2025 CVE Vulnerabilities
45,320 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-13302 | CRITICAL | 9.8 | 0.3% | Nov 17, 2025 | A vulnerability was identified in code-projects Courier Management System 1.0. This affects an unknown part of the file ... |
| CVE-2025-13301 | CRITICAL | 9.8 | 0.3% | Nov 17, 2025 | A vulnerability was found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected by this vulnerab... |
| CVE-2025-13300 | CRITICAL | 9.8 | 0.3% | Nov 17, 2025 | A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected is an unkno... |
| CVE-2025-13299 | CRITICAL | 9.8 | 0.3% | Nov 17, 2025 | A flaw has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. This impacts an unknown funct... |
| CVE-2025-13298 | CRITICAL | 9.8 | 0.4% | Nov 17, 2025 | A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. This affects an unknow... |
| CVE-2025-55058 | CRITICAL | 9.8 | 0.2% | Nov 17, 2025 | CWE-20 Improper Input Validation |
| CVE-2025-55055 | CRITICAL | 9.8 | 0.7% | Nov 17, 2025 | CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') |
| CVE-2025-13297 | CRITICAL | 9.8 | 0.3% | Nov 17, 2025 | A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impa... |
| CVE-2025-13291 | CRITICAL | 9.8 | 0.3% | Nov 17, 2025 | A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufac... |
| CVE-2025-63747 | CRITICAL | 9.8 | 0.4% | Nov 17, 2025 | QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immedia... |
| CVE-2025-13285 | CRITICAL | 9.8 | 0.4% | Nov 17, 2025 | A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of ... |
| CVE-2025-13280 | CRITICAL | 9.8 | 0.3% | Nov 17, 2025 | A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of ... |
| CVE-2025-13277 | CRITICAL | 9.8 | 0.4% | Nov 17, 2025 | A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of th... |
| CVE-2025-13272 | CRITICAL | 9.8 | 0.3% | Nov 17, 2025 | A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function o... |
| CVE-2025-13271 | CRITICAL | 9.8 | 0.3% | Nov 17, 2025 | A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function ... |
| CVE-2025-13267 | CRITICAL | 9.8 | 0.3% | Nov 17, 2025 | A vulnerability was detected in SourceCodester Dental Clinic Appointment Reservation System 1.0. Impacted is an unknown ... |
| CVE-2025-9501 | CRITICAL | 9 | 19.2% | Nov 17, 2025 | The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc functi... |
| CVE-2025-13265 | CRITICAL | 9.1 | 0.5% | Nov 17, 2025 | A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the... |
| CVE-2025-13262 | CRITICAL | 9.8 | 0.5% | Nov 17, 2025 | A vulnerability was determined in lsfusion platform up to 6.1. Affected by this vulnerability is the function UploadFile... |
| CVE-2025-13284 | CRITICAL | 9.8 | 1.6% | Nov 17, 2025 | ThinPLUS developed by ThinPLUS has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to i... |
| CVE-2025-10460 | CRITICAL | 9.4 | 0.2% | Nov 17, 2025 | A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or p... |
| CVE-2025-13257 | CRITICAL | 9.8 | 0.3% | Nov 17, 2025 | A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an u... |
| CVE-2025-13248 | CRITICAL | 9.8 | 0.3% | Nov 16, 2025 | A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element... |
| CVE-2025-13247 | CRITICAL | 9.8 | 0.3% | Nov 16, 2025 | A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown func... |
| CVE-2025-13242 | CRITICAL | 9.8 | 0.4% | Nov 16, 2025 | A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processi... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now