2025 CVE Vulnerabilities
45,206 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-11203 | LOW | 3.5 | 0.4% | Oct 29, 2025 | LiteLLM Information health API_KEY Information Disclosure Vulnerability. This vulnerability allows remote attackers to d... |
| CVE-2025-11202 | CRITICAL | 9.8 | 2.9% | Oct 29, 2025 | win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability. This vulnerability allows r... |
| CVE-2025-11201 | CRITICAL | 9.8 | 27.1% | Oct 29, 2025 | MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows... |
| CVE-2025-11200 | CRITICAL | 9.8 | 1.5% | Oct 29, 2025 | MLflow Weak Password Requirements Authentication Bypass Vulnerability. This vulnerability allows remote attackers to byp... |
| CVE-2025-10934 | HIGH | 7.8 | 0.5% | Oct 29, 2025 | GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a... |
| CVE-2025-10925 | HIGH | 7.8 | 2.8% | Oct 29, 2025 | GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote... |
| CVE-2025-10924 | HIGH | 7.8 | 0.4% | Oct 29, 2025 | GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to... |
| CVE-2025-10923 | HIGH | 7.8 | 0.4% | Oct 29, 2025 | GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers ... |
| CVE-2025-10922 | HIGH | 7.8 | 0.6% | Oct 29, 2025 | GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a... |
| CVE-2025-10921 | HIGH | 7.8 | 0.5% | Oct 29, 2025 | GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a... |
| CVE-2025-10920 | HIGH | 7.8 | 0.4% | Oct 29, 2025 | GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attacke... |
| CVE-2025-64104 | HIGH | 7.3 | 0.2% | Oct 29, 2025 | LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, ... |
| CVE-2025-64103 | CRITICAL | 9.8 | 0.3% | Oct 29, 2025 | Starting from 2.53.6, 2.54.3, and 2.55.0, Zitadel only required multi factor authentication in case the login policy has... |
| CVE-2025-64102 | CRITICAL | 9.8 | 0.4% | Oct 29, 2025 | Zitadel is open-source identity infrastructure software. Prior to 4.6.0, 3.4.3, and 2.71.18, an attacker can perform an ... |
| CVE-2025-64101 | HIGH | 8.8 | 0.3% | Oct 29, 2025 | Zitadel is open-source identity infrastructure software. Prior to 4.6.0, 3.4.3, and 2.71.18, a potential vulnerability e... |
| CVE-2025-61876 | MEDIUM | 5 | 0.2% | Oct 29, 2025 | Insecure Direct Object Reference (IDOR) in /tenants/{id} API endpoint in Inforcer Platform version 2.0.153 allows an aut... |
| CVE-2025-64100 | MEDIUM | 6.1 | 0.3% | Oct 29, 2025 | CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.9 and 2.11.4,... |
| CVE-2025-62797 | HIGH | 8.6 | 0.2% | Oct 29, 2025 | FluxCP is a web-based Control Panel for rAthena servers written in PHP. A critical Cross-Site Request Forgery (CSRF) vul... |
| CVE-2025-57227 | HIGH | 7.8 | 0.1% | Oct 29, 2025 | An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via ... |
| CVE-2025-35980 | — | — | — | Oct 29, 2025 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requ... |
| CVE-2025-11232 | HIGH | 7.5 | 0.4% | Oct 29, 2025 | To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at th... |
| CVE-2025-62792 | HIGH | 7.5 | 0.4% | Oct 29, 2025 | Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.12.0, a buffer ... |
| CVE-2025-62791 | HIGH | 7.5 | 0.3% | Oct 29, 2025 | Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, DecodeCis... |
| CVE-2025-62790 | HIGH | 7.5 | 0.4% | Oct 29, 2025 | Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fim_fetch... |
| CVE-2025-62789 | HIGH | 7.5 | 0.4% | Oct 29, 2025 | Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fim_alert... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now