2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-68666 | MEDIUM | 6.5 | 0.2% | Jan 28, 2026 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, users a... |
| CVE-2025-61730 | MEDIUM | 5.3 | 0.3% | Jan 28, 2026 | During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instanc... |
| CVE-2025-61728 | MEDIUM | 6.5 | 0.6% | Jan 28, 2026 | archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is open... |
| CVE-2025-13986 | MEDIUM | 4.2 | 0.2% | Jan 28, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Disable Login Page allows Functionality... |
| CVE-2025-13985 | MEDIUM | 5.3 | 0.2% | Jan 28, 2026 | Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue affects Entity Share: f... |
| CVE-2025-13984 | MEDIUM | 6.1 | 0.1% | Jan 28, 2026 | Permissive Cross-domain Security Policy with Untrusted Domains vulnerability in Drupal Next.Js allows Cross-Site Scripti... |
| CVE-2025-13983 | MEDIUM | 5.4 | 0.1% | Jan 28, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allo... |
| CVE-2025-13981 | MEDIUM | 4.4 | 0.1% | Jan 28, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific... |
| CVE-2025-13980 | MEDIUM | 5.3 | 0.2% | Jan 28, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CKEditor 5 Premium Features allows Func... |
| CVE-2025-13979 | MEDIUM | 5.4 | 0.1% | Jan 28, 2026 | Privilege Defined With Unsafe Actions vulnerability in Drupal Mini site allows Stored XSS.This issue affects Mini site: ... |
| CVE-2025-71001 | MEDIUM | 6.5 | 0.4% | Jan 28, 2026 | A segmentation violation in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Serv... |
| CVE-2025-69601 | MEDIUM | 6.5 | 0.6% | Jan 28, 2026 | A directory traversal (Zip Slip) vulnerability exists in the “Static Sites” feature of 66biolinks v44.0.0 by AltumCode. ... |
| CVE-2025-68660 | MEDIUM | 5.4 | 0.2% | Jan 28, 2026 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, an endp... |
| CVE-2025-68659 | MEDIUM | 5.3 | 0.2% | Jan 28, 2026 | Discourse is an open source discussion platform. Versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0 have an app... |
| CVE-2025-68479 | MEDIUM | 5.3 | 0.2% | Jan 28, 2026 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, some su... |
| CVE-2025-67723 | MEDIUM | 5.4 | 0.2% | Jan 28, 2026 | Discourse is an open source discussion platform. Versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0 have a cont... |
| CVE-2025-66488 | MEDIUM | 6.1 | 0.2% | Jan 28, 2026 | Discourse is an open source discussion platform. A vulnerability present in versions prior to 3.5.4, 2025.11.2, 2025.12.... |
| CVE-2025-57796 | MEDIUM | 6.8 | 0.2% | Jan 28, 2026 | Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sen... |
| CVE-2025-46316 | MEDIUM | 4.3 | 0.3% | Jan 28, 2026 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in Pages 15.1, iOS 26.1 and iPad... |
| CVE-2025-46306 | MEDIUM | 5.5 | 0.1% | Jan 28, 2026 | The issue was addressed with improved bounds checks. This issue is fixed in Keynote 15.1, iOS 26 and iPadOS 26, macOS Ta... |
| CVE-2025-33237 | MEDIUM | 5.5 | 0.1% | Jan 28, 2026 | NVIDIA HD Audio Driver for Windows contains a vulnerability where an attacker could exploit a NULL pointer dereference i... |
| CVE-2025-65887 | MEDIUM | 6.5 | 0.3% | Jan 28, 2026 | A division-by-zero vulnerability in the flow.floor_divide() component of OneFlow v0.9.0 allows attackers to cause a Deni... |
| CVE-2025-13919 | MEDIUM | 4.4 | 0.1% | Jan 28, 2026 | Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hija... |
| CVE-2025-13918 | MEDIUM | 6.7 | 0.1% | Jan 28, 2026 | Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a Elevatio... |
| CVE-2025-70336 | MEDIUM | 4.8 | 0.2% | Jan 28, 2026 | A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in PodcastGenerator 3.2.9 allows remote atta... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now