2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-15505 | LOW | 2.4 | 0.2% | Jan 11, 2026 | A vulnerability was found in Luxul XWR-600 up to 4.0.1. The affected element is an unknown function of the component Web... |
| CVE-2025-53470 | LOW | 3.1 | 0.3% | Jan 10, 2026 | Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could lead to invalid memo... |
| CVE-2025-62487 | LOW | 3.5 | 0.2% | Jan 9, 2026 | On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked cor... |
| CVE-2025-3950 | LOW | 3.5 | 0.2% | Jan 9, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6 before 18.6.3, and 1... |
| CVE-2025-15224 | LOW | 3.1 | 0.5% | Jan 8, 2026 | When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly s... |
| CVE-2025-62224 | LOW | 3.5 | 0.3% | Jan 7, 2026 | User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacke... |
| CVE-2025-31963 | LOW | 3.3 | 0.1% | Jan 7, 2026 | Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2... |
| CVE-2025-12958 | LOW | 2.7 | 0.2% | Jan 7, 2026 | The Rankology SEO and Analytics Tool plugin for WordPress is vulnerable to unauthorized modification of data due to an i... |
| CVE-2025-9543 | LOW | 3.5 | 0.2% | Jan 5, 2026 | The FlexTable WordPress plugin before 3.19.2 does not sanitise and escape the imported links from Google Sheet cells, w... |
| CVE-2025-15454 | LOW | 3.1 | 0.4% | Jan 5, 2026 | A vulnerability was detected in zhanglun lettura up to 0.1.22. This issue affects some unknown processing of the file sr... |
| CVE-2025-62840 | LOW | 3.3 | 0.2% | Jan 2, 2026 | A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Ba... |
| CVE-2025-69412 | LOW | 3.4 | 0.2% | Jan 1, 2026 | KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API (aka phi... |
| CVE-2025-11964 | LOW | 1.9 | 0.1% | Dec 31, 2025 | On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that U... |
| CVE-2025-11961 | LOW | 1.9 | 0.1% | Dec 31, 2025 | pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buf... |
| CVE-2025-14986 | LOW | 1.3 | 0.4% | Dec 30, 2025 | When frontend.enableExecuteMultiOperation is enabled, the server can apply namespace-scoped validation and feature gates... |
| CVE-2025-15248 | LOW | 3.5 | 0.2% | Dec 30, 2025 | A security flaw has been discovered in sunhailin12315 product-review 商品评价系统 up to 91ead6890b4065bb45b7602d0d73348e75cb46... |
| CVE-2025-69015 | LOW | 3.8 | 0.4% | Dec 30, 2025 | Missing Authorization vulnerability in Automattic Crowdsignal Forms crowdsignal-forms allows Exploiting Incorrectly Conf... |
| CVE-2025-15245 | LOW | 3.3 | 0.6% | Dec 30, 2025 | A vulnerability was found in D-Link DCS-850L 1.02.09. Affected is the function uploadfirmware of the component Firmware ... |
| CVE-2025-15244 | LOW | 3.7 | 0.4% | Dec 30, 2025 | A vulnerability has been found in PHPEMS up to 11.0. This impacts an unknown function of the component Purchase Request ... |
| CVE-2025-15242 | LOW | 3.1 | 0.2% | Dec 30, 2025 | A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function of the component Coupon H... |
| CVE-2025-15241 | LOW | 3.5 | 0.2% | Dec 30, 2025 | A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unkno... |
| CVE-2025-15284 | LOW | 3.7 | 0.4% | Dec 29, 2025 | Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1. Summary... |
| CVE-2025-66861 | LOW | 2.5 | 0.1% | Dec 29, 2025 | An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to caus... |
| CVE-2025-15151 | LOW | 3.7 | 0.3% | Dec 28, 2025 | A vulnerability was determined in TaleLin Lin-CMS up to 0.6.0. This affects an unknown part of the file /tests/config.py... |
| CVE-2025-15149 | LOW | 2.4 | 0.2% | Dec 28, 2025 | A vulnerability has been found in rawchen ecms up to b59d7feaa9094234e8aa6c8c6b290621ca575ded. Affected by this vulnerab... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now