2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-49045 | HIGH | 7.1 | 0.2% | Jan 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in highwarden Super I... |
| CVE-2025-49043 | HIGH | 7.1 | 0.2% | Jan 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Magic... |
| CVE-2025-48094 | HIGH | 7.1 | 0.2% | Jan 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Magic... |
| CVE-2025-47666 | HIGH | 7.1 | 0.3% | Jan 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Image... |
| CVE-2025-47474 | HIGH | 8.1 | 0.6% | Jan 22, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-32123 | HIGH | 7.1 | 0.3% | Jan 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup HTML5... |
| CVE-2025-27005 | HIGH | 7.1 | 0.2% | Jan 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup HTML5... |
| CVE-2025-69822 | HIGH | 7.4 | 0.3% | Jan 22, 2026 | An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtain sensitive informati... |
| CVE-2025-69821 | HIGH | 7.4 | 0.4% | Jan 22, 2026 | An issue in Beat XP VEGA Smartwatch (Firmware Version - RB303ATV006229) allows an attacker to cause a denial of service ... |
| CVE-2025-36588 | HIGH | 8.8 | 0.6% | Jan 22, 2026 | Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an S... |
| CVE-2025-65098 | HIGH | 7.4 | 0.3% | Jan 22, 2026 | Typebot is an open-source chatbot builder. In versions prior to 3.13.2, client-side script execution in Typebot allows s... |
| CVE-2025-13928 | HIGH | 7.5 | 0.7% | Jan 22, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.6.4, 18.7 before 18.7.2, and 1... |
| CVE-2025-13927 | HIGH | 7.5 | 0.8% | Jan 22, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.9 before 18.6.4, 18.7 before 18.7.2, and 1... |
| CVE-2025-14295 | HIGH | 7 | 0.2% | Jan 22, 2026 | Storing Passwords in a Recoverable Format vulnerability in Automated Logic WebCTRL on Windows, Carrier i-Vu on Windows. ... |
| CVE-2025-10856 | HIGH | 8.1 | 0.3% | Jan 22, 2026 | Unrestricted Upload of File with Dangerous Type vulnerability in Solvera Software Services Trade Inc. Teknoera allows Fi... |
| CVE-2025-10855 | HIGH | 7.5 | 0.4% | Jan 22, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Solvera Software Services Trade Inc. Teknoera allows E... |
| CVE-2025-67684 | HIGH | 7.2 | 0.7% | Jan 22, 2026 | Quick.Cart is vulnerable to Local File Inclusion and Path Traversal issues in the theme selection mechanism. Quick.Cart ... |
| CVE-2025-10024 | HIGH | 7.5 | 0.3% | Jan 22, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in EXERT Computer Technologies Software Ltd. Co. Educatio... |
| CVE-2025-4764 | HIGH | 8.8 | 0.4% | Jan 22, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aida Computer Info... |
| CVE-2025-27380 | HIGH | 7.6 | 0.2% | Jan 22, 2026 | HTML injection in Project Release in Altium Enterprise Server (AES) 7.0.3 on all platforms allows an authenticated attac... |
| CVE-2025-68141 | HIGH | 7.4 | 0.2% | Jan 21, 2026 | EVerest is an EV charging software stack. Prior to version 2025.10.0, during the deserialization of a `DC_ChargeLoopRes`... |
| CVE-2025-68137 | HIGH | 8.3 | 0.3% | Jan 21, 2026 | EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow occurring in `SdpPacket::parse... |
| CVE-2025-68136 | HIGH | 7.4 | 0.3% | Jan 21, 2026 | EVerest is an EV charging software stack. Prior to version 2025.10.0, once the module receives a SDP request, it creates... |
| CVE-2025-68134 | HIGH | 7.4 | 0.2% | Jan 21, 2026 | EVerest is an EV charging software stack. Prior to version 2025.10.0, the use of the `assert` function to handle errors ... |
| CVE-2025-66960 | HIGH | 7.5 | 0.4% | Jan 21, 2026 | An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function rea... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now