2025 CVE Vulnerabilities

45,377 CVEs published in 2025.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2025-23446HIGH7.1Cross-Site Request Forgery (CSRF) vulnerability in KokoenDE WP SpaceContent wp-spacecontent allows Stored XSS.This issue...
CVE-2025-23441HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dkukral Attach Gal...
CVE-2025-23439HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in willshouse TinyMCE...
CVE-2025-23437HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nord_tramper ntp-h...
CVE-2025-23433HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jnwry vcOS vcos al...
CVE-2025-23425HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in marekki Marekkis W...
CVE-2025-21424HIGH7.8Memory corruption while calling the NPU driver APIs concurrently.
CVE-2025-24846HIGH7.5Authentication bypass vulnerability exists in FutureNet AS series (Industrial Routers) provided by Century Systems Co., ...
CVE-2025-24654HIGH8.8Missing Authorization vulnerability in SEO Squirrly SEO Plugin by Squirrly SEO squirrly-seo.This issue affects SEO Plugi...
CVE-2025-1723HIGH8.1Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session m...
CVE-2025-1855HIGH8.8A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this v...
CVE-2025-1854HIGH8.8A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unkn...
CVE-2025-1851HIGH8.8A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function f...
CVE-2025-1849HIGH8.8A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is an unknown...
CVE-2025-1848HIGH8.8A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is an unknown function of the ...
CVE-2025-20645HIGH7.8In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio...
CVE-2025-1847HIGH8.8A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown proc...
CVE-2025-25951HIGH7.5An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt Ltd Acade...
CVE-2025-25950HIGH8.1Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia Student Info...
CVE-2025-1833HIGH8.8A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. Affected by this issue is t...
CVE-2025-1832HIGH8.8A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is the functi...
CVE-2025-1829HIGH8.8A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability a...
CVE-2025-1820HIGH8.8A vulnerability has been found in zj1983 zz up to 2024-8 and classified as critical. Affected by this vulnerability is t...
CVE-2025-1815HIGH7.3A vulnerability, which was classified as critical, was found in pbrong hrms up to 1.0.1. This affects the function HrmsD...
CVE-2025-1812HIGH8.8A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now