2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-65805 | HIGH | 7.5 | 0.4% | Jan 7, 2026 | OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized remote at... |
| CVE-2025-4676 | HIGH | 8.8 | 0.3% | Jan 7, 2026 | Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP C... |
| CVE-2025-46494 | HIGH | 7.1 | 0.2% | Jan 7, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesgrove Widget... |
| CVE-2025-9611 | HIGH | 7.2 | 1.2% | Jan 7, 2026 | Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. Th... |
| CVE-2025-69082 | HIGH | 7.1 | 0.2% | Jan 7, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Frenify Arlo arlo ... |
| CVE-2025-69081 | HIGH | 8.1 | 0.5% | Jan 7, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-69080 | HIGH | 8.1 | 0.5% | Jan 7, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-47396 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption occurs when a secure application is launched on a device with insufficient memory. |
| CVE-2025-47394 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations. |
| CVE-2025-47393 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption when accessing resources in kernel driver. |
| CVE-2025-47388 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption while passing pages to DSP with an unaligned starting address. |
| CVE-2025-47380 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption while preprocessing IOCTLs in sensors. |
| CVE-2025-47356 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory Corruption when multiple threads concurrently access and modify shared resources. |
| CVE-2025-47348 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption while processing identity credential operations in the trusted application. |
| CVE-2025-47346 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption while processing a secure logging command in the trusted application. |
| CVE-2025-47345 | HIGH | 8.4 | 0.1% | Jan 7, 2026 | Cryptographic issue may occur while encrypting license data. |
| CVE-2025-47343 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption while processing a video session to set video parameters. |
| CVE-2025-47339 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption while deinitializing a HDCP session. |
| CVE-2025-32300 | HIGH | 7.1 | 0.2% | Jan 7, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital zoom studi... |
| CVE-2025-31643 | HIGH | 8.8 | 0.3% | Jan 7, 2026 | Incorrect Privilege Assignment vulnerability in Dasinfomedia WPCHURCH allows Privilege Escalation.This issue affects WPC... |
| CVE-2025-15472 | HIGH | 7.2 | 22.4% | Jan 7, 2026 | A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This affects the function setDeviceURL of the file uapply.cgi of ... |
| CVE-2025-15158 | HIGH | 8.8 | 0.5% | Jan 7, 2026 | The WP Enable WebP plugin for WordPress is vulnerable to arbitrary file uploads due to improper file type validation in ... |
| CVE-2025-14835 | HIGH | 7.1 | 0.3% | Jan 7, 2026 | The WP Photo Album Plus plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘shortcode’ paramet... |
| CVE-2025-14804 | HIGH | 7.7 | 0.3% | Jan 7, 2026 | The Frontend File Manager Plugin WordPress plugin before 23.5 did not validate a path parameter and ownership of the fil... |
| CVE-2025-14070 | HIGH | 7.5 | 0.4% | Jan 7, 2026 | The Reviewify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now