2025 CVE Vulnerabilities

45,230 CVEs published in 2025.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2025-26883MEDIUM6.5Missing Authorization vulnerability in bPlugins Animated Text Block animated-text-block allows Exploiting Incorrectly Co...
CVE-2025-23017MEDIUM6WorkOS Hosted AuthKit before 2025-01-07 allows a password authentication MFA bypass (by enrolling a new authentication f...
CVE-2025-1632MEDIUM5.5A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function li...
CVE-2025-0545MEDIUM4.7Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tekrom Tech...
CVE-2025-1488MEDIUM6.1The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Open Redirect in all versions up to, and i...
CVE-2025-24526MEDIUM4.3Mattermost versions 10.1.x <= 10.1.3, 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to res...
CVE-2025-24490MEDIUM6.5Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to use prepared statemen...
CVE-2025-20051MEDIUM6.5Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to properly validate inp...
CVE-2025-0690MEDIUM6.1The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit int...
CVE-2025-1629MEDIUM5.1A vulnerability was found in Excitel Broadband Private my Excitel App 3.13.0 on Android. It has been classified as probl...
CVE-2025-1618MEDIUM6.1A vulnerability has been found in vTiger CRM 6.4.0/6.5.0 and classified as problematic. This vulnerability affects unkno...
CVE-2025-1617MEDIUM4.8A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part ...
CVE-2025-1615MEDIUM4.8A vulnerability classified as problematic was found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this vulnerabil...
CVE-2025-1614MEDIUM4.8A vulnerability classified as problematic has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected is an unknown...
CVE-2025-1613MEDIUM4.8A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects ...
CVE-2025-1612MEDIUM6.1A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unk...
CVE-2025-1611MEDIUM5.1A vulnerability was found in ShopXO up to 6.4.0. It has been classified as problematic. This affects an unknown part of ...
CVE-2025-1607MEDIUM5.3A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1...
CVE-2025-22635MEDIUM6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imithemes Eventer ...
CVE-2025-22633MEDIUM5.8Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in StellarWP Give – Divi D...
CVE-2025-1597MEDIUM6.1A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been classified as problematic. ...
CVE-2025-1595MEDIUM6.9A vulnerability has been found in Anhui Xufan Information Technology EasyCVR up to 2.7.0 and classified as problematic. ...
CVE-2025-1592MEDIUM6.1A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affec...
CVE-2025-1591MEDIUM6.1A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affecte...
CVE-2025-1589MEDIUM6.1A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now