2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-66959 | HIGH | 7.5 | 4.5% | Jan 21, 2026 | An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder |
| CVE-2025-70648 | HIGH | 7.5 | 0.3% | Jan 21, 2026 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_727F4 function.... |
| CVE-2025-70646 | HIGH | 7.5 | 0.3% | Jan 21, 2026 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_72290 function. Th... |
| CVE-2025-70644 | HIGH | 7.5 | 0.3% | Jan 21, 2026 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub_60CFC function. This ... |
| CVE-2025-70651 | HIGH | 7.5 | 0.3% | Jan 21, 2026 | Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_se... |
| CVE-2025-70650 | HIGH | 7.5 | 0.3% | Jan 21, 2026 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg... |
| CVE-2025-70645 | HIGH | 7.5 | 0.3% | Jan 21, 2026 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilte... |
| CVE-2025-13878 | HIGH | 7.5 | 8.4% | Jan 21, 2026 | Malformed BRID/HHIT records can cause `named` to terminate unexpectedly. This issue affects BIND 9 versions 9.18.40 thro... |
| CVE-2025-68133 | HIGH | 7.4 | 0.4% | Jan 21, 2026 | EVerest is an EV charging software stack. In versions 2025.9.0 and below, an attacker can exhaust the operating system's... |
| CVE-2025-58744 | HIGH | 7.5 | 0.1% | Jan 20, 2026 | Use of Default Credentials, Hard-coded Credentials vulnerability in C2SGlobalSettings.dll in Milner ImageDirector Cap... |
| CVE-2025-58743 | HIGH | 7.5 | 0.1% | Jan 20, 2026 | Use of a Broken or Risky Cryptographic Algorithm (DES) vulnerability in the Password class in C2SConnections.dll in Mi... |
| CVE-2025-58741 | HIGH | 7.5 | 0.2% | Jan 20, 2026 | Insufficiently Protected Credentials vulnerability in the Credential Field of Milner ImageDirector Capture allows retrie... |
| CVE-2025-66902 | HIGH | 7.5 | 0.4% | Jan 20, 2026 | An input validation issue in in Pithikos websocket-server v.0.6.4 allows a remote attacker to obtain sensitive informati... |
| CVE-2025-66692 | HIGH | 7.5 | 0.3% | Jan 20, 2026 | A buffer over-read in the PublicKey::verify() method of Binance - Trust Wallet Core before commit 5668c67 allows attacke... |
| CVE-2025-63648 | HIGH | 7.5 | 0.3% | Jan 20, 2026 | A NULL pointer dereference in the dacp_reply_playqueueedit_move function (src/httpd_dacp.c) of owntone-server commit b7e... |
| CVE-2025-63647 | HIGH | 7.5 | 0.4% | Jan 20, 2026 | A NULL pointer dereference in the parse_meta function (src/httpd_daap.c) of owntone-server commit 334beb allows attacker... |
| CVE-2025-59466 | HIGH | 7.5 | 0.6% | Jan 20, 2026 | We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable wh... |
| CVE-2025-59465 | HIGH | 7.5 | 3.8% | Jan 20, 2026 | A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unha... |
| CVE-2025-59464 | HIGH | 7.5 | 0.2% | Jan 20, 2026 | A memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to UTF-8 without freein... |
| CVE-2025-57156 | HIGH | 7.5 | 0.4% | Jan 20, 2026 | NULL pointer dereference in the dacp_reply_playqueueedit_clear function in src/httpd_dacp.c in owntone-server through co... |
| CVE-2025-57155 | HIGH | 7.5 | 0.3% | Jan 20, 2026 | NULL pointer dereference in the daap_reply_groups function in src/httpd_daap.c in owntone-server through commit 5e6f19a ... |
| CVE-2025-55131 | HIGH | 7.1 | 3.5% | Jan 20, 2026 | A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using... |
| CVE-2025-33233 | HIGH | 7.8 | 0.2% | Jan 20, 2026 | NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. ... |
| CVE-2025-33230 | HIGH | 7.3 | 1.2% | Jan 20, 2026 | NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS comm... |
| CVE-2025-33229 | HIGH | 7.3 | 0.2% | Jan 20, 2026 | NVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitra... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now