2025 CVE Vulnerabilities
45,362 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-21430 | HIGH | 7.5 | 0.2% | Apr 7, 2025 | Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session. |
| CVE-2025-21429 | HIGH | 7.5 | 0.2% | Apr 7, 2025 | Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request. |
| CVE-2025-21428 | HIGH | 7.5 | 0.2% | Apr 7, 2025 | Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSp... |
| CVE-2025-21425 | HIGH | 7.8 | 0.1% | Apr 7, 2025 | Memory corruption may occur due top improper access control in HAB process. |
| CVE-2025-21423 | HIGH | 7.8 | 0.1% | Apr 7, 2025 | Memory corruption occurs when handling client calls to EnableTestMode through an Escape call. |
| CVE-2025-21421 | HIGH | 7.8 | 0.1% | Apr 7, 2025 | Memory corruption while processing escape code in API. |
| CVE-2025-3347 | HIGH | 8.8 | 0.4% | Apr 7, 2025 | A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affect... |
| CVE-2025-3346 | HIGH | 8.8 | 5.5% | Apr 7, 2025 | A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the functio... |
| CVE-2025-30473 | HIGH | 8.8 | 0.8% | Apr 7, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow Com... |
| CVE-2025-3337 | HIGH | 7.3 | 0.4% | Apr 7, 2025 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been rated as critical. This i... |
| CVE-2025-3336 | HIGH | 7.3 | 0.4% | Apr 7, 2025 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. Thi... |
| CVE-2025-3335 | HIGH | 7.3 | 0.4% | Apr 7, 2025 | A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. T... |
| CVE-2025-31175 | HIGH | 7.5 | 0.2% | Apr 7, 2025 | Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may ... |
| CVE-2025-31174 | HIGH | 7.5 | 0.4% | Apr 7, 2025 | Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service ... |
| CVE-2025-20664 | HIGH | 7.5 | 0.5% | Apr 7, 2025 | In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (p... |
| CVE-2025-20663 | HIGH | 7.5 | 0.5% | Apr 7, 2025 | In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (p... |
| CVE-2025-22851 | HIGH | 8.8 | 0.2% | Apr 7, 2025 | in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through i... |
| CVE-2025-3328 | HIGH | 8.8 | 5.5% | Apr 7, 2025 | A vulnerability was found in Tenda AC1206 15.03.06.23. It has been classified as critical. Affected is the function form... |
| CVE-2025-3324 | HIGH | 8.8 | 0.5% | Apr 6, 2025 | A vulnerability, which was classified as critical, has been found in godcheese/code-projects Nimrod 0.8. Affected by thi... |
| CVE-2025-3323 | HIGH | 8.8 | 0.5% | Apr 6, 2025 | A vulnerability classified as critical was found in godcheese/code-projects Nimrod 0.8. Affected by this vulnerability i... |
| CVE-2025-32013 | HIGH | 7.5 | 0.6% | Apr 6, 2025 | LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered... |
| CVE-2025-31492 | HIGH | 8.2 | 0.5% | Apr 6, 2025 | mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that impl... |
| CVE-2025-2260 | HIGH | 7.5 | 0.8% | Apr 6, 2025 | In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause a denial of s... |
| CVE-2025-2259 | HIGH | 7.5 | 0.8% | Apr 6, 2025 | In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer un... |
| CVE-2025-2258 | HIGH | 7.5 | 0.8% | Apr 6, 2025 | In NetX Duo component HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now