2025 CVE Vulnerabilities

45,227 CVEs published in 2025.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2025-25131MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in randyjensen RJ Qui...
CVE-2025-25115MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zeshan Abdullah Li...
CVE-2025-25084MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in antrouss UniTimeta...
CVE-2025-23829MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codingkart Woo Upd...
CVE-2025-23763MEDIUM6.5Missing Authorization vulnerability in Alex Volkov WAH Forms allows Exploiting Incorrectly Configured Access Control Sec...
CVE-2025-23615MEDIUM6.5Missing Authorization vulnerability in gtekelis Interactive Page Hierarchy interactive-page-hierarchy allows Exploiting ...
CVE-2025-23613MEDIUM6.5Missing Authorization vulnerability in mediabeta WP Journal wpjournal allows Exploiting Incorrectly Configured Access Co...
CVE-2025-23579MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in digitalzoomstudio ...
CVE-2025-23526MEDIUM6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SwiftCloud Swift C...
CVE-2025-23515MEDIUM6.5Missing Authorization vulnerability in tsecher ts-tree ts-tree allows Exploiting Incorrectly Configured Access Control S...
CVE-2025-23480MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MicahBlu RSVP ME r...
CVE-2025-23440MEDIUM6.3Missing Authorization vulnerability in radicaldesigns radSLIDE radslide allows Exploiting Incorrectly Configured Access ...
CVE-2025-1868MEDIUM6.9Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scann...
CVE-2025-0475MEDIUM6.1An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, an...
CVE-2025-25280MEDIUM5.3Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Mach...
CVE-2025-20653MEDIUM6.5In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosur...
CVE-2025-20652MEDIUM4.6In V5 DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis...
CVE-2025-20651MEDIUM4.1In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo...
CVE-2025-20650MEDIUM6.8In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri...
CVE-2025-20649MEDIUM6.5In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to ...
CVE-2025-20648MEDIUM5.5In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl...
CVE-2025-20647MEDIUM6.5In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, i...
CVE-2025-20644MEDIUM6.5In Modem, there is a possible memory corruption due to incorrect error handling. This could lead to remote denial of ser...
CVE-2025-1846MEDIUM6.5A vulnerability was found in zj1983 zz up to 2024-8. It has been declared as problematic. This vulnerability affects the...
CVE-2025-27585MEDIUM5.4A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now