2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-63807 | CRITICAL | 9.8 | 0.5% | Nov 20, 2025 | An issue was discovered in weijiang1994 university-bbs (aka Blogin) in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 (... |
| CVE-2025-63685 | CRITICAL | 9.8 | 0.4% | Nov 20, 2025 | Quark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability. This vulnerability stems from the insecure loading of syste... |
| CVE-2025-10571 | CRITICAL | 9.6 | 0.3% | Nov 20, 2025 | Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects AB... |
| CVE-2025-63888 | CRITICAL | 9.8 | 0.6% | Nov 20, 2025 | The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code exec... |
| CVE-2025-64428 | CRITICAL | 9.8 | 0.6% | Nov 20, 2025 | Dataease is an open source data visualization analysis tool. Versions prior to 2.10.17 are vulnerable to JNDI injection.... |
| CVE-2025-52410 | CRITICAL | 9.8 | 0.3% | Nov 20, 2025 | Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php e... |
| CVE-2025-60738 | CRITICAL | 9.8 | 1.1% | Nov 20, 2025 | An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 - 2025_07_21 and before ... |
| CVE-2025-34320 | CRITICAL | 9.3 | 0.8% | Nov 20, 2025 | BASIS BBj versions prior to 25.00 contain a Jetty-served web endpoint that fails to properly validate or canonicalize in... |
| CVE-2025-40604 | CRITICAL | 9.8 | 0.2% | Nov 20, 2025 | Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem i... |
| CVE-2025-13451 | CRITICAL | 9.8 | 0.4% | Nov 20, 2025 | A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of... |
| CVE-2025-13449 | CRITICAL | 9.8 | 0.4% | Nov 20, 2025 | A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the fi... |
| CVE-2025-13446 | CRITICAL | 9.8 | 3.9% | Nov 20, 2025 | A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/Se... |
| CVE-2025-13445 | CRITICAL | 9.8 | 3.9% | Nov 20, 2025 | A flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executin... |
| CVE-2025-13442 | CRITICAL | 9.8 | 19.5% | Nov 20, 2025 | A security vulnerability has been detected in UTT 进取 750W up to 3.2.2-191225. Affected by this vulnerability is the func... |
| CVE-2025-12414 | CRITICAL | 9.2 | 0.5% | Nov 20, 2025 | An attacker could take over a Looker account in a Looker instance configured with OIDC authentication, due to email addr... |
| CVE-2025-13424 | CRITICAL | 9.8 | 0.4% | Nov 20, 2025 | A vulnerability has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file... |
| CVE-2025-13422 | CRITICAL | 9.8 | 0.4% | Nov 20, 2025 | A vulnerability was detected in freeprojectscodes Sports Club Management System 1.0. The affected element is an unknown ... |
| CVE-2025-13421 | CRITICAL | 9.8 | 0.4% | Nov 19, 2025 | A security vulnerability has been detected in itsourcecode Human Resource Management System 1.0. Impacted is an unknown ... |
| CVE-2025-13420 | CRITICAL | 9.8 | 0.4% | Nov 19, 2025 | A weakness has been identified in itsourcecode Human Resource Management System 1.0. This issue affects some unknown pro... |
| CVE-2025-13411 | CRITICAL | 9.8 | 0.4% | Nov 19, 2025 | A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this vulnerability is an unk... |
| CVE-2025-13410 | CRITICAL | 9.8 | 0.4% | Nov 19, 2025 | A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected is an unknown function of ... |
| CVE-2025-63213 | CRITICAL | 9.8 | 0.9% | Nov 19, 2025 | The QVidium Opera11 device (firmware version 2.9.0-Ax4x-opera11) is vulnerable to Remote Code Execution (RCE) due to imp... |
| CVE-2025-65099 | CRITICAL | 9.8 | 0.5% | Nov 19, 2025 | Claude Code is an agentic coding tool. Prior to version 1.0.39, when running on a machine with Yarn 3.0 or above, Claude... |
| CVE-2025-65095 | CRITICAL | 9.4 | 0.4% | Nov 19, 2025 | Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call eac... |
| CVE-2025-65026 | CRITICAL | 9.6 | 0.5% | Nov 19, 2025 | esm.sh is a nobuild content delivery network(CDN) for modern web development. Prior to version 136, The esm.sh CDN servi... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now