2025 CVE Vulnerabilities
45,206 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-20229 | HIGH | 8 | 14.0% | Mar 26, 2025 | In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.104, 9.2... |
| CVE-2025-2787 | HIGH | 8.8 | 0.5% | Mar 26, 2025 | KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects... |
| CVE-2025-30073 | HIGH | 7.5 | 0.3% | Mar 26, 2025 | An issue was discovered in OPC cardsystems Webapp Aufwertung 2.1.0. The reference assigned to transactions can be reused... |
| CVE-2025-28361 | HIGH | 7.5 | 0.4% | Mar 26, 2025 | Unauthorized stack overflow vulnerability in Telesquare TLR-2005KSH v.1.1.4 allows a remote attacker to obtain sensitive... |
| CVE-2025-26009 | HIGH | 7.5 | 0.4% | Mar 26, 2025 | Telesquare TLR-2005KSH 1.1.4 has an Information Disclosure vulnerability when requesting systemutilit.cgi. |
| CVE-2025-26001 | HIGH | 7.5 | 0.4% | Mar 26, 2025 | Telesquare TLR-2005KSH 1.1.4 is vulnerable to Information Disclosure via the parameter getUserNamePassword. |
| CVE-2025-30353 | HIGH | 7.5 | 0.5% | Mar 26, 2025 | Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to... |
| CVE-2025-30217 | HIGH | 7.5 | 0.3% | Mar 26, 2025 | Frappe is a full-stack web application framework. Prior to versions 14.93.2 and 15.55.0, a SQL Injection vulnerability h... |
| CVE-2025-2783 | HIGH | 8.3 | 8.4% | Mar 26, 2025 | Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allow... |
| CVE-2025-2098 | HIGH | 8.4 | 0.2% | Mar 26, 2025 | Fast CAD Reader application on MacOS was found to be installed with incorrect file permissions (rwxrwxrwx). This is inco... |
| CVE-2025-27406 | HIGH | 7.6 | 0.3% | Mar 26, 2025 | Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framewo... |
| CVE-2025-28939 | HIGH | 8.5 | 0.5% | Mar 26, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in EuroCizia WP Googl... |
| CVE-2025-28935 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in puzich Fancybox Pl... |
| CVE-2025-28934 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in chaozh Simple Post... |
| CVE-2025-28928 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sureshdsk Are you ... |
| CVE-2025-28924 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Simbul ZenphotoPre... |
| CVE-2025-28921 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in homejunction Spati... |
| CVE-2025-28917 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in crazyloong Custom ... |
| CVE-2025-28911 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gravity2pdf Gravit... |
| CVE-2025-28903 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hectorgarrofe Driv... |
| CVE-2025-28899 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in toddhuish WP Event... |
| CVE-2025-28890 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in puzich Lightview P... |
| CVE-2025-28889 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in starblank Custom P... |
| CVE-2025-28882 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Omnify, Inc. Omnif... |
| CVE-2025-28880 | HIGH | 7.1 | 0.3% | Mar 26, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jotis Blue Captcha... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now