2025 CVE Vulnerabilities
45,363 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-5166 | MEDIUM | 5.5 | 0.2% | May 26, 2025 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is ... |
| CVE-2025-5165 | MEDIUM | 5.5 | 0.2% | May 26, 2025 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects th... |
| CVE-2025-5163 | MEDIUM | 6.9 | 0.5% | May 26, 2025 | A vulnerability, which was classified as problematic, was found in yangshare 技术杨工 warehouseManager 仓库管理系统 1.0. This affe... |
| CVE-2025-5154 | MEDIUM | 4.4 | 0.2% | May 25, 2025 | A vulnerability was identified in PhonePe App 25.03.21.0 on Android. This affects an unknown function of the file /data/... |
| CVE-2025-5153 | MEDIUM | 4.8 | 0.3% | May 25, 2025 | A vulnerability, which was classified as problematic, has been found in CMS Made Simple 2.2.21. This issue affects some ... |
| CVE-2025-5148 | MEDIUM | 5.3 | 0.2% | May 25, 2025 | A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd. It has been classi... |
| CVE-2025-5147 | MEDIUM | 6.3 | 1.3% | May 25, 2025 | A vulnerability was found in Netcore NBR1005GPEV2, NBR200V2 and B6V2 up to 20250508 and classified as critical. This iss... |
| CVE-2025-5146 | MEDIUM | 6.3 | 1.3% | May 25, 2025 | A vulnerability has been found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2 and NBR200V2 up to 202505... |
| CVE-2025-5145 | MEDIUM | 6.3 | 1.3% | May 25, 2025 | A vulnerability, which was classified as critical, was found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR1... |
| CVE-2025-5140 | MEDIUM | 6.3 | 0.3% | May 25, 2025 | A vulnerability classified as critical has been found in Seeyon Zhiyuan OA Web Application System up to 8.1 SP2. This af... |
| CVE-2025-5136 | MEDIUM | 6.3 | 0.5% | May 25, 2025 | A vulnerability, which was classified as problematic, was found in Tmall Demo up to 20250505. This affects an unknown pa... |
| CVE-2025-5135 | MEDIUM | 6.1 | 0.3% | May 24, 2025 | A vulnerability, which was classified as problematic, has been found in Tmall Demo up to 20250505. Affected by this issu... |
| CVE-2025-5134 | MEDIUM | 6.1 | 0.3% | May 24, 2025 | A vulnerability classified as problematic was found in Tmall Demo up to 20250505. Affected by this vulnerability is an u... |
| CVE-2025-5133 | MEDIUM | 6.1 | 0.4% | May 24, 2025 | A vulnerability classified as problematic has been found in Tmall Demo up to 20250505. Affected is an unknown function o... |
| CVE-2025-5129 | MEDIUM | 6.3 | 0.3% | May 24, 2025 | A vulnerability has been found in Sangfor 零信任访问控制系统 aTrust 2.3.10.60 and classified as critical. Affected by this vulner... |
| CVE-2025-5127 | MEDIUM | 5.4 | 0.7% | May 24, 2025 | A vulnerability was determined in Teledyne FLIR AX8 up to 1.46.16. This issue affects some unknown processing of the fil... |
| CVE-2025-4223 | MEDIUM | 4.7 | 0.3% | May 24, 2025 | The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Reflected Cross-Site S... |
| CVE-2025-5055 | MEDIUM | 4.4 | 0.2% | May 24, 2025 | The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Sc... |
| CVE-2025-3869 | MEDIUM | 6.1 | 0.3% | May 24, 2025 | The 4stats plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.9.... |
| CVE-2025-48741 | MEDIUM | 6.8 | 0.3% | May 23, 2025 | A Broken Access Control vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, and 5.4.0 before 5... |
| CVE-2025-48740 | MEDIUM | 5.9 | 0.2% | May 23, 2025 | A Cross-Site Request Forgery (CSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 ... |
| CVE-2025-48739 | MEDIUM | 4.6 | 0.4% | May 23, 2025 | A Server-Side Request Forgery (SSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0... |
| CVE-2025-48738 | MEDIUM | 6.9 | 0.4% | May 23, 2025 | An e-mail flooding vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, an... |
| CVE-2025-48735 | MEDIUM | 4.3 | 0.3% | May 23, 2025 | A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2_220219 before 21.45.8.2.3_230... |
| CVE-2025-46176 | MEDIUM | 6.5 | 0.3% | May 23, 2025 | Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotel... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now