, 2026 | The Bucketlister plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode `category` and `id` attr... |
| CVE-2025-15476 | MEDIUM | 4.3 | 0.2% | Feb 7, 2026 | The The Bucketlister plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability... |
| CVE-2025-15491 | MEDIUM | 5.5 | 0.3% | Feb 7, 2026 | The Post Slides WordPress plugin through 1.0.1 does not validate some shortcode attributes before using them to generate... |
| CVE-2025-15267 | MEDIUM | 6.4 | 0.2% | Feb 7, 2026 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_accordion... |
| CVE-2025-13463 | MEDIUM | 6.4 | 0.2% | Feb 7, 2026 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Grid component in a... |
| CVE-2025-12803 | MEDIUM | 6.4 | 0.2% | Feb 7, 2026 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin 'bt_bb_tabs' shor... |
| CVE-2025-12159 | MEDIUM | 6.4 | 0.2% | Feb 7, 2026 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_raw_conte... |
| CVE-2025-31990 | MEDIUM | 6.8 | 0.3% | Feb 7, 2026 | Rate limiting for certain API calls is not being enforced, making HCL Velocity vulnerable to Denial of Service (DoS) att... |
| CVE-2025-69216 | MEDIUM | 6.5 | 0.4% | Feb 6, 2026 | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, an au... |
| CVE-2025-13523 | MEDIUM | 5.4 | 0.2% | Feb 6, 2026 | Mattermost Confluence plugin version <1.7.0 fails to properly escape user-controlled display names in HTML template rend... |
| CVE-2025-13818 | MEDIUM | 6.7 | 0.1% | Feb 6, 2026 | Local privilege escalation vulnerability via insecure temporary batch file execution in ESET Management Agent |
| CVE-2025-10753 | MEDIUM | 5.3 | 0.3% | Feb 6, 2026 | The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to unauthorized access in all versions ... |
| CVE-2025-32393 | MEDIUM | 6.5 | 0.4% | Feb 5, 2026 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut... |
| CVE-2025-12131 | MEDIUM | 6.5 | 0.2% | Feb 5, 2026 | A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service. |
| CVE-2025-15343 | MEDIUM | 6.5 | 0.3% | Feb 5, 2026 | Tanium addressed an incorrect default permissions vulnerability in Enforce. |
| CVE-2025-15342 | MEDIUM | 4.3 | 0.2% | Feb 5, 2026 | Tanium addressed an improper access controls vulnerability in Reputation. |
| CVE-2025-15341 | MEDIUM | 6.5 | 0.3% | Feb 5, 2026 | Tanium addressed an incorrect default permissions vulnerability in Benchmark. |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now