2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-36147 | MEDIUM | 6.1 | 0.2% | Sep 18, 2026 | IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16 is vulnerable to cross-... |
| CVE-2025-36076 | MEDIUM | 4.3 | 0.2% | Sep 18, 2026 | IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source cod... |
| CVE-2025-36045 | MEDIUM | 4.3 | 0.3% | Sep 18, 2026 | IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service d... |
| CVE-2025-33147 | MEDIUM | 5.9 | 0.2% | Sep 18, 2026 | IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared networ... |
| CVE-2025-33141 | MEDIUM | 6.5 | 0.3% | Sep 18, 2026 | IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information fr... |
| CVE-2025-1350 | MEDIUM | 5.3 | 0.2% | Sep 18, 2026 | IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitiv... |
| CVE-2025-13882 | MEDIUM | 5.3 | 0.2% | Sep 18, 2026 | IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM ... |
| CVE-2025-13533 | MEDIUM | 4.4 | 0.2% | Sep 18, 2026 | The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, an... |
| CVE-2025-56566 | MEDIUM | 4.6 | 0.2% | Sep 16, 2026 | MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile ... |
| CVE-2025-36591 | MEDIUM | 4.4 | 0.1% | Sep 16, 2026 | Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken o... |
| CVE-2025-11395 | MEDIUM | 5.5 | 0.4% | Sep 15, 2026 | A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create ... |
| CVE-2025-5802 | MEDIUM | 5.3 | 0.3% | Sep 15, 2026 | The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of use... |
| CVE-2025-24890 | MEDIUM | 6.8 | 0.2% | Sep 14, 2026 | gitoxide is an implementation of git written in Rust. Prior to 0.13.3, the gix-sec crate on Windows incorrectly treats r... |
| CVE-2025-68624 | MEDIUM | 4.3 | 0.3% | Sep 14, 2026 | N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user ... |
| CVE-2025-63842 | MEDIUM | 5.4 | 0.2% | Sep 14, 2026 | A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote ... |
| CVE-2025-70819 | MEDIUM | 6.3 | 0.1% | Sep 13, 2026 | Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as ... |
| CVE-2025-69904 | MEDIUM | 4.9 | 0.5% | Sep 11, 2026 | Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to read arbitrary files on t... |
| CVE-2025-51619 | MEDIUM | 5.5 | 0.1% | Sep 9, 2026 | A vulnerability in the Thesycon DPC Latency Checker driver (dpc.sys) thru 1.4.0 allows local unprivileged users to cause... |
| CVE-2025-71418 | MEDIUM | 5.3 | 0.4% | Sep 9, 2026 | PocketMine-MP versions before 5.25.2 fail to limit the explode() function in packet parsing, allowing malicious clients ... |
| CVE-2025-71417 | MEDIUM | 6.5 | 0.3% | Sep 9, 2026 | PocketMine-MP before 5.32.1 fails to validate uniqueness of pack UUIDs in ResourcePackClientResponsePacket STATUS_SEND_P... |
| CVE-2025-3271 | MEDIUM | 4.8 | 0.2% | Sep 9, 2026 | Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS |
| CVE-2025-46808 | MEDIUM | 6.8 | 0.2% | Sep 9, 2026 | An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive informatio... |
| CVE-2025-7062 | MEDIUM | 5.2 | 0.3% | Sep 9, 2026 | A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module `h5p-nodejs-library` by Lumi Edu... |
| CVE-2025-15690 | MEDIUM | 6.8 | 0.3% | Sep 9, 2026 | The Content Mask WordPress plugin before 1.8.5.6 does not properly sanitise and escape content submitted with a post bef... |
| CVE-2025-64868 | MEDIUM | 5.4 | 0.3% | Sep 8, 2026 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now