2025 CVE Vulnerabilities

45,206 CVEs published in 2025.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2025-23450HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in agenwebsite AW Woo...
CVE-2025-23447HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kundan Yevale Smoo...
CVE-2025-23446HIGH7.1Cross-Site Request Forgery (CSRF) vulnerability in KokoenDE WP SpaceContent wp-spacecontent allows Stored XSS.This issue...
CVE-2025-23441HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dkukral Attach Gal...
CVE-2025-23439HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in willshouse TinyMCE...
CVE-2025-23437HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nord_tramper ntp-h...
CVE-2025-23433HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jnwry vcOS vcos al...
CVE-2025-23425HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in marekki Marekkis W...
CVE-2025-21424HIGH7.8Memory corruption while calling the NPU driver APIs concurrently.
CVE-2025-24846HIGH7.5Authentication bypass vulnerability exists in FutureNet AS series (Industrial Routers) provided by Century Systems Co., ...
CVE-2025-24654HIGH8.8Missing Authorization vulnerability in SEO Squirrly SEO Plugin by Squirrly SEO squirrly-seo.This issue affects SEO Plugi...
CVE-2025-1723HIGH8.1Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session m...
CVE-2025-1855HIGH8.8A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this v...
CVE-2025-1854HIGH8.8A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unkn...
CVE-2025-1851HIGH8.8A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function f...
CVE-2025-1849HIGH8.8A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is an unknown...
CVE-2025-1848HIGH8.8A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is an unknown function of the ...
CVE-2025-20645HIGH7.8In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio...
CVE-2025-1847HIGH8.8A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown proc...
CVE-2025-25951HIGH7.5An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt Ltd Acade...
CVE-2025-25950HIGH8.1Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia Student Info...
CVE-2025-1833HIGH8.8A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. Affected by this issue is t...
CVE-2025-1832HIGH8.8A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is the functi...
CVE-2025-1829HIGH8.8A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability a...
CVE-2025-1820HIGH8.8A vulnerability has been found in zj1983 zz up to 2024-8 and classified as critical. Affected by this vulnerability is t...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now