2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-14338 | HIGH | 8.5 | 0.2% | Jan 14, 2026 | Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v... |
| CVE-2025-0647 | HIGH | 7.9 | 0.2% | Jan 14, 2026 | In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a ... |
| CVE-2025-14770 | HIGH | 7.5 | 0.3% | Jan 14, 2026 | The Shipping Rate By Cities plugin for WordPress is vulnerable to SQL Injection via the 'city' parameter in all versions... |
| CVE-2025-15378 | HIGH | 7.2 | 0.3% | Jan 14, 2026 | The AJS Footnotes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'note_list_class' and 'popup... |
| CVE-2025-15283 | HIGH | 7.2 | 0.3% | Jan 14, 2026 | The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name_directory_name' and ... |
| CVE-2025-15266 | HIGH | 7.2 | 0.2% | Jan 14, 2026 | The GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress is vulnerable to Sto... |
| CVE-2025-14615 | HIGH | 7.1 | 0.1% | Jan 14, 2026 | The DASHBOARD BUILDER – WordPress plugin for Charts and Graphs plugin for WordPress is vulnerable to Cross-Site Request ... |
| CVE-2025-14613 | HIGH | 7.2 | 0.3% | Jan 14, 2026 | The GetContentFromURL plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and inclu... |
| CVE-2025-68968 | HIGH | 7.8 | 0.1% | Jan 14, 2026 | Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affe... |
| CVE-2025-12053 | HIGH | 7.8 | 0.1% | Jan 14, 2026 | The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-... |
| CVE-2025-12052 | HIGH | 7.8 | 0.1% | Jan 14, 2026 | The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-... |
| CVE-2025-12051 | HIGH | 7.8 | 0.2% | Jan 14, 2026 | The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-... |
| CVE-2025-12050 | HIGH | 7.8 | 0.2% | Jan 14, 2026 | The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRECT flag to read a registry value to which an untrusted user-... |
| CVE-2025-37186 | HIGH | 7.8 | 0.2% | Jan 13, 2026 | A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual Intranet Access (VIA)... |
| CVE-2025-68931 | HIGH | 7.5 | 0.2% | Jan 13, 2026 | Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, AES/CBC/PKCS5Padding... |
| CVE-2025-68704 | HIGH | 7.5 | 0.2% | Jan 13, 2026 | Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses java.uti... |
| CVE-2025-68703 | HIGH | 7.5 | 0.1% | Jan 13, 2026 | Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, the salt is derived ... |
| CVE-2025-68702 | HIGH | 7.5 | 0.1% | Jan 13, 2026 | Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses padLeft(... |
| CVE-2025-68701 | HIGH | 7.5 | 0.2% | Jan 13, 2026 | Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses determin... |
| CVE-2025-68698 | HIGH | 7.5 | 0.1% | Jan 13, 2026 | Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses PKCS1Enc... |
| CVE-2025-37178 | HIGH | 7.5 | 0.3% | Jan 13, 2026 | Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data ... |
| CVE-2025-37176 | HIGH | 7.2 | 1.2% | Jan 13, 2026 | A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject s... |
| CVE-2025-37175 | HIGH | 7.2 | 0.4% | Jan 13, 2026 | Arbitrary file upload vulnerability exists in the web-based management interface of mobility conductors running either A... |
| CVE-2025-37174 | HIGH | 7.2 | 0.5% | Jan 13, 2026 | Authenticated arbitrary file write vulnerability exists in the web-based management interface of mobility conductors run... |
| CVE-2025-37173 | HIGH | 7.2 | 0.4% | Jan 13, 2026 | An improper input handling vulnerability exists in the web-based management interface of mobility conductors running eit... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now