2025 CVE Vulnerabilities
45,377 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-26605 | HIGH | 8.8 | 0.5% | Feb 18, 2025 | WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerab... |
| CVE-2025-26604 | HIGH | 8.3 | 0.3% | Feb 18, 2025 | Discord-Bot-Framework-Kernel is a Discord bot framework built with interactions.py, featuring modular extension manageme... |
| CVE-2025-22663 | HIGH | 8.6 | 0.5% | Feb 18, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Paid Videoc... |
| CVE-2025-22657 | HIGH | 7.5 | 0.3% | Feb 18, 2025 | Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Confi... |
| CVE-2025-22656 | HIGH | 8.1 | 0.7% | Feb 18, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-22639 | HIGH | 8.5 | 0.3% | Feb 18, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Techspawn Distance... |
| CVE-2025-25305 | HIGH | 7 | 0.2% | Feb 18, 2025 | Home Assistant Core is an open source home automation that puts local control and privacy first. Affected versions are s... |
| CVE-2025-25284 | HIGH | 8.7 | 0.6% | Feb 18, 2025 | The ZOO-Project is an open source processing platform, released under MIT/X11 Licence. A vulnerability in ZOO-Project's ... |
| CVE-2025-21703 | HIGH | 7.8 | 0.3% | Feb 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: netem: Update sch->q.qlen before qdisc_tree_reduce_... |
| CVE-2025-21702 | HIGH | 7 | 0.3% | Feb 18, 2025 | In the Linux kernel, the following vulnerability has been resolved: pfifo_tail_enqueue: Drop new packet when sch->limit... |
| CVE-2025-0425 | HIGH | 8.5 | 0.2% | Feb 18, 2025 | Via the GUI of the "bestinformed Infoclient", a low-privileged user is by default able to change the server address of t... |
| CVE-2025-0422 | HIGH | 8.6 | 0.8% | Feb 18, 2025 | An authenticated user in the "bestinformed Web" application can execute commands on the underlying server running the ap... |
| CVE-2025-25224 | HIGH | 7.5 | 0.5% | Feb 18, 2025 | The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authenti... |
| CVE-2025-20075 | HIGH | 7.2 | 0.3% | Feb 18, 2025 | Server-side request forgery (SSRF) vulnerability exists in FileMegane versions above 3.0.0.0 prior to 3.4.0.0. Executing... |
| CVE-2025-21103 | HIGH | 7.8 | 0.2% | Feb 17, 2025 | Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s) an improp... |
| CVE-2025-26773 | HIGH | 8.8 | 0.3% | Feb 17, 2025 | Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Cont... |
| CVE-2025-23845 | HIGH | 7.1 | 0.2% | Feb 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ERA404 ImageMeta i... |
| CVE-2025-23840 | HIGH | 7.1 | 0.2% | Feb 17, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webjema WP-NOTCAPT... |
| CVE-2025-1381 | HIGH | 7.5 | 0.5% | Feb 17, 2025 | A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critica... |
| CVE-2025-1389 | HIGH | 8.8 | 0.5% | Feb 17, 2025 | Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges to inject a... |
| CVE-2025-1388 | HIGH | 8.8 | 0.5% | Feb 17, 2025 | Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privil... |
| CVE-2025-1374 | HIGH | 7.5 | 0.4% | Feb 17, 2025 | A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This ... |
| CVE-2025-1372 | HIGH | 7.8 | 0.3% | Feb 17, 2025 | A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the... |
| CVE-2025-1366 | HIGH | 7.8 | 0.3% | Feb 17, 2025 | A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux and classified as critical. Affected by this issu... |
| CVE-2025-1365 | HIGH | 7.8 | 0.3% | Feb 17, 2025 | A vulnerability, which was classified as critical, was found in GNU elfutils 0.192. This affects the function process_sy... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now