2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-65135 | CRITICAL | 9.8 | 0.3% | Apr 14, 2026 | In manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerability exists in /studentms/admin... |
| CVE-2025-65133 | CRITICAL | 9.8 | 0.5% | Apr 14, 2026 | A SQL injection vulnerability exists in the School Management System (version 1.0) by manikandan580. An unauthenticated ... |
| CVE-2025-63939 | CRITICAL | 9.8 | 0.3% | Apr 14, 2026 | Improper input handling in /Grocery/search_products_itname.php, in anirudhkannan Grocery Store Management System 1.0, al... |
| CVE-2025-61260 | CRITICAL | 9.8 | 6.6% | Apr 14, 2026 | A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP ... |
| CVE-2025-8095 | CRITICAL | 9.1 | 0.2% | Apr 14, 2026 | The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform. It has been identified as crypt... |
| CVE-2025-31991 | CRITICAL | 9.8 | 0.2% | Apr 13, 2026 | Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brut... |
| CVE-2025-44560 | CRITICAL | 9.8 | 0.3% | Apr 10, 2026 | owntone-server 2ca10d9 is vulnerable to Buffer Overflow due to lack of recursive checking. |
| CVE-2025-13926 | CRITICAL | 9.8 | 0.4% | Apr 9, 2026 | An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary request... |
| CVE-2025-15480 | CRITICAL | 9.1 | 0.3% | Apr 9, 2026 | In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon i... |
| CVE-2025-62718 | CRITICAL | 9.9 | 1.2% | Apr 9, 2026 | Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly h... |
| CVE-2025-50228 | CRITICAL | 9.1 | 0.3% | Apr 9, 2026 | Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules. |
| CVE-2025-57735 | CRITICAL | 9.1 | 0.7% | Apr 9, 2026 | When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of t... |
| CVE-2025-52221 | CRITICAL | 9.8 | 0.4% | Apr 8, 2026 | Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and... |
| CVE-2025-14816 | CRITICAL | 9.3 | 0.1% | Apr 8, 2026 | Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and pr... |
| CVE-2025-14815 | CRITICAL | 9.3 | 0.1% | Apr 8, 2026 | Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mi... |
| CVE-2025-69515 | CRITICAL | 9.1 | 0.5% | Apr 7, 2026 | An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system int... |
| CVE-2025-71058 | CRITICAL | 9.1 | 0.5% | Apr 7, 2026 | Dual DHCP DNS Server 8.01 improperly accepts and caches UDP DNS responses without validating that the response originate... |
| CVE-2025-52908 | CRITICAL | 9.8 | 0.5% | Apr 7, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 13... |
| CVE-2025-62818 | CRITICAL | 9.8 | 0.5% | Apr 7, 2026 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 128... |
| CVE-2025-52909 | CRITICAL | 9.8 | 0.5% | Apr 7, 2026 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 13... |
| CVE-2025-65115 | CRITICAL | 9.8 | 0.6% | Apr 7, 2026 | Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - O... |
| CVE-2025-54328 | CRITICAL | 10 | 0.5% | Apr 6, 2026 | An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 21... |
| CVE-2025-58349 | CRITICAL | 9.1 | 0.3% | Apr 6, 2026 | An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 210... |
| CVE-2025-15484 | CRITICAL | 9.1 | 0.2% | Apr 1, 2026 | The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant... |
| CVE-2025-71281 | CRITICAL | 9.8 | 0.3% | Apr 1, 2026 | XenForo before 2.3.7 does not properly restrict methods callable from within templates. A loose prefix match was used in... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now