2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-62342 | MEDIUM | 6.4 | 0.2% | Aug 27, 2026 | HCL IntelliOps Event Management (IEM) is affected by a Session Deletion Vulnerability. It may allow improper handling of... |
| CVE-2025-70340 | MEDIUM | 6.5 | 0.3% | Aug 26, 2026 | A Broken Access Control vulnerability exists in ThingsBoard Professional Edition (PE) 4.21 and below, within the Alarms ... |
| CVE-2025-10903 | MEDIUM | 6.5 | 0.4% | Aug 26, 2026 | GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.... |
| CVE-2025-9878 | MEDIUM | 6.4 | 0.2% | Aug 25, 2026 | The PPWP – Password Protect WordPress | #1 Most-Reviewed Password Plugin plugin for WordPress is vulnerable to Stored Cr... |
| CVE-2025-36939 | MEDIUM | 5.7 | 0.2% | Aug 24, 2026 | Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread net... |
| CVE-2025-68833 | MEDIUM | 5.3 | 0.2% | Aug 24, 2026 | HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker u... |
| CVE-2025-15671 | MEDIUM | 5.4 | — | Aug 21, 2026 | The Welcart e-Commerce WordPress plugin before 2.12.1 does not regenerate the session identifier on authentication and s... |
| CVE-2025-62306 | MEDIUM | 5 | — | Aug 20, 2026 | HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability a... |
| CVE-2025-62300 | MEDIUM | 5.9 | — | Aug 20, 2026 | HCL IntelliOps Event Management (IEM) is affected by a race condition. A "timing window" can occur where an attacker can... |
| CVE-2025-62299 | MEDIUM | 6.6 | — | Aug 20, 2026 | HCL IntelliOps Event Management (IEM) is affected by a least privileges violation which could allow an attacker to acces... |
| CVE-2025-62307 | MEDIUM | 5.4 | — | Aug 20, 2026 | HCL IntelliOps Event Management (IEM) is affected by insufficient logging. Insufficient logging weakens accountability, ... |
| CVE-2025-53999 | MEDIUM | 6.5 | 0.3% | Aug 20, 2026 | Unauthenticated Broken Access Control in Altair <= 5.2.2 versions. |
| CVE-2025-14602 | MEDIUM | 5.3 | 0.5% | Aug 20, 2026 | The application generates uploaded file names using a weak and predictable method based on the request timestamp. This a... |
| CVE-2025-36398 | MEDIUM | 5.4 | — | Aug 19, 2026 | IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authe... |
| CVE-2025-11729 | MEDIUM | 4.3 | — | Aug 19, 2026 | The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is vulnerable to unauthorized acc... |
| CVE-2025-9211 | MEDIUM | 6.7 | — | Aug 18, 2026 | Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 al... |
| CVE-2025-10005 | MEDIUM | 4.3 | — | Aug 16, 2026 | The PPWP – Password Protect WordPress | #1 Most-Reviewed Password Plugin plugin for WordPress is vulnerable to Insecure ... |
| CVE-2025-71405 | MEDIUM | 5.1 | 0.4% | Aug 14, 2026 | chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses t... |
| CVE-2025-10308 | MEDIUM | 4.3 | — | Aug 14, 2026 | The Astro Booking Engine plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc... |
| CVE-2025-62314 | MEDIUM | 5.6 | — | Aug 13, 2026 | HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or s... |
| CVE-2025-52640 | MEDIUM | 4.7 | — | Aug 13, 2026 | HCL AION is affected by a vulnerability where the shared storage used by product components is architected without suffi... |
| CVE-2025-59320 | MEDIUM | 4.6 | — | Aug 12, 2026 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk s... |
| CVE-2025-41771 | MEDIUM | 4.3 | — | Aug 12, 2026 | An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerabl... |
| CVE-2025-15687 | MEDIUM | 4.3 | — | Aug 12, 2026 | A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smf_gx_cca_cb of the component SMF ... |
| CVE-2025-15686 | MEDIUM | 4.3 | — | Aug 12, 2026 | A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd_msg_sess_get of the com... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now