2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-8457 | — | — | — | Oct 9, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2025-61560 | HIGH | 8.1 | 0.3% | Oct 9, 2026 | A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows at... |
| CVE-2025-14123 | MEDIUM | 6.8 | 0.2% | Oct 9, 2026 | The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5... |
| CVE-2025-15700 | HIGH | 8.8 | 0.4% | Oct 9, 2026 | The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP arc... |
| CVE-2025-71428 | MEDIUM | 4.9 | 0.4% | Oct 8, 2026 | Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenti... |
| CVE-2025-70522 | HIGH | 8.8 | 0.2% | Oct 7, 2026 | The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for ... |
| CVE-2025-70521 | CRITICAL | 9.8 | 0.4% | Oct 7, 2026 | The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied inp... |
| CVE-2025-70520 | CRITICAL | 9.8 | 0.5% | Oct 7, 2026 | The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions agai... |
| CVE-2025-70519 | MEDIUM | 6.1 | 0.2% | Oct 7, 2026 | The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or encode reflected user s... |
| CVE-2025-70518 | CRITICAL | 10 | 0.6% | Oct 7, 2026 | The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied inp... |
| CVE-2025-70517 | HIGH | 8.8 | 0.2% | Oct 7, 2026 | The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for ... |
| CVE-2025-70516 | CRITICAL | 9.1 | 0.3% | Oct 7, 2026 | The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions agai... |
| CVE-2025-70515 | MEDIUM | 6.1 | 0.3% | Oct 7, 2026 | The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or encode reflected user s... |
| CVE-2025-64393 | CRITICAL | 9.4 | 0.4% | Oct 7, 2026 | This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backu... |
| CVE-2025-64392 | MEDIUM | 4.8 | 0.3% | Oct 7, 2026 | This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal us... |
| CVE-2025-64391 | MEDIUM | 4.1 | 0.1% | Oct 7, 2026 | This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files... |
| CVE-2025-45871 | HIGH | 8.1 | 0.3% | Oct 6, 2026 | LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, al... |
| CVE-2025-71384 | MEDIUM | 6.7 | 0.2% | Oct 6, 2026 | Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging ... |
| CVE-2025-71383 | CRITICAL | 9.8 | 0.4% | Oct 6, 2026 | Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) ... |
| CVE-2025-8352 | MEDIUM | 6.9 | 0.3% | Oct 6, 2026 | Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased resource consumptio... |
| CVE-2025-15591 | MEDIUM | 5.3 | 0.3% | Oct 6, 2026 | Cross-site Scripting (XSS) in the Forums feature of OpenText Content Management Content Server could allow a bad actor t... |
| CVE-2025-15643 | HIGH | 7.1 | 0.1% | Oct 5, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jose Fernandez Ads... |
| CVE-2025-12828 | MEDIUM | 6.4 | 0.2% | Oct 3, 2026 | The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out w... |
| CVE-2025-71427 | MEDIUM | 6.8 | 0.3% | Oct 1, 2026 | Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and ... |
| CVE-2025-31980 | MEDIUM | 4.3 | 0.2% | Oct 1, 2026 | HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker t... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now