2025 CVE Vulnerabilities
45,251 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-8712 | MEDIUM | 5.4 | 0.4% | Sep 9, 2025 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti Z... |
| CVE-2025-8711 | MEDIUM | 5.4 | 0.3% | Sep 9, 2025 | CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before... |
| CVE-2025-55148 | HIGH | 7.6 | 0.5% | Sep 9, 2025 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti Z... |
| CVE-2025-55147 | HIGH | 8.8 | 0.6% | Sep 9, 2025 | CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before... |
| CVE-2025-55146 | MEDIUM | 4.9 | 0.7% | Sep 9, 2025 | An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivan... |
| CVE-2025-55145 | HIGH | 8.9 | 0.6% | Sep 9, 2025 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti Z... |
| CVE-2025-55144 | MEDIUM | 5.4 | 0.5% | Sep 9, 2025 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti Z... |
| CVE-2025-55143 | MEDIUM | 6.1 | 0.7% | Sep 9, 2025 | Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivant... |
| CVE-2025-55142 | HIGH | 8.8 | 0.9% | Sep 9, 2025 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti Z... |
| CVE-2025-55141 | HIGH | 8.8 | 0.9% | Sep 9, 2025 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti Z... |
| CVE-2025-55139 | MEDIUM | 6.8 | 0.8% | Sep 9, 2025 | SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before... |
| CVE-2025-52915 | HIGH | 7.2 | 0.5% | Sep 9, 2025 | K7RKScan.sys 23.0.0.10, part of the K7 Security Anti-Malware suite, allows an admin-privileged user to send crafted IOCT... |
| CVE-2025-52322 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | An issue in Open5GS v2.7.2 and before allows a remote attacker to cause a denial of service via a crafted Create Session... |
| CVE-2025-52277 | MEDIUM | 6.1 | 0.4% | Sep 9, 2025 | Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted pa... |
| CVE-2025-43776 | MEDIUM | 5.4 | 0.2% | Sep 9, 2025 | A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 th... |
| CVE-2025-10183 | CRITICAL | 9.1 | 0.4% | Sep 9, 2025 | A blind XML External Entity (XXE) injection in the OpenMessaging webservice in TecCom TecConnect 4.1 allows an unauthent... |
| CVE-2025-10107 | MEDIUM | 4.7 | 3.9% | Sep 9, 2025 | A vulnerability has been found in TRENDnet TEW-831DR 1.0 (601.130.1.1410). Impacted is an unknown function of the file /... |
| CVE-2025-9994 | CRITICAL | 9.8 | 0.5% | Sep 9, 2025 | The Amp’ed RF BT-AP 111 Bluetooth access point's HTTP admin interface does not have an authentication feature, allowing ... |
| CVE-2025-9951 | HIGH | 7.2 | 0.4% | Sep 9, 2025 | A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execu... |
| CVE-2025-54236 | CRITICAL | 9.1 | 96.7% | Sep 9, 2025 | Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an... |
| CVE-2025-53609 | MEDIUM | 4.9 | 8.4% | Sep 9, 2025 | A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through 7.2... |
| CVE-2025-47416 | MEDIUM | 5.9 | 0.3% | Sep 9, 2025 | A vulnerability exists in the ConsoleFindCommandMatchList function in libsymproc. so imported by ctpd that may lead to u... |
| CVE-2025-33045 | MEDIUM | 6.7 | 0.1% | Sep 9, 2025 | APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure... |
| CVE-2025-9364 | HIGH | 8.8 | 0.3% | Sep 9, 2025 | An open database issue exists in the affected product and version. The security issue stems from an over permissive Redi... |
| CVE-2025-9166 | HIGH | 7.5 | 0.4% | Sep 9, 2025 | A denial-of-service security issue exists in the affected product and version. The security issue stems from the control... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now