2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-60803 | CRITICAL | 9.8 | 0.6% | Oct 24, 2025 | Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution (RCE) vulner... |
| CVE-2025-60554 | CRITICAL | 9.8 | 0.4% | Oct 24, 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formS... |
| CVE-2025-60553 | CRITICAL | 9.8 | 0.4% | Oct 24, 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formS... |
| CVE-2025-60548 | CRITICAL | 9.8 | 0.4% | Oct 24, 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formL... |
| CVE-2025-12176 | CRITICAL | 9.8 | 0.3% | Oct 24, 2025 | Undocumented administrative accounts were getting created to facilitate access for applications running on board.This is... |
| CVE-2025-8536 | CRITICAL | 9.3 | 0.3% | Oct 24, 2025 | A SQL injection vulnerability has been identified in DobryCMS. Improper neutralization of input provided by user into la... |
| CVE-2025-43995 | CRITICAL | 9.8 | 0.8% | Oct 24, 2025 | Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability. An ... |
| CVE-2025-11253 | CRITICAL | 9.8 | 0.4% | Oct 24, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aksis Technology I... |
| CVE-2025-6440 | CRITICAL | 9.8 | 33.3% | Oct 24, 2025 | The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress the... |
| CVE-2025-61934 | CRITICAL | 10 | 0.7% | Oct 23, 2025 | A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. T... |
| CVE-2025-59503 | CRITICAL | 9.8 | 0.8% | Oct 23, 2025 | Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a... |
| CVE-2025-59273 | CRITICAL | 9.8 | 0.4% | Oct 23, 2025 | Improper access control in Azure Event Grid allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2025-58428 | CRITICAL | 9.9 | 1.4% | Oct 23, 2025 | The TLS4B ATG system's SOAP-based interface is vulnerable due to its accessibility through the web services handler. Thi... |
| CVE-2025-11023 | CRITICAL | 9.8 | 0.6% | Oct 23, 2025 | Inclusion of Functionality from Untrusted Control Sphere, Improper Control of Filename for Include/Require Statement in ... |
| CVE-2025-47699 | CRITICAL | 9.9 | 0.3% | Oct 23, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher Morpho integration... |
| CVE-2025-12104 | CRITICAL | 9.8 | 0.4% | Oct 23, 2025 | Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.... |
| CVE-2025-62025 | CRITICAL | 9.8 | 0.6% | Oct 22, 2025 | Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a ... |
| CVE-2025-62023 | CRITICAL | 9 | 0.4% | Oct 22, 2025 | Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member.This issue... |
| CVE-2025-60238 | CRITICAL | 9.8 | 0.6% | Oct 22, 2025 | Deserialization of Untrusted Data vulnerability in universam UNIVERSAM universam-demo allows Object Injection.This issue... |
| CVE-2025-60232 | CRITICAL | 9.8 | 0.6% | Oct 22, 2025 | Deserialization of Untrusted Data vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Objec... |
| CVE-2025-60226 | CRITICAL | 9.8 | 0.6% | Oct 22, 2025 | Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This iss... |
| CVE-2025-60225 | CRITICAL | 9.8 | 0.6% | Oct 22, 2025 | Deserialization of Untrusted Data vulnerability in AncoraThemes BugsPatrol bugspatrol allows Object Injection.This issue... |
| CVE-2025-60224 | CRITICAL | 9.8 | 0.6% | Oct 22, 2025 | Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object I... |
| CVE-2025-60221 | CRITICAL | 9.8 | 0.6% | Oct 22, 2025 | Deserialization of Untrusted Data vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Object Injec... |
| CVE-2025-60220 | CRITICAL | 9.8 | 0.5% | Oct 22, 2025 | Incorrect Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now