2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-15141 | LOW | 3.1 | 0.3% | Dec 28, 2025 | A vulnerability was determined in Halo up to 2.21.10. This issue affects some unknown processing of the file /actuator o... |
| CVE-2025-15134 | LOW | 3.5 | 0.2% | Dec 28, 2025 | A security flaw has been discovered in yourmaileyes MOOC up to 1.17. This affects the function subreview of the file moo... |
| CVE-2025-15125 | LOW | 3.1 | 0.3% | Dec 28, 2025 | A security flaw has been discovered in JeecgBoot up to 3.9.0. Affected is the function queryDepartPermission of the file... |
| CVE-2025-15124 | LOW | 3.1 | 0.3% | Dec 28, 2025 | A vulnerability was identified in JeecgBoot up to 3.9.0. This impacts the function getParameterMap of the file /sys/sysD... |
| CVE-2025-15123 | LOW | 3.1 | 0.3% | Dec 28, 2025 | A vulnerability was determined in JeecgBoot up to 3.9.0. This affects an unknown function of the file /sys/sysDepartPerm... |
| CVE-2025-15122 | LOW | 3.1 | 0.3% | Dec 28, 2025 | A vulnerability was found in JeecgBoot up to 3.9.0. The impacted element is the function loadDatarule of the file /sys/s... |
| CVE-2025-15120 | LOW | 3.1 | 0.3% | Dec 28, 2025 | A flaw has been found in JeecgBoot up to 3.9.0. Impacted is the function getDeptRoleList of the file /sys/sysDepartRole/... |
| CVE-2025-15119 | LOW | 3.1 | 0.3% | Dec 28, 2025 | A vulnerability was detected in JeecgBoot up to 3.9.0. This issue affects the function queryPageList of the file /sys/sy... |
| CVE-2025-15117 | LOW | 3.1 | 0.3% | Dec 28, 2025 | A weakness has been identified in Dromara Sa-Token up to 1.44.0. This affects the function ObjectInputStream.readObject ... |
| CVE-2025-15108 | LOW | 3.7 | 0.3% | Dec 27, 2025 | A vulnerability was detected in PandaXGO PandaX up to fb8ff40f7ce5dfebdf66306c6d85625061faf7e5. This affects an unknown ... |
| CVE-2025-36228 | LOW | 3.8 | 0.2% | Dec 26, 2025 | IBM Aspera Faspex 5 5.0.0 through 5.0.14.1 may allow inconsistent permissions between the user interface and backend API... |
| CVE-2025-52598 | LOW | 3.7 | 0.2% | Dec 26, 2025 | Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/Io... |
| CVE-2025-15095 | LOW | 3.5 | 0.3% | Dec 26, 2025 | A security vulnerability has been detected in postmanlabs httpbin up to 0.6.1. This affects an unknown function of the f... |
| CVE-2025-15084 | LOW | 3.1 | 0.3% | Dec 25, 2025 | A vulnerability was identified in youlaitech youlai-mall 1.0.0/2.0.0. The impacted element is the function orderService.... |
| CVE-2025-68585 | LOW | 2.7 | 0.2% | Dec 24, 2025 | Missing Authorization vulnerability in Ben Balter WP Document Revisions wp-document-revisions allows Exploiting Incorrec... |
| CVE-2025-57840 | LOW | 2.2 | 0.1% | Dec 24, 2025 | ADB(Android Debug Bridge) is affected by type privilege bypass, successful exploitation of this vulnerability may affect... |
| CVE-2025-14408 | LOW | 3.3 | 0.2% | Dec 23, 2025 | Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows rem... |
| CVE-2025-61738 | LOW | 2.3 | 0.2% | Dec 22, 2025 | Under certain circumstances, attacker can capture the network key, read or write encrypted packets on the PowerG network... |
| CVE-2025-15005 | LOW | 3.7 | 0.5% | Dec 22, 2025 | A security flaw has been discovered in CouchCMS up to 2.4. Affected is an unknown function of the file couch/config.exam... |
| CVE-2025-12654 | LOW | 2.7 | 0.4% | Dec 21, 2025 | The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory cr... |
| CVE-2025-14955 | LOW | 3.7 | 0.6% | Dec 19, 2025 | A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ogs_pfcp_handle_create_... |
| CVE-2025-14882 | LOW | 3.8 | 0.2% | Dec 19, 2025 | An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intende... |
| CVE-2025-14881 | LOW | 3.8 | 0.2% | Dec 19, 2025 | Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not ... |
| CVE-2025-65046 | LOW | 3.1 | 0.3% | Dec 18, 2025 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2025-68469 | LOW | 3.3 | 0.2% | Dec 18, 2025 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.1-14... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now