2025 CVE Vulnerabilities
45,206 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-54496 | HIGH | 8.4 | 0.2% | Nov 4, 2025 | A maliciously crafted project file may cause a heap-based buffer overflow in Fuji Electric Monitouch V-SFT-6, which ma... |
| CVE-2025-55155 | MEDIUM | 5.4 | 0.1% | Nov 4, 2025 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, when a user edits their pro... |
| CVE-2025-54335 | MEDIUM | 6.5 | 0.2% | Nov 4, 2025 | An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. There is a use-afte... |
| CVE-2025-52910 | CRITICAL | 9.8 | 0.3% | Nov 4, 2025 | An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 148... |
| CVE-2025-48884 | MEDIUM | 6.1 | 0.2% | Nov 4, 2025 | Galette is a membership management web application for non profit organizations. In versions 1.1.5.2 and below, Galette'... |
| CVE-2025-48076 | MEDIUM | 5.4 | 0.1% | Nov 4, 2025 | Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user... |
| CVE-2025-47776 | CRITICAL | 9.1 | 0.3% | Nov 4, 2025 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Due to incorrect use of loose (==) instead of strict (===... |
| CVE-2025-32786 | HIGH | 7.5 | 6.0% | Nov 4, 2025 | The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents... |
| CVE-2025-27374 | MEDIUM | 5.3 | 0.3% | Nov 4, 2025 | An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 982... |
| CVE-2025-61431 | MEDIUM | 6.1 | 0.2% | Nov 4, 2025 | A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMaintenance ... |
| CVE-2025-54327 | MEDIUM | 6.5 | 0.2% | Nov 4, 2025 | An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1380, W920, W930, W... |
| CVE-2025-49494 | HIGH | 7.5 | 0.3% | Nov 4, 2025 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330, 1380, ... |
| CVE-2025-33176 | MEDIUM | 6.2 | 0.1% | Nov 4, 2025 | NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communicatio... |
| CVE-2025-23358 | HIGH | 8.2 | 0.2% | Nov 4, 2025 | NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path eleme... |
| CVE-2025-64322 | MEDIUM | 5.3 | 0.2% | Nov 4, 2025 | Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Mani... |
| CVE-2025-64321 | MEDIUM | 5.3 | 0.2% | Nov 4, 2025 | Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Ma... |
| CVE-2025-64320 | MEDIUM | 6.5 | 0.2% | Nov 4, 2025 | Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Co... |
| CVE-2025-64319 | MEDIUM | 5.3 | 0.2% | Nov 4, 2025 | Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows ... |
| CVE-2025-64318 | MEDIUM | 5.3 | 0.2% | Nov 4, 2025 | Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allow... |
| CVE-2025-54334 | HIGH | 7.5 | 0.3% | Nov 4, 2025 | An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. T... |
| CVE-2025-52513 | HIGH | 7.5 | 0.3% | Nov 4, 2025 | An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results ... |
| CVE-2025-52512 | HIGH | 7.5 | 0.3% | Nov 4, 2025 | An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results ... |
| CVE-2025-12108 | CRITICAL | 9.3 | 0.4% | Nov 4, 2025 | The Survision LPR Camera system does not enforce password protection by default. This allows access to the configuration... |
| CVE-2025-10875 | MEDIUM | 6.5 | 0.2% | Nov 4, 2025 | Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allow... |
| CVE-2025-54333 | MEDIUM | 5.3 | 0.3% | Nov 4, 2025 | An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer De... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now