2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-63452 | CRITICAL | 9.4 | 0.5% | Nov 3, 2025 | Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/forgot-pass.php. |
| CVE-2025-63451 | CRITICAL | 9.8 | 0.6% | Nov 3, 2025 | Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php. |
| CVE-2025-8900 | CRITICAL | 9.8 | 0.4% | Nov 3, 2025 | The Doccure Core plugin for WordPress is vulnerable to privilege escalation in versions up to, and excluding, 1.5.4. Thi... |
| CVE-2025-0987 | CRITICAL | 9.9 | 0.3% | Nov 3, 2025 | Authorization Bypass Through User-Controlled Key vulnerability in CB Project Ltd. Co. CVLand allows Parameter Injection.... |
| CVE-2025-12622 | CRITICAL | 9.8 | 0.9% | Nov 3, 2025 | A vulnerability was determined in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function formSysRunCmd o... |
| CVE-2025-12619 | CRITICAL | 9.8 | 0.9% | Nov 3, 2025 | A vulnerability was found in Tenda A15 15.13.07.13. Affected is the function fromSetWirelessRepeat of the file /goform/o... |
| CVE-2025-12618 | CRITICAL | 9.8 | 5.4% | Nov 3, 2025 | A vulnerability has been found in Tenda AC8 16.03.34.06. This impacts an unknown function of the file /goform/DatabaseIn... |
| CVE-2025-12617 | CRITICAL | 9.8 | 0.5% | Nov 3, 2025 | A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/login_... |
| CVE-2025-12614 | CRITICAL | 9.8 | 0.4% | Nov 3, 2025 | A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function delet... |
| CVE-2025-12612 | CRITICAL | 9.8 | 0.3% | Nov 3, 2025 | A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unkn... |
| CVE-2025-12611 | CRITICAL | 9.8 | 0.7% | Nov 3, 2025 | A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of t... |
| CVE-2025-12608 | CRITICAL | 9.8 | 0.4% | Nov 3, 2025 | A security flaw has been discovered in itsourcecode Online Loan Management System 1.0. The affected element is an unknow... |
| CVE-2025-12607 | CRITICAL | 9.8 | 0.4% | Nov 3, 2025 | A vulnerability was identified in itsourcecode Online Loan Management System 1.0. Impacted is an unknown function of the... |
| CVE-2025-12606 | CRITICAL | 9.8 | 0.4% | Nov 3, 2025 | A vulnerability was determined in itsourcecode Online Loan Management System 1.0. This issue affects some unknown proces... |
| CVE-2025-12605 | CRITICAL | 9.8 | 0.4% | Nov 2, 2025 | A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of ... |
| CVE-2025-12604 | CRITICAL | 9.8 | 0.4% | Nov 2, 2025 | A vulnerability has been found in itsourcecode Online Loan Management System 1.0. This affects an unknown part of the fi... |
| CVE-2025-12598 | CRITICAL | 9.8 | 0.4% | Nov 2, 2025 | A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function ... |
| CVE-2025-12597 | CRITICAL | 9.8 | 0.4% | Nov 2, 2025 | A vulnerability was detected in SourceCodester Best House Rental Management System 1.0. Affected by this vulnerability i... |
| CVE-2025-12596 | CRITICAL | 9.8 | 1.2% | Nov 2, 2025 | A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of ... |
| CVE-2025-12595 | CRITICAL | 9.8 | 1.1% | Nov 2, 2025 | A weakness has been identified in Tenda AC23 16.03.07.52. This impacts the function formSetVirtualSer of the file /gofor... |
| CVE-2025-12603 | CRITICAL | 9.8 | 0.3% | Nov 1, 2025 | /etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. |
| CVE-2025-12602 | CRITICAL | 9.8 | 0.3% | Nov 1, 2025 | /etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1... |
| CVE-2025-12600 | CRITICAL | 9.8 | 0.4% | Nov 1, 2025 | Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1... |
| CVE-2025-12599 | CRITICAL | 9.8 | 0.4% | Nov 1, 2025 | Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-I... |
| CVE-2025-11499 | CRITICAL | 9.8 | 1.1% | Nov 1, 2025 | The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now