2025 CVE Vulnerabilities

45,224 CVEs published in 2025.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2025-0495MEDIUM4.1Buildx is a Docker CLI plugin that extends build capabilities using BuildKit. Cache backends support credentials by set...
CVE-2025-2390MEDIUM6.3A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an...
CVE-2025-29427MEDIUM5.9Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in profile.php vi...
CVE-2025-29425MEDIUM5.5Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in exam_save.php via the parame...
CVE-2025-26042MEDIUM6Uptime Kuma >== 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the ...
CVE-2025-29430MEDIUM4.1Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/room.ph...
CVE-2025-29429MEDIUM6.1Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/program...
CVE-2025-22474MEDIUM6.8Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) a Server-Side Request Forg...
CVE-2025-30143MEDIUM5.4Rule 3000216 (before version 2) in Akamai App & API Protector (with Akamai ASE) before 2024-12-10 does not properly cons...
CVE-2025-26127MEDIUM5A stored cross-site scripting (XSS) vulnerability in the Send for Approval function of FileCloud v23.241.2 allows attack...
CVE-2025-25621MEDIUM4.3Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teach...
CVE-2025-1774MEDIUM6.3Incorrect string encoding vulnerability in NASK - PIB BotSense allows injection of an additional field separator charact...
CVE-2025-29788MEDIUM6.5The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. A vulnerability in versions ...
CVE-2025-27102MEDIUM5.4Agate is central authentication server software for OBiBa epidemiology applications. Prior to version 3.3.0, when regist...
CVE-2025-0833MEDIUM5.4A stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator ...
CVE-2025-0832MEDIUM5.4A stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator fro...
CVE-2025-0830MEDIUM5.4A stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DE...
CVE-2025-0829MEDIUM5.4A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovator from Re...
CVE-2025-0828MEDIUM5.4A stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist...
CVE-2025-0826MEDIUM5.4A stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from ...
CVE-2025-0601MEDIUM5.4A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator ...
CVE-2025-0600MEDIUM5.4A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator ...
CVE-2025-0599MEDIUM5.4A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovat...
CVE-2025-0598MEDIUM5.4A stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Re...
CVE-2025-0596MEDIUM5.4A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator o...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now