2025 CVE Vulnerabilities
45,373 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-3821 | MEDIUM | 5.4 | 0.3% | Apr 20, 2025 | A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as pr... |
| CVE-2025-43921 | MEDIUM | 5.3 | 0.4% | Apr 20, 2025 | GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/cr... |
| CVE-2025-43918 | MEDIUM | 6.4 | 0.1% | Apr 19, 2025 | SSL.com before 2025-04-19, when domain validation method 3.2.2.4.14 is used, processes certificate requests such that a ... |
| CVE-2025-3818 | MEDIUM | 6.3 | 0.3% | Apr 19, 2025 | A vulnerability, which was classified as critical, was found in webpy web.py 0.70. Affected is the function PostgresDB._... |
| CVE-2025-3808 | MEDIUM | 6.5 | 0.3% | Apr 19, 2025 | A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic. This vulnerability affects unknow... |
| CVE-2025-3806 | MEDIUM | 4.8 | 0.3% | Apr 19, 2025 | A vulnerability, which was classified as problematic, has been found in dazhouda lecms up to 3.0.3. Affected by this iss... |
| CVE-2025-3805 | MEDIUM | 5.3 | 0.2% | Apr 19, 2025 | A vulnerability classified as critical was found in sarrionandia tournatrack up to 4c13a23f43da5317eea4614870a7a8510fc54... |
| CVE-2025-3804 | MEDIUM | 5.3 | 0.2% | Apr 19, 2025 | A vulnerability classified as critical has been found in thautwarm vscode-diana 0.0.1. Affected is an unknown function o... |
| CVE-2025-3801 | MEDIUM | 4.8 | 0.3% | Apr 19, 2025 | A vulnerability was found in songquanpeng one-api up to 0.6.10. It has been classified as problematic. This affects an u... |
| CVE-2025-3661 | MEDIUM | 6.4 | 0.3% | Apr 19, 2025 | The SB Chart block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in al... |
| CVE-2025-3275 | MEDIUM | 6.4 | 0.3% | Apr 19, 2025 | The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slide... |
| CVE-2025-1457 | MEDIUM | 6.4 | 0.3% | Apr 19, 2025 | The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is v... |
| CVE-2025-3284 | MEDIUM | 4.3 | 0.1% | Apr 19, 2025 | The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vuln... |
| CVE-2025-36625 | MEDIUM | 4.3 | 0.2% | Apr 18, 2025 | In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging entries by manipulating http... |
| CVE-2025-32377 | MEDIUM | 6.5 | 0.4% | Apr 18, 2025 | Rasa Pro is a framework for building scalable, dynamic conversational AI assistants that integrate large language models... |
| CVE-2025-25984 | MEDIUM | 6.8 | 0.3% | Apr 18, 2025 | An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proxim... |
| CVE-2025-28355 | MEDIUM | 4.7 | 0.2% | Apr 18, 2025 | Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execu... |
| CVE-2025-29513 | MEDIUM | 6.1 | 13.0% | Apr 18, 2025 | Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in ... |
| CVE-2025-29512 | MEDIUM | 6.1 | 0.2% | Apr 18, 2025 | Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and... |
| CVE-2025-32796 | MEDIUM | 6.5 | 0.4% | Apr 18, 2025 | Dify is an open-source LLM app development platform. Prior to version 0.6.12, a vulnerability was identified in the DIFY... |
| CVE-2025-32795 | MEDIUM | 6.5 | 0.2% | Apr 18, 2025 | Dify is an open-source LLM app development platform. Prior to version 0.6.12, a vulnerability was identified in the DIFY... |
| CVE-2025-32389 | MEDIUM | 6.5 | 0.4% | Apr 18, 2025 | NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Prior to version 2.1.4, NamelessMC ... |
| CVE-2025-31120 | MEDIUM | 5.3 | 0.4% | Apr 18, 2025 | NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, an inse... |
| CVE-2025-30357 | MEDIUM | 6.8 | 0.4% | Apr 18, 2025 | NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, if a ma... |
| CVE-2025-27599 | MEDIUM | 6.5 | 0.3% | Apr 18, 2025 | Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now