2025 CVE Vulnerabilities

45,522 CVEs published in 2025.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2025-15340MEDIUM6.5Tanium addressed an incorrect default permissions vulnerability in Comply.
CVE-2025-15339MEDIUM6.5Tanium addressed an incorrect default permissions vulnerability in Discover.
CVE-2025-15338MEDIUM6.5Tanium addressed an incorrect default permissions vulnerability in Partner Integration.
CVE-2025-15337MEDIUM6.5Tanium addressed an incorrect default permissions vulnerability in Patch.
CVE-2025-15336MEDIUM6.5Tanium addressed an incorrect default permissions vulnerability in Performance.
CVE-2025-15335MEDIUM4.3Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2025-15334MEDIUM4.3Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2025-15333MEDIUM4.3Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2025-15332MEDIUM4.9Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2025-15331MEDIUM4.3Tanium addressed an uncontrolled resource consumption vulnerability in Connect.
CVE-2025-15329MEDIUM4.9Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2025-15328MEDIUM5Tanium addressed an improper link resolution before file access vulnerability in Enforce.
CVE-2025-15327MEDIUM4.3Tanium addressed an improper access controls vulnerability in Deploy.
CVE-2025-15326MEDIUM4.3Tanium addressed an improper access controls vulnerability in Patch.
CVE-2025-15325MEDIUM6.3Tanium addressed an improper input validation vulnerability in Discover.
CVE-2025-15324MEDIUM6.6Tanium addressed a documentation issue in Engage.
CVE-2025-58190MEDIUM5.3The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can ...
CVE-2025-47911MEDIUM5.3The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which ...
CVE-2025-15551MEDIUM5.6The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is get...
CVE-2025-70792MEDIUM6.1Cross Site Scripting vulnerability in the "/admin/category/create" endpoint of Microweber 2.0.19. An attacker can manipu...
CVE-2025-70791MEDIUM6.1Cross Site Scripting vulnerability in the "/admin/order/abandoned" endpoint of Microweber 2.0.19. An attacker can manipu...
CVE-2025-69619MEDIUM5.5A path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service (DoS) via writing files to the i...
CVE-2025-68643MEDIUM5.4Axigen Mail Server before 10.5.57 allows stored Cross-Site Scripting (XSS) in the handling of the timeFormat account pre...
CVE-2025-14150MEDIUM6.5IBM webMethods Integration (on prem) - Integration Server 10.15 through IS_10.15_Core_Fix2411.1 to IS_11.1_Core_Fix8 IBM...
CVE-2025-13491MEDIUM5.1IBM App Connect Enterprise Certified Container CD: 11.2.0 through 11.6.0, 12.1.0 through 12.19.0 and 12.0 LTS: 12.0.0 th...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now