2025 CVE Vulnerabilities
45,206 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-41228 | MEDIUM | 4.3 | 0.7% | May 20, 2025 | VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. ... |
| CVE-2025-41227 | MEDIUM | 5.5 | 0.1% | May 20, 2025 | VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious... |
| CVE-2025-41226 | MEDIUM | 6.8 | 0.2% | May 20, 2025 | VMware ESXi contains a denial-of-service vulnerability that occurs when performing a guest operation. A malicious actor ... |
| CVE-2025-4980 | MEDIUM | 6.9 | 0.5% | May 20, 2025 | A vulnerability has been found in Netgear DGND3700 1.1.00.15_1.00.15NA and classified as problematic. This vulnerability... |
| CVE-2025-47939 | MEDIUM | 5.4 | 0.2% | May 20, 2025 | TYPO3 is an open source, PHP based web content management system. By design, the file management module in TYPO3’s backe... |
| CVE-2025-47937 | MEDIUM | 5.3 | 0.3% | May 20, 2025 | TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51... |
| CVE-2025-47936 | MEDIUM | 4.4 | 0.2% | May 20, 2025 | TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS an... |
| CVE-2025-45862 | MEDIUM | 6.5 | 0.3% | May 20, 2025 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the interfacenameds parameter in t... |
| CVE-2025-4977 | MEDIUM | 6.9 | 0.5% | May 20, 2025 | A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.15_1.00.15NA. Affected b... |
| CVE-2025-40633 | MEDIUM | 5.1 | 0.3% | May 20, 2025 | A Stored Cross-Site Scripting (XSS) vulnerability has been found in Koibox for versions prior to e8cbce2. This vulnerab... |
| CVE-2025-4951 | MEDIUM | 4.6 | 0.2% | May 20, 2025 | Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in ... |
| CVE-2025-3223 | MEDIUM | 5.9 | 0.2% | May 19, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova WorkstationST... |
| CVE-2025-47946 | MEDIUM | 6.1 | 0.2% | May 19, 2025 | Symfony UX is an initiative and set of libraries to integrate JavaScript tools into applications. Prior to version 2.25.... |
| CVE-2025-46441 | MEDIUM | 5.3 | 0.3% | May 19, 2025 | Path Traversal: '.../...//' vulnerability in ctltwp Section Widget section-widget allows Path Traversal.This issue affec... |
| CVE-2025-31027 | MEDIUM | 6.1 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jocoxdesign Tiger ... |
| CVE-2025-43838 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in ChoPlugins.com Custom PC Builder Lite for WooCommerce custom-pc-builder-lite-for-... |
| CVE-2025-39446 | MEDIUM | 6.1 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl LLC Boost... |
| CVE-2025-43841 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jamesdbruner WP Ve... |
| CVE-2025-43835 | MEDIUM | 4.3 | 0.1% | May 19, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in ktsvetkov wp-cyr-cho wp-cyr-cho allows Cross Site Request Forgery.Thi... |
| CVE-2025-43834 | MEDIUM | 5.9 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tox82 cookieBAR co... |
| CVE-2025-39460 | MEDIUM | 5.3 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in ThimPress Eduma eduma allows Exploiting Incorrectly Configured Access Control Sec... |
| CVE-2025-39454 | MEDIUM | 4.3 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory.This issue affects Name Directory: fr... |
| CVE-2025-39450 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs... |
| CVE-2025-39448 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem... |
| CVE-2025-39412 | MEDIUM | 4.3 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in averta Master Slider master-slider.This issue affects Master Slider: from n/a thr... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now