2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-71253 | HIGH | 7.5 | 0.3% | May 6, 2026 | In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additio... |
| CVE-2025-71252 | HIGH | 7.5 | 0.3% | May 6, 2026 | In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additio... |
| CVE-2025-71251 | HIGH | 7.5 | 0.3% | May 6, 2026 | In IMS, there is a possible system crash due to improper input validation. This could lead to remote denial of service w... |
| CVE-2025-66369 | HIGH | 7.5 | 0.3% | May 5, 2026 | An issue was discovered in MM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 128... |
| CVE-2025-61669 | MEDIUM | 6.1 | 0.2% | May 5, 2026 | Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query pa... |
| CVE-2025-52206 | MEDIUM | 4.7 | 0.2% | May 5, 2026 | ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage. |
| CVE-2025-42611 | MEDIUM | 6.5 | 0.2% | May 5, 2026 | RouterOS provides various services that rely on correct verification of client and server certificates to secure confide... |
| CVE-2025-13618 | CRITICAL | 9.8 | 0.3% | May 5, 2026 | The Mentoring plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.8. Th... |
| CVE-2025-67796 | HIGH | 8.1 | 0.2% | May 4, 2026 | IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access t... |
| CVE-2025-47408 | HIGH | 7.8 | 0.1% | May 4, 2026 | Memory corruption when another driver calls an IOCTL with invalid input/output buffer. |
| CVE-2025-47407 | HIGH | 7 | 0.1% | May 4, 2026 | Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level... |
| CVE-2025-47406 | MEDIUM | 5.5 | 0.1% | May 4, 2026 | Information Disclosure while processing IOCTL handler callbacks without verifying buffer size. |
| CVE-2025-47405 | HIGH | 7.8 | 0.1% | May 4, 2026 | Memory corruption when processing camera sensor input/output control codes with invalid output buffers. |
| CVE-2025-47404 | HIGH | 7.8 | 0.1% | May 4, 2026 | Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modif... |
| CVE-2025-47403 | HIGH | 7.5 | 0.2% | May 4, 2026 | Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireles... |
| CVE-2025-47401 | HIGH | 7.5 | 0.2% | May 4, 2026 | Transient DOS when processing target power rate tables during channel configuration. |
| CVE-2025-70071 | MEDIUM | 5.9 | 0.5% | May 4, 2026 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataA... |
| CVE-2025-70072 | MEDIUM | 6.5 | 0.2% | May 4, 2026 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter:... |
| CVE-2025-70070 | MEDIUM | 6.5 | 0.2% | May 4, 2026 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeomet... |
| CVE-2025-13605 | CRITICAL | 9.3 | 0.2% | May 4, 2026 | 3onedata modbus gateway device model GW1101-1D(RS-485)-TB-P (hardware version V2.2.0) allows authenticated users to exec... |
| CVE-2025-70069 | HIGH | 7.5 | 0.4% | May 4, 2026 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMes... |
| CVE-2025-70067 | CRITICAL | 9.8 | 0.3% | May 4, 2026 | Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiM... |
| CVE-2025-58074 | HIGH | 8.8 | 0.1% | May 4, 2026 | A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-... |
| CVE-2025-14320 | CRITICAL | 9.8 | 0.3% | May 4, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tegsoft Management... |
| CVE-2025-14726 | MEDIUM | 6.5 | 0.8% | May 2, 2026 | The Widgets for Social Photo Feed plugin for WordPress is vulnerable to unauthorized access of data and modification of ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now