2025 CVE Vulnerabilities
45,230 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-57428 | MEDIUM | 6.5 | 0.2% | Sep 29, 2025 | Default credentials in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to gain... |
| CVE-2025-9648 | HIGH | 8.7 | 0.7% | Sep 29, 2025 | A vulnerability in the CivetWeb library's function mg_handle_form_request allows remote attackers to trigger a denial of... |
| CVE-2025-8868 | HIGH | 8.8 | 22.8% | Sep 29, 2025 | In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain acc... |
| CVE-2025-6724 | HIGH | 8.8 | 0.3% | Sep 29, 2025 | In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain acc... |
| CVE-2025-11150 | — | — | — | Sep 29, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2025-11147 | MEDIUM | 5.4 | 0.2% | Sep 29, 2025 | Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts (XSS) to be exe... |
| CVE-2025-11146 | MEDIUM | 5.4 | 0.2% | Sep 29, 2025 | Reflected Cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious ... |
| CVE-2025-10346 | MEDIUM | 6.1 | 0.2% | Sep 29, 2025 | HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validatio... |
| CVE-2025-10345 | MEDIUM | 6.1 | 0.2% | Sep 29, 2025 | HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validatio... |
| CVE-2025-10344 | MEDIUM | 6.1 | 0.2% | Sep 29, 2025 | HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validatio... |
| CVE-2025-10343 | MEDIUM | 6.1 | 0.2% | Sep 29, 2025 | HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validatio... |
| CVE-2025-10342 | MEDIUM | 6.1 | 0.2% | Sep 29, 2025 | HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validatio... |
| CVE-2025-10341 | MEDIUM | 6.1 | 0.2% | Sep 29, 2025 | HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validatio... |
| CVE-2025-48006 | CRITICAL | 9.1 | 0.5% | Sep 29, 2025 | Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier. If a speciall... |
| CVE-2025-11141 | MEDIUM | 4.7 | 3.9% | Sep 29, 2025 | A security flaw has been discovered in Ruijie NBR2100G-E up to 20250919. Affected by this issue is the function listActi... |
| CVE-2025-10504 | MEDIUM | 6.9 | 0.2% | Sep 29, 2025 | Heap-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33. |
| CVE-2025-11140 | CRITICAL | 9.8 | 0.6% | Sep 29, 2025 | A vulnerability was identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this vulnerability is the function openForm ... |
| CVE-2025-11139 | CRITICAL | 9.8 | 0.7% | Sep 29, 2025 | A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the compone... |
| CVE-2025-11138 | HIGH | 8.8 | 4.2% | Sep 29, 2025 | A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common... |
| CVE-2025-11137 | LOW | 3.5 | 0.2% | Sep 29, 2025 | A vulnerability has been found in Gstarsoft GstarCAD up to 9.4.0. This affects an unknown function of the component File... |
| CVE-2025-11136 | HIGH | 7.2 | 0.4% | Sep 29, 2025 | A flaw has been found in YiFang CMS up to 2.0.2. The impacted element is the function webUploader of the file app/app/co... |
| CVE-2025-11135 | HIGH | 7.3 | 0.4% | Sep 29, 2025 | A vulnerability was detected in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. The... |
| CVE-2025-9904 | MEDIUM | 6.9 | 0.4% | Sep 29, 2025 | Unallocated memory access vulnerability in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Pr... |
| CVE-2025-9903 | MEDIUM | 5.9 | 0.3% | Sep 29, 2025 | Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printe... |
| CVE-2025-7698 | MEDIUM | 5.9 | 0.3% | Sep 29, 2025 | Out-of-bounds read vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now