2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-70849 | MEDIUM | 6.1 | 0.2% | Feb 3, 2026 | Arbitrary File Upload in podinfo thru 6.9.0 allows unauthenticated attackers to upload arbitrary files via crafted POST ... |
| CVE-2025-70559 | MEDIUM | 6.5 | 0.2% | Feb 3, 2026 | pdfminer.six before 20251230 contains an insecure deserialization vulnerability in the CMap loading mechanism. The libra... |
| CVE-2025-70311 | MEDIUM | 6.5 | 0.2% | Feb 3, 2026 | JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 paramet... |
| CVE-2025-69848 | MEDIUM | 5.4 | 0.3% | Feb 3, 2026 | NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scr... |
| CVE-2025-69431 | MEDIUM | 6.1 | 0.3% | Feb 3, 2026 | The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following. Attackers can format a USB dri... |
| CVE-2025-69430 | MEDIUM | 6.1 | 0.3% | Feb 3, 2026 | An Incorrect Symlink Follow vulnerability exists in multiple Yottamaster NAS devices, including DM2 (version equal to or... |
| CVE-2025-69429 | MEDIUM | 6.1 | 0.3% | Feb 3, 2026 | The ORICO NAS CD3510 (version V1.9.12 and below) contains an Incorrect Symlink Follow vulnerability that could be exploi... |
| CVE-2025-67189 | MEDIUM | 6.5 | 0.4% | Feb 3, 2026 | A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204_B20210112. The... |
| CVE-2025-65924 | MEDIUM | 4.1 | 0.2% | Feb 3, 2026 | ERPNext thru 15.88.1 does not sanitize or remove certain HTML tags specifically `<a>` hyperlinks in fields that are inte... |
| CVE-2025-65923 | MEDIUM | 5.4 | 0.2% | Feb 3, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability was discovered within the CSV import mechanism of ERPNext thru 15.88.1... |
| CVE-2025-63372 | MEDIUM | 4.3 | 0.4% | Feb 3, 2026 | Articentgroup Zip Rar Extractor Tool 1.345.93.0 is vulnerable to Directory Traversal. The vulnerability resides in the Z... |
| CVE-2025-58348 | MEDIUM | 5.5 | 0.1% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58347 | MEDIUM | 5.5 | 0.1% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58346 | MEDIUM | 5.5 | 0.1% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58345 | MEDIUM | 5.5 | 0.1% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58344 | MEDIUM | 6.2 | 0.2% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58343 | MEDIUM | 5.5 | 0.1% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58342 | MEDIUM | 6.2 | 0.2% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58341 | MEDIUM | 6.2 | 0.2% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-58340 | MEDIUM | 6.2 | 0.2% | Feb 3, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12... |
| CVE-2025-52629 | MEDIUM | 6.1 | 0.1% | Feb 3, 2026 | HCL AION is susceptible to Missing Content-Security-Policy. An The absence of a CSP header may increase the risk of cr... |
| CVE-2025-46651 | MEDIUM | 4.3 | 0.3% | Feb 3, 2026 | Tiny File Manager through 2.6 contains a server-side request forgery (SSRF) vulnerability in the URL upload feature. Due... |
| CVE-2025-65017 | MEDIUM | 6.5 | 0.3% | Feb 3, 2026 | Decidim is a participatory democracy framework. In versions from 0.30.0 to before 0.30.4 and from 0.31.0.rc1 to before 0... |
| CVE-2025-13473 | MEDIUM | 5.3 | 0.7% | Feb 3, 2026 | An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. The `django.contrib.auth.handlers... |
| CVE-2025-67857 | MEDIUM | 5.3 | 0.3% | Feb 3, 2026 | A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now