2025 CVE Vulnerabilities
45,364 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-2221 | HIGH | 7.5 | 1.7% | Mar 14, 2025 | The WPCOM Member plugin for WordPress is vulnerable to time-based SQL Injection via the ‘user_phone’ parameter in all ve... |
| CVE-2025-2289 | HIGH | 8.8 | 0.3% | Mar 14, 2025 | The Zegen - Church WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability ... |
| CVE-2025-2103 | HIGH | 8.8 | 0.3% | Mar 14, 2025 | The SoundRise Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege e... |
| CVE-2025-1764 | HIGH | 7.5 | 0.2% | Mar 14, 2025 | The LoginPress | wp-login Custom Login Page Customizer plugin for WordPress is vulnerable to Cross-Site Request Forgery ... |
| CVE-2025-0952 | HIGH | 8.1 | 0.3% | Mar 14, 2025 | The Eco Nature - Environment & Ecology WordPress Theme theme for WordPress is vulnerable to unauthorized modification of... |
| CVE-2025-2056 | HIGH | 7.5 | 0.5% | Mar 14, 2025 | The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Path Traversal in all versio... |
| CVE-2025-24855 | HIGH | 7.8 | 0.3% | Mar 14, 2025 | numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can ... |
| CVE-2025-2230 | HIGH | 8.5 | 0.2% | Mar 13, 2025 | A flaw exists in the Windows login flow where an AuthContext token can be exploited for replay attacks and authenticati... |
| CVE-2025-2229 | HIGH | 8.5 | 0.1% | Mar 13, 2025 | A token is created using the username, current date/time, and a fixed AES-128 encryption key, which is the same across ... |
| CVE-2025-25598 | HIGH | 8.8 | 0.4% | Mar 13, 2025 | Incorrect access control in the scheduled tasks console of Inova Logic CUSTOMER MONITOR (CM) v3.1.757.1 allows attackers... |
| CVE-2025-24053 | HIGH | 7.2 | 0.7% | Mar 13, 2025 | Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network. |
| CVE-2025-2284 | HIGH | 7.5 | 5.7% | Mar 13, 2025 | A denial-of-service vulnerability exists in the "GetWebLoginCredentials" function in "Sante PACS Server.exe". |
| CVE-2025-2265 | HIGH | 7.8 | 0.1% | Mar 13, 2025 | The password of a web user in "Sante PACS Server.exe" is zero-padded to 0x2000 bytes, SHA1-hashed, base64-encoded, and s... |
| CVE-2025-2264 | HIGH | 7.5 | 38.7% | Mar 13, 2025 | A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attac... |
| CVE-2025-2081 | HIGH | 8.7 | 0.4% | Mar 13, 2025 | Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to a... |
| CVE-2025-2079 | HIGH | 8.7 | 0.4% | Mar 13, 2025 | Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard code... |
| CVE-2025-29773 | HIGH | 7.8 | 0.3% | Mar 13, 2025 | Froxlor is open-source server administration software. A vulnerability in versions prior to 2.2.6 allows users (such as ... |
| CVE-2025-27107 | HIGH | 8.6 | 0.5% | Mar 13, 2025 | Integrated Scripting is a tool for creating scripts for handling complex operations in Integrated Dynamics. Minecraft us... |
| CVE-2025-1652 | HIGH | 7.8 | 0.2% | Mar 13, 2025 | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A... |
| CVE-2025-1651 | HIGH | 7.8 | 0.2% | Mar 13, 2025 | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A... |
| CVE-2025-1650 | HIGH | 7.8 | 0.2% | Mar 13, 2025 | A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnera... |
| CVE-2025-1649 | HIGH | 7.8 | 0.2% | Mar 13, 2025 | A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnera... |
| CVE-2025-1433 | HIGH | 7.8 | 0.2% | Mar 13, 2025 | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A... |
| CVE-2025-1432 | HIGH | 7.8 | 0.3% | Mar 13, 2025 | A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vulnerability. A malici... |
| CVE-2025-1431 | HIGH | 7.8 | 0.2% | Mar 13, 2025 | A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now