2025 CVE Vulnerabilities
45,224 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-2706 | MEDIUM | 6.3 | 0.3% | Mar 24, 2025 | A vulnerability classified as critical was found in Digiwin ERP 5.0.1. Affected by this vulnerability is an unknown func... |
| CVE-2025-22223 | MEDIUM | 5.3 | 0.5% | Mar 24, 2025 | Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. Th... |
| CVE-2025-23204 | MEDIUM | 4.4 | 0.3% | Mar 24, 2025 | API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. Starting in version 3.3.8, a security c... |
| CVE-2025-0256 | MEDIUM | 6.5 | 0.3% | Mar 24, 2025 | HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on th... |
| CVE-2025-1558 | MEDIUM | 6.5 | 0.3% | Mar 24, 2025 | Mattermost Mobile Apps versions <=2.25.0 fail to properly validate GIF images prior to rendering which allows a maliciou... |
| CVE-2025-30623 | MEDIUM | 5.9 | 0.3% | Mar 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rachel Cherry wA11... |
| CVE-2025-30619 | MEDIUM | 5.4 | 0.2% | Mar 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in SpeakPipe SpeakPipe speakpipe-voicemail-for-websites allows Cross Sit... |
| CVE-2025-30617 | MEDIUM | 4.3 | 0.2% | Mar 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in takien Rewrite rewrite allows Cross Site Request Forgery.This issue a... |
| CVE-2025-30610 | MEDIUM | 5.4 | 0.3% | Mar 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Soc... |
| CVE-2025-30609 | MEDIUM | 5.3 | 0.4% | Mar 24, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal AppExperts appexperts allows Retrieve Embe... |
| CVE-2025-30606 | MEDIUM | 5.9 | 0.3% | Mar 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Logan Carlile Easy... |
| CVE-2025-30605 | MEDIUM | 4.3 | 0.3% | Mar 24, 2025 | Missing Authorization vulnerability in ldwin79 sourceplay-navermap sourceplay-navermap allows Exploiting Incorrectly Con... |
| CVE-2025-30601 | MEDIUM | 4.3 | 0.2% | Mar 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in flipdish Flipdish Ordering System flipdish-ordering-system allows Cro... |
| CVE-2025-30600 | MEDIUM | 5.9 | 0.3% | Mar 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thiagogsrwp WP Hot... |
| CVE-2025-30599 | MEDIUM | 5.9 | 0.3% | Mar 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp-maverick WP Par... |
| CVE-2025-30598 | MEDIUM | 4.3 | 0.2% | Mar 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Link OSS Upload oss-upload allows Cross Site Request Forgery.This iss... |
| CVE-2025-30597 | MEDIUM | 6.5 | 0.3% | Mar 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iografica IG Short... |
| CVE-2025-30595 | MEDIUM | 6.5 | 0.3% | Mar 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tstafford include-... |
| CVE-2025-30593 | MEDIUM | 6.5 | 0.3% | Mar 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in samsk Include URL ... |
| CVE-2025-30592 | MEDIUM | 5.3 | 0.3% | Mar 24, 2025 | Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly C... |
| CVE-2025-30591 | MEDIUM | 5.3 | 0.3% | Mar 24, 2025 | Missing Authorization vulnerability in tuyennv Music Press Pro music-press-pro allows Exploiting Incorrectly Configured ... |
| CVE-2025-30585 | MEDIUM | 4.3 | 0.2% | Mar 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in marynixie Generate Post Thumbnails generate-post-thumbnails allows Cr... |
| CVE-2025-30581 | MEDIUM | 5.3 | 0.4% | Mar 24, 2025 | Missing Authorization vulnerability in PluginOps Top Bar ultimate-bar allows Exploiting Incorrectly Configured Access Co... |
| CVE-2025-30576 | MEDIUM | 4.3 | 0.2% | Mar 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in HuangYe WuDeng Hacklog Remote Image Autosave hacklog-remote-image-aut... |
| CVE-2025-30575 | MEDIUM | 5.9 | 0.3% | Mar 24, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arefly Login Redir... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now