2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-59978 | CRITICAL | 9 | 0.5% | Oct 9, 2025 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Network... |
| CVE-2025-11549 | CRITICAL | 9.8 | 8.5% | Oct 9, 2025 | A vulnerability has been found in Tenda W12 3.0.0.6(3948). The affected element is the function wifiMacFilterSet of the ... |
| CVE-2025-10284 | CRITICAL | 9.6 | 0.7% | Oct 9, 2025 | BBOT's unarchive module could be abused by supplying malicious archives files and when extracted can then perform an arb... |
| CVE-2025-10283 | CRITICAL | 9.6 | 0.5% | Oct 9, 2025 | BBOT's gitdumper module could be abused to execute commands through a malicious git repository. |
| CVE-2025-56683 | CRITICAL | 9.6 | 0.5% | Oct 9, 2025 | A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to ... |
| CVE-2025-11539 | CRITICAL | 9.9 | 0.6% | Oct 9, 2025 | Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due ... |
| CVE-2025-11522 | CRITICAL | 9.8 | 0.6% | Oct 9, 2025 | The Search & Go - Directory WordPress Theme theme for WordPress is vulnerable to Authentication Bypass via account takeo... |
| CVE-2025-7634 | CRITICAL | 9.8 | 0.8% | Oct 9, 2025 | The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inc... |
| CVE-2025-7526 | CRITICAL | 9.8 | 0.9% | Oct 9, 2025 | The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to arbitrary file... |
| CVE-2025-11529 | CRITICAL | 9.8 | 0.5% | Oct 9, 2025 | A security flaw has been discovered in ChurchCRM up to 5.18.0. This impacts the function AuthMiddleware of the file src/... |
| CVE-2025-10586 | CRITICAL | 9.8 | 0.5% | Oct 9, 2025 | The Community Events plugin for WordPress is vulnerable to SQL Injection via the ‘event_venue’ parameter in all versions... |
| CVE-2025-11513 | CRITICAL | 9.8 | 0.5% | Oct 9, 2025 | A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/... |
| CVE-2025-61913 | CRITICAL | 9.9 | 13.0% | Oct 8, 2025 | Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, Wri... |
| CVE-2025-11511 | CRITICAL | 9.8 | 0.4% | Oct 8, 2025 | A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/suppli... |
| CVE-2025-11509 | CRITICAL | 9.8 | 0.4% | Oct 8, 2025 | A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /page... |
| CVE-2025-11508 | CRITICAL | 9.8 | 0.4% | Oct 8, 2025 | A security vulnerability has been detected in code-projects Voting System 1.0. This affects an unknown function of the f... |
| CVE-2025-11507 | CRITICAL | 9.8 | 0.4% | Oct 8, 2025 | A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown fu... |
| CVE-2025-11506 | CRITICAL | 9.8 | 0.4% | Oct 8, 2025 | A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unkno... |
| CVE-2025-11505 | CRITICAL | 9.8 | 0.5% | Oct 8, 2025 | A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of th... |
| CVE-2025-11503 | CRITICAL | 9.8 | 0.5% | Oct 8, 2025 | A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown proce... |
| CVE-2025-11491 | CRITICAL | 9.8 | 4.3% | Oct 8, 2025 | A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The impacted element is the function Command... |
| CVE-2025-11490 | CRITICAL | 9.8 | 3.5% | Oct 8, 2025 | A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The affected element is the function ex... |
| CVE-2025-11487 | CRITICAL | 9.8 | 0.4% | Oct 8, 2025 | A security flaw has been discovered in SourceCodester Farm Management System 1.0. Affected by this issue is some unknown... |
| CVE-2025-11486 | CRITICAL | 9.8 | 0.4% | Oct 8, 2025 | A vulnerability was identified in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknow... |
| CVE-2025-11481 | CRITICAL | 9.8 | 0.4% | Oct 8, 2025 | A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9755b5bc12c... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now