2025 CVE Vulnerabilities
45,221 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-20329 | MEDIUM | 4.9 | 0.3% | Oct 15, 2025 | A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software cou... |
| CVE-2025-10577 | HIGH | 8.5 | 0.1% | Oct 15, 2025 | Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research ... |
| CVE-2025-10576 | HIGH | 8.5 | 0.1% | Oct 15, 2025 | Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research ... |
| CVE-2025-62379 | LOW | 3.1 | 0.2% | Oct 15, 2025 | Reflex is a library to build full-stack web apps in pure Python. In versions 0.5.4 through 0.8.14, the /auth-codespace e... |
| CVE-2025-62370 | HIGH | 7.5 | 0.4% | Oct 15, 2025 | Alloy Core libraries at the root of the Rust Ethereum ecosystem. Prior to 0.8.26 and 1.4.1, an uncaught panic triggered ... |
| CVE-2025-61990 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microk... |
| CVE-2025-61935 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the ... |
| CVE-2025-61933 | MEDIUM | 6.1 | 0.2% | Oct 15, 2025 | A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of BIG-IP APM that allows an attacker... |
| CVE-2025-59419 | MEDIUM | 5.5 | 1.6% | Oct 15, 2025 | Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.128.Final and 4.2.7.Final... |
| CVE-2025-58071 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to... |
| CVE-2025-57780 | HIGH | 8.8 | 0.2% | Oct 15, 2025 | A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalat... |
| CVE-2025-53860 | MEDIUM | 4.1 | 0.1% | Oct 15, 2025 | A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIP... |
| CVE-2025-2529 | LOW | 3.7 | 0.2% | Oct 15, 2025 | Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application u... |
| CVE-2025-9548 | MEDIUM | 6.8 | 0.1% | Oct 15, 2025 | A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a... |
| CVE-2025-8486 | HIGH | 8.5 | 0.1% | Oct 15, 2025 | A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with el... |
| CVE-2025-6026 | LOW | 3.1 | 0.1% | Oct 15, 2025 | An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could all... |
| CVE-2025-56749 | CRITICAL | 9.4 | 0.5% | Oct 15, 2025 | Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing. This predictabl... |
| CVE-2025-56748 | MEDIUM | 6.4 | 0.2% | Oct 15, 2025 | Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templat... |
| CVE-2025-55083 | MEDIUM | 5.3 | 0.2% | Oct 15, 2025 | In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check result... |
| CVE-2025-10699 | MEDIUM | 6 | 0.2% | Oct 15, 2025 | A vulnerability was reported in the Lenovo LeCloud client application that, under certain conditions, could allow inform... |
| CVE-2025-10581 | HIGH | 8.5 | 0.1% | Oct 15, 2025 | A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment t... |
| CVE-2025-61974 | HIGH | 8.7 | 0.4% | Oct 15, 2025 | When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory resour... |
| CVE-2025-61960 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause the ... |
| CVE-2025-61958 | HIGH | 8.7 | 0.4% | Oct 15, 2025 | A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administ... |
| CVE-2025-61955 | HIGH | 8.8 | 0.2% | Oct 15, 2025 | A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escala... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now