2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-68785 | HIGH | 7.1 | 0.2% | Jan 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix middle attribute validation i... |
| CVE-2025-68782 | HIGH | 7.5 | 0.7% | Jan 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: Reset t_task_cdb pointer in error cas... |
| CVE-2025-68774 | HIGH | 7.5 | 0.2% | Jan 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfs_bnode_get() in __hfs_bnode... |
| CVE-2025-68770 | HIGH | 7.5 | 0.5% | Jan 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix XDP_TX path For XDP_TX action in bnxt... |
| CVE-2025-66698 | HIGH | 8.6 | 0.5% | Jan 13, 2026 | An issue in Semantic machines v5.4.8 allows attackers to bypass authentication via sending a crafted HTTP request to var... |
| CVE-2025-36640 | HIGH | 8.8 | 0.1% | Jan 13, 2026 | A vulnerability has been identified in the installation/uninstallation of the Nessus Agent Tray App on Windows Hosts whi... |
| CVE-2025-9427 | HIGH | 8.4 | 0.3% | Jan 13, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Lemonsoft W... |
| CVE-2025-11669 | HIGH | 8.1 | 0.7% | Jan 13, 2026 | Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versi... |
| CVE-2025-13774 | HIGH | 8.8 | 0.4% | Jan 13, 2026 | A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.4 and 13.0.1 where an SQL injection vulnerability ... |
| CVE-2025-59022 | HIGH | 8.1 | 0.4% | Jan 13, 2026 | Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the T... |
| CVE-2025-40944 | HIGH | 8.7 | 0.4% | Jan 13, 2026 | A vulnerability has been identified in SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) (All versions), SIMATIC ET 200M... |
| CVE-2025-40942 | HIGH | 7.8 | 0.1% | Jan 13, 2026 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4). Affected application contains... |
| CVE-2025-41717 | HIGH | 8.8 | 0.5% | Jan 13, 2026 | An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-up... |
| CVE-2025-66177 | HIGH | 8.8 | 0.3% | Jan 13, 2026 | There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models.... |
| CVE-2025-66176 | HIGH | 8.8 | 0.5% | Jan 13, 2026 | There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products... |
| CVE-2025-15514 | HIGH | 7.5 | 0.7% | Jan 12, 2026 | Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal mod... |
| CVE-2025-46068 | HIGH | 8.8 | 0.5% | Jan 12, 2026 | An issue in Automai Director v.25.2.0 allows a remote attacker to execute arbitrary code via the update mechanism |
| CVE-2025-46067 | HIGH | 8.2 | 0.3% | Jan 12, 2026 | An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges and obtain sensitive information v... |
| CVE-2025-71063 | HIGH | 7.5 | 0.1% | Jan 12, 2026 | Errands before 46.2.10 does not verify TLS certificates for CalDAV servers. |
| CVE-2025-41078 | HIGH | 8.1 | 0.2% | Jan 12, 2026 | Weaknesses in the authorization mechanisms of Viafirma Documents v3.7.129 allow an authenticated user without privileges... |
| CVE-2025-41077 | HIGH | 8.1 | 0.2% | Jan 12, 2026 | IDOR vulnerability has been found in Viafirma Inbox v4.5.13 that allows any authenticated user without privileges in the... |
| CVE-2025-41005 | HIGH | 8.7 | 0.3% | Jan 12, 2026 | Imaster's MEMS Events CRM contains an SQL injection vulnerability in‘keyword’ parameter in ‘/memsdemo/exchange_offers.ph... |
| CVE-2025-41004 | HIGH | 8.7 | 0.3% | Jan 12, 2026 | Imaster's Patient Records Management System is vulnerable to SQL Injection in the endpoint ‘/projects/hospital/admin/com... |
| CVE-2025-14279 | HIGH | 8.1 | 0.2% | Jan 12, 2026 | MLFlow versions up to and including 3.4.0 are vulnerable to DNS rebinding attacks due to a lack of Origin header validat... |
| CVE-2025-69276 | HIGH | 8.8 | 0.3% | Jan 12, 2026 | Deserialization of Untrusted Data vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Object Injection... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now