2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-71437 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allow... |
| CVE-2025-60496 | MEDIUM | 5.5 | 0.4% | Oct 20, 2026 | A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box befor... |
| CVE-2025-60494 | MEDIUM | 5.5 | 0.2% | Oct 20, 2026 | A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box be... |
| CVE-2025-60475 | MEDIUM | 5.5 | 0.2% | Oct 20, 2026 | A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows ... |
| CVE-2025-71436 | HIGH | 7.1 | 0.5% | Oct 20, 2026 | Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_t... |
| CVE-2025-36252 | MEDIUM | 6.3 | 0.2% | Oct 19, 2026 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate... |
| CVE-2025-36069 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an auth... |
| CVE-2025-36061 | MEDIUM | 6.5 | 0.3% | Oct 19, 2026 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could al... |
| CVE-2025-60482 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1... |
| CVE-2025-60480 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-D... |
| CVE-2025-55667 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-... |
| CVE-2025-55654 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attacker... |
| CVE-2025-52290 | HIGH | 7.5 | 0.6% | Oct 19, 2026 | A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 all... |
| CVE-2025-7203 | MEDIUM | 4.9 | 0.2% | Oct 19, 2026 | The Management Console and product files expose sensitive data, including remote log server credentials, truststore pass... |
| CVE-2025-7043 | MEDIUM | 5.4 | 0.2% | Oct 19, 2026 | The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid ac... |
| CVE-2025-6623 | MEDIUM | 4.3 | 0.3% | Oct 19, 2026 | The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowin... |
| CVE-2025-13591 | MEDIUM | 5.3 | 0.3% | Oct 19, 2026 | The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does n... |
| CVE-2025-13173 | MEDIUM | 6.5 | 0.2% | Oct 19, 2026 | Tokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another S... |
| CVE-2025-10149 | HIGH | 8.2 | 0.2% | Oct 19, 2026 | The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against th... |
| CVE-2025-71435 | MEDIUM | 4.2 | 0.2% | Oct 17, 2026 | Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access ... |
| CVE-2025-66969 | HIGH | 7.5 | 0.3% | Oct 16, 2026 | Integer overflow in OpenModSim (<=1.11.0), leading to denial of service |
| CVE-2025-55653 | MEDIUM | 5.5 | 0.2% | Oct 16, 2026 | GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_parse_lfrac function (utils/error.c). Pr... |
| CVE-2025-55640 | MEDIUM | 5.5 | 0.2% | Oct 16, 2026 | A heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to caus... |
| CVE-2025-52097 | MEDIUM | 5.4 | 0.3% | Oct 16, 2026 | Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary c... |
| CVE-2025-3778 | — | — | — | Oct 15, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now