2025 CVE Vulnerabilities
45,364 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-47936 | MEDIUM | 4.4 | 0.2% | May 20, 2025 | TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS an... |
| CVE-2025-45862 | MEDIUM | 6.5 | 0.3% | May 20, 2025 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the interfacenameds parameter in t... |
| CVE-2025-4977 | MEDIUM | 6.9 | 0.5% | May 20, 2025 | A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.15_1.00.15NA. Affected b... |
| CVE-2025-40633 | MEDIUM | 5.1 | 0.3% | May 20, 2025 | A Stored Cross-Site Scripting (XSS) vulnerability has been found in Koibox for versions prior to e8cbce2. This vulnerab... |
| CVE-2025-4951 | MEDIUM | 4.6 | 0.2% | May 20, 2025 | Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in ... |
| CVE-2025-3223 | MEDIUM | 5.9 | 0.2% | May 19, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova WorkstationST... |
| CVE-2025-47946 | MEDIUM | 6.1 | 0.2% | May 19, 2025 | Symfony UX is an initiative and set of libraries to integrate JavaScript tools into applications. Prior to version 2.25.... |
| CVE-2025-46441 | MEDIUM | 5.3 | 0.3% | May 19, 2025 | Path Traversal: '.../...//' vulnerability in ctltwp Section Widget section-widget allows Path Traversal.This issue affec... |
| CVE-2025-31027 | MEDIUM | 6.1 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jocoxdesign Tiger ... |
| CVE-2025-43838 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in ChoPlugins.com Custom PC Builder Lite for WooCommerce custom-pc-builder-lite-for-... |
| CVE-2025-39446 | MEDIUM | 6.1 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl LLC Boost... |
| CVE-2025-43841 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jamesdbruner WP Ve... |
| CVE-2025-43835 | MEDIUM | 4.3 | 0.1% | May 19, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in ktsvetkov wp-cyr-cho wp-cyr-cho allows Cross Site Request Forgery.Thi... |
| CVE-2025-43834 | MEDIUM | 5.9 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tox82 cookieBAR co... |
| CVE-2025-39460 | MEDIUM | 5.3 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in ThimPress Eduma eduma allows Exploiting Incorrectly Configured Access Control Sec... |
| CVE-2025-39454 | MEDIUM | 4.3 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory.This issue affects Name Directory: fr... |
| CVE-2025-39450 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs... |
| CVE-2025-39448 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem... |
| CVE-2025-39412 | MEDIUM | 4.3 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in averta Master Slider master-slider.This issue affects Master Slider: from n/a thr... |
| CVE-2025-39398 | MEDIUM | 4.3 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in Themovation Bellevue bellevuex.This issue affects Bellevue: from n/a through <= 4... |
| CVE-2025-22287 | MEDIUM | 5.4 | 0.2% | May 19, 2025 | Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-fr... |
| CVE-2025-47583 | MEDIUM | 5.4 | 0.1% | May 19, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross... |
| CVE-2025-46543 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CharlyLeetham Enha... |
| CVE-2025-46263 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lloyd Saunders Aut... |
| CVE-2025-46262 | MEDIUM | 6.5 | 0.2% | May 19, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zack Katz Mad Mimi... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now