2025 CVE Vulnerabilities
45,377 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-24968 | HIGH | 8.8 | 0.6% | Feb 4, 2025 | reNgine is an automated reconnaissance framework for web applications. An unrestricted project deletion vulnerability al... |
| CVE-2025-24964 | HIGH | 8.8 | 0.6% | Feb 4, 2025 | Vitest is a testing framework powered by Vite. Affected versions are subject to arbitrary remote Code Execution when acc... |
| CVE-2025-24963 | HIGH | 7.5 | 2.3% | Feb 4, 2025 | Vitest is a testing framework powered by Vite. The `__screenshot-error` handler on the browser mode HTTP server that res... |
| CVE-2025-25039 | HIGH | 8.8 | 0.6% | Feb 4, 2025 | A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows rem... |
| CVE-2025-23060 | HIGH | 8.1 | 0.2% | Feb 4, 2025 | A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unen... |
| CVE-2025-23058 | HIGH | 8.1 | 0.7% | Feb 4, 2025 | A vulnerability in the ClearPass Policy Manager web-based management interface allows a low-privileged (read-only) authe... |
| CVE-2025-24648 | HIGH | 7.5 | 0.4% | Feb 4, 2025 | Incorrect Privilege Assignment vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancements allows Pr... |
| CVE-2025-24602 | HIGH | 7.1 | 0.2% | Feb 4, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP24 WP24 Domain C... |
| CVE-2025-24599 | HIGH | 7.1 | 0.2% | Feb 4, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software... |
| CVE-2025-23645 | HIGH | 7.1 | 0.2% | Feb 4, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Optimize Worldwide... |
| CVE-2025-22794 | HIGH | 7.1 | 0.2% | Feb 4, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ianhaycox World Cu... |
| CVE-2025-22700 | HIGH | 8.5 | 0.3% | Feb 4, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Travele... |
| CVE-2025-1014 | HIGH | 8.8 | 0.4% | Feb 4, 2025 | Certificate length was not properly checked when added to a certificate store. In practice only trusted data was process... |
| CVE-2025-1012 | HIGH | 7.5 | 0.5% | Feb 4, 2025 | A race during concurrent delazification could have led to a use-after-free. This vulnerability was fixed in Firefox 135,... |
| CVE-2025-1011 | HIGH | 8.8 | 0.6% | Feb 4, 2025 | A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage t... |
| CVE-2025-1010 | HIGH | 8.8 | 0.5% | Feb 4, 2025 | An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash.... |
| CVE-2025-23015 | HIGH | 8.8 | 0.9% | Feb 4, 2025 | Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES... |
| CVE-2025-22205 | HIGH | 7.5 | 0.5% | Feb 4, 2025 | Improper handling of input variables lead to multiple path traversal vulnerabilities in the Admiror Gallery extension fo... |
| CVE-2025-20890 | HIGH | 7.8 | 0.1% | Feb 4, 2025 | Out-of-bounds write in decoding frame buffer in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to e... |
| CVE-2025-20888 | HIGH | 7.8 | 0.1% | Feb 4, 2025 | Out-of-bounds write in handling the block size for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local ... |
| CVE-2025-20882 | HIGH | 7.8 | 0.2% | Feb 4, 2025 | Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1 allows ... |
| CVE-2025-20881 | HIGH | 7.8 | 0.2% | Feb 4, 2025 | Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SMR Jan-2025 Release 1... |
| CVE-2025-22475 | HIGH | 7.5 | 0.2% | Feb 4, 2025 | Dell PowerProtect DD, versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.10 contains a use of a Cryptographic Primiti... |
| CVE-2025-1003 | HIGH | 8.5 | 0.2% | Feb 4, 2025 | A potential vulnerability has been identified in HP Anyware Agent for Linux which might allow for authentication bypass ... |
| CVE-2025-24958 | HIGH | 8.8 | 0.5% | Feb 3, 2025 | WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA applicatio... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now