2025 CVE Vulnerabilities
45,206 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-24587 | HIGH | 7.6 | 32.2% | Jan 24, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nks Email Subscrip... |
| CVE-2025-24570 | HIGH | 7.1 | 0.4% | Jan 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vito Peleg Atarim ... |
| CVE-2025-24562 | HIGH | 7.1 | 0.2% | Jan 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Optimal Access KBucket kbucket allows Stored XSS.This issue affects K... |
| CVE-2025-24561 | HIGH | 7.1 | 0.2% | Jan 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in awcode ReviewsTap reviewstap allows Stored XSS.This issue affects Rev... |
| CVE-2025-24555 | HIGH | 7.1 | 0.2% | Jan 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in subscriptiondna Subscription DNA subscriptiondna allows Stored XSS.Th... |
| CVE-2025-24362 | HIGH | 7.1 | 0.9% | Jan 24, 2025 | In some circumstances, debug artifacts uploaded by the CodeQL Action after a failed code scanning workflow run may conta... |
| CVE-2025-0702 | HIGH | 8.8 | 0.6% | Jan 24, 2025 | A vulnerability classified as critical was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. T... |
| CVE-2025-24359 | HIGH | 8.4 | 0.2% | Jan 24, 2025 | ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the inp... |
| CVE-2025-24355 | HIGH | 7.1 | 0.2% | Jan 24, 2025 | Updatecli is a tool used to apply file update strategies. Prior to version 0.93.0, private maven repository credentials ... |
| CVE-2025-23222 | HIGH | 8.4 | 0.2% | Jan 24, 2025 | An issue was discovered in Deepin dde-api-proxy through 1.0.19 in which unprivileged users can access D-Bus services as ... |
| CVE-2025-0701 | HIGH | 8.8 | 0.4% | Jan 24, 2025 | A vulnerability classified as critical has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf5... |
| CVE-2025-0700 | HIGH | 8.8 | 0.4% | Jan 24, 2025 | A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been rated as cri... |
| CVE-2025-22606 | HIGH | 7.8 | 0.3% | Jan 24, 2025 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In version 4.0.0-bet... |
| CVE-2025-0699 | HIGH | 8.8 | 0.4% | Jan 24, 2025 | A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been declared as ... |
| CVE-2025-0698 | HIGH | 8.8 | 0.4% | Jan 24, 2025 | A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been classified a... |
| CVE-2025-22605 | HIGH | 7.8 | 0.5% | Jan 24, 2025 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Starting in version ... |
| CVE-2025-23889 | HIGH | 7.1 | 0.2% | Jan 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tormorten FooGalle... |
| CVE-2025-23888 | HIGH | 7.1 | 0.2% | Jan 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GrandSlambert Cust... |
| CVE-2025-23885 | HIGH | 7.1 | 0.2% | Jan 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in anildhiman MJ Cont... |
| CVE-2025-23839 | HIGH | 7.1 | 0.2% | Jan 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Asif Shakeel Stick... |
| CVE-2025-23838 | HIGH | 7.1 | 0.2% | Jan 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rally Vincent Baue... |
| CVE-2025-23837 | HIGH | 7.1 | 0.2% | Jan 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in martinjuhasz One B... |
| CVE-2025-23737 | HIGH | 7.1 | 0.2% | Jan 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thobian Network-Fa... |
| CVE-2025-23734 | HIGH | 7.1 | 0.2% | Jan 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Casey Bisson Gigao... |
| CVE-2025-23711 | HIGH | 7.1 | 0.2% | Jan 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Quincy Kwende Quot... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now