2025 CVE Vulnerabilities

45,224 CVEs published in 2025.

CVE IDSeverityCVSSDescription
CVE-2025-59989MEDIUM6.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Network...
CVE-2025-59988MEDIUM6.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Network...
CVE-2025-59987MEDIUM6.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Network...
CVE-2025-59986MEDIUM6.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Network...
CVE-2025-59985MEDIUM6.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Network...
CVE-2025-59984MEDIUM6.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Network...
CVE-2025-59983MEDIUM6.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Network...
CVE-2025-59982MEDIUM6.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Network...
CVE-2025-59981MEDIUM6.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Network...
CVE-2025-59980MEDIUM6.9An Authentication Bypass by Primary Weakness in the FTP server of Juniper Networks Junos OS allows an unauthenticated, ...
CVE-2025-59978CRITICAL9.4An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Network...
CVE-2025-11549CRITICAL9.8A vulnerability has been found in Tenda W12 3.0.0.6(3948). The affected element is the function wifiMacFilterSet of the ...
CVE-2025-11371HIGH7.5In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local Fil...
CVE-2025-61577HIGH7.5D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the d...
CVE-2025-61532MEDIUM6.1Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on last_heard_pag...
CVE-2025-60302MEDIUM6.1code-projects Client Details System 1.0 is vulnerable to Cross Site Scripting (XSS). When adding customer information, t...
CVE-2025-60265MEDIUM6.5In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtere...
CVE-2025-59976HIGH7.1An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based aut...
CVE-2025-59975HIGH8.7An Uncontrolled Resource Consumption vulnerability in the HTTP daemon (httpd) of Juniper Networks Junos Space allows an ...
CVE-2025-59974CRITICAL9.3An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Junos Space Sec...
CVE-2025-59968HIGH8.6A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated ne...
CVE-2025-59967HIGH7.1A NULL Pointer Dereference vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved...
CVE-2025-59964HIGH8.7A Use of Uninitialized Resource vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX4...
CVE-2025-59962MEDIUM6An Access of Uninitialized Pointer vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and J...
CVE-2025-59958MEDIUM6.9An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now