2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-69599 | CRITICAL | 9.8 | 0.4% | May 8, 2026 | RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH e... |
| CVE-2025-67887 | CRITICAL | 9.8 | 1.5% | May 8, 2026 | 1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Transla... |
| CVE-2025-63704 | CRITICAL | 9.8 | 0.5% | May 7, 2026 | NPM package query-parser-string 1.0.0 is vulnerable to Prototype Pollution. The package does not properly sanitize user ... |
| CVE-2025-63703 | CRITICAL | 9.8 | 0.4% | May 7, 2026 | npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js(). |
| CVE-2025-63706 | CRITICAL | 9.8 | 1.5% | May 7, 2026 | NPM package next-npm-version1.0.1 is vulnerable to Command injection. |
| CVE-2025-1978 | CRITICAL | 9.8 | 0.5% | May 7, 2026 | Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage ... |
| CVE-2025-9661 | CRITICAL | 9.8 | 0.9% | May 7, 2026 | OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One B... |
| CVE-2025-59852 | CRITICAL | 9.1 | 0.1% | May 6, 2026 | HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted ove... |
| CVE-2025-59851 | CRITICAL | 9.8 | 0.2% | May 6, 2026 | HCL DFXAnalytics is affected by a Using Components with Known Vulnerabilities flaw where the application utilizes unpatc... |
| CVE-2025-13618 | CRITICAL | 9.8 | 0.3% | May 5, 2026 | The Mentoring plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.8. Th... |
| CVE-2025-13605 | CRITICAL | 9.3 | 0.2% | May 4, 2026 | 3onedata modbus gateway device model GW1101-1D(RS-485)-TB-P (hardware version V2.2.0) allows authenticated users to exec... |
| CVE-2025-70067 | CRITICAL | 9.8 | 0.3% | May 4, 2026 | Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiM... |
| CVE-2025-14320 | CRITICAL | 9.8 | 0.3% | May 4, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tegsoft Management... |
| CVE-2025-71284 | CRITICAL | 9.8 | 5.7% | Apr 30, 2026 | Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoi... |
| CVE-2025-14543 | CRITICAL | 9.1 | 0.2% | Apr 30, 2026 | Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows ... |
| CVE-2025-13030 | CRITICAL | 9.8 | 0.3% | Apr 30, 2026 | All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image ... |
| CVE-2025-60889 | CRITICAL | 9.8 | 0.5% | Apr 28, 2026 | Insecure deserialization of untrusted input in StellarGroup HPX 1.11.0 under certain conditions may allow attackers to e... |
| CVE-2025-62373 | CRITICAL | 9.8 | 0.7% | Apr 23, 2026 | Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. Versions 0... |
| CVE-2025-50229 | CRITICAL | 9.8 | 0.4% | Apr 23, 2026 | Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module. |
| CVE-2025-41029 | CRITICAL | 9.3 | 0.2% | Apr 21, 2026 | SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, ... |
| CVE-2025-15638 | CRITICAL | 10 | 0.6% | Apr 21, 2026 | Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before... |
| CVE-2025-15625 | CRITICAL | 9.8 | 0.4% | Apr 17, 2026 | Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases. |
| CVE-2025-41118 | CRITICAL | 9.1 | 0.4% | Apr 15, 2026 | Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Ten... |
| CVE-2025-15610 | CRITICAL | 9.3 | 0.3% | Apr 15, 2026 | The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploi... |
| CVE-2025-70023 | CRITICAL | 9.8 | 0.4% | Apr 14, 2026 | An issue pertaining to CWE-843: Access of Resource Using Incompatible Type was discovered in transloadit uppy v0.25.6. |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now