2025 CVE Vulnerabilities
45,230 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-20367 | MEDIUM | 5.4 | 0.3% | Oct 1, 2025 | In Splunk Enterprise versions below 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2... |
| CVE-2025-20366 | MEDIUM | 6.5 | 0.4% | Oct 1, 2025 | In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.111, 9.3.... |
| CVE-2025-20361 | MEDIUM | 4.8 | 0.2% | Oct 1, 2025 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Uni... |
| CVE-2025-20357 | MEDIUM | 5.4 | 0.2% | Oct 1, 2025 | A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote ... |
| CVE-2025-20356 | MEDIUM | 5.4 | 0.2% | Oct 1, 2025 | A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote ... |
| CVE-2025-11233 | MEDIUM | 6.3 | 0.5% | Oct 1, 2025 | Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target (`x86_64-pc-cygwin`) didn't correctly handle ... |
| CVE-2025-56515 | HIGH | 8.8 | 0.5% | Oct 1, 2025 | File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fail... |
| CVE-2025-56514 | MEDIUM | 5.4 | 0.3% | Oct 1, 2025 | Cross Site Scripting (XSS) vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malic... |
| CVE-2025-61045 | CRITICAL | 9.8 | 1.5% | Oct 1, 2025 | TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the mac parameter i... |
| CVE-2025-61044 | CRITICAL | 9.8 | 1.0% | Oct 1, 2025 | TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the agentName param... |
| CVE-2025-59687 | MEDIUM | 4.3 | 0.2% | Oct 1, 2025 | IMPAQTR Aurora before 1.36 allows Insecure Direct Object Reference attacks against the users list, organization details,... |
| CVE-2025-59686 | MEDIUM | 6.5 | 0.2% | Oct 1, 2025 | Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id. |
| CVE-2025-59685 | MEDIUM | 5.3 | 0.3% | Oct 1, 2025 | Kazaar 1.25.12 allows a JWT with none in the alg field. |
| CVE-2025-59684 | HIGH | 8.8 | 0.5% | Oct 1, 2025 | DigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking. |
| CVE-2025-57275 | MEDIUM | 5.5 | 0.3% | Oct 1, 2025 | Storage Performance Development Kit (SPDK) 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPD... |
| CVE-2025-52042 | HIGH | 8.2 | 0.3% | Oct 1, 2025 | In Frappe ERPNext 15.57.5, the function get_rfq_containing_supplier() at erpnext/buying/doctype/request_for_quotation/re... |
| CVE-2025-52041 | HIGH | 8.2 | 0.3% | Oct 1, 2025 | In Frappe ERPNext 15.57.5, the function get_stock_balance_for() at erpnext/stock/doctype/stock_reconciliation/stock_reco... |
| CVE-2025-52040 | HIGH | 8.2 | 0.3% | Oct 1, 2025 | In Frappe ERPNext 15.57.5, the function get_blanket_orders() at erpnext/controllers/queries.py is vulnerable to SQL Inje... |
| CVE-2025-52039 | HIGH | 8.2 | 0.3% | Oct 1, 2025 | In Frappe ERPNext 15.57.5, the function get_material_requests_based_on_supplier() at erpnext/stock/doctype/material_requ... |
| CVE-2025-41421 | MEDIUM | 4.7 | 0.1% | Oct 1, 2025 | Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of T... |
| CVE-2025-40648 | MEDIUM | 4.8 | 0.3% | Oct 1, 2025 | Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper va... |
| CVE-2025-40647 | MEDIUM | 5.1 | 0.3% | Oct 1, 2025 | Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper va... |
| CVE-2025-10847 | HIGH | 8.4 | 0.4% | Oct 1, 2025 | DX Unified Infrastructure Management (Nimsoft/UIM) and below contains an improper ACL handling vulnerability in the robo... |
| CVE-2025-61622 | CRITICAL | 9.8 | 41.3% | Oct 1, 2025 | Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from... |
| CVE-2025-39928 | MEDIUM | 5.5 | 0.1% | Oct 1, 2025 | In the Linux kernel, the following vulnerability has been resolved: i2c: rtl9300: ensure data length is within supporte... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now