2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-63822 | HIGH | 8.1 | 0.4% | Aug 5, 2026 | SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate... |
| CVE-2025-70962 | HIGH | 7.5 | 0.5% | Aug 5, 2026 | Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials ... |
| CVE-2025-15629 | HIGH | 7.5 | — | Aug 3, 2026 | A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communicati... |
| CVE-2025-15628 | HIGH | 7.5 | — | Aug 3, 2026 | Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between contr... |
| CVE-2025-15627 | HIGH | 7.5 | — | Aug 3, 2026 | A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to... |
| CVE-2025-15672 | HIGH | 8.1 | — | Aug 3, 2026 | The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserializa... |
| CVE-2025-71400 | HIGH | 7.1 | 0.4% | Aug 2, 2026 | better-auth passkey versions before 1.4.0 contain an insecure direct object reference vulnerability in the passkey delet... |
| CVE-2025-71399 | HIGH | 8.6 | 0.5% | Aug 2, 2026 | Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalize... |
| CVE-2025-71403 | HIGH | 7.1 | 0.3% | Aug 1, 2026 | better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute ... |
| CVE-2025-67650 | HIGH | 8.6 | — | Jul 31, 2026 | An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralizatio... |
| CVE-2025-69949 | HIGH | 7.3 | 0.2% | Jul 29, 2026 | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters em... |
| CVE-2025-69945 | HIGH | 7.3 | 0.2% | Jul 29, 2026 | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1. |
| CVE-2025-69944 | HIGH | 7.3 | 0.2% | Jul 29, 2026 | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the vie... |
| CVE-2025-67408 | HIGH | 7.3 | 0.2% | Jul 29, 2026 | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /save_user.php via the parameter ... |
| CVE-2025-67407 | HIGH | 7.3 | 0.2% | Jul 29, 2026 | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_student.php via parameters... |
| CVE-2025-67406 | HIGH | 7.3 | — | Jul 29, 2026 | https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execu... |
| CVE-2025-67405 | HIGH | 7.3 | 0.2% | Jul 29, 2026 | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_password.php via the param... |
| CVE-2025-60931 | HIGH | 7.5 | 0.3% | Jul 29, 2026 | An Insecure Direct Object Reference (IDOR) in the Employee Compensation View function of Infor Global HR v11.24.10.01.33... |
| CVE-2025-63913 | HIGH | 7.5 | 0.5% | Jul 27, 2026 | An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI fu... |
| CVE-2025-59172 | HIGH | 8.5 | 0.3% | Jul 27, 2026 | Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vuln... |
| CVE-2025-15662 | HIGH | 8.6 | 0.4% | Jul 27, 2026 | The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-suppl... |
| CVE-2025-71408 | HIGH | 7.8 | 0.3% | Jul 24, 2026 | NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations m... |
| CVE-2025-60835 | HIGH | 7.8 | 0.2% | Jul 22, 2026 | An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal. |
| CVE-2025-50330 | HIGH | 8.8 | 0.7% | Jul 22, 2026 | An issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote attacker to escalate privileges and execute... |
| CVE-2025-50327 | HIGH | 8.8 | 0.7% | Jul 22, 2026 | An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbi... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now