2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-20800 | HIGH | 7.8 | 0.1% | Jan 6, 2026 | In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o... |
| CVE-2025-20799 | HIGH | 7.8 | 0.1% | Jan 6, 2026 | In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege i... |
| CVE-2025-20798 | HIGH | 7.8 | 0.1% | Jan 6, 2026 | In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o... |
| CVE-2025-20797 | HIGH | 7.8 | 0.1% | Jan 6, 2026 | In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o... |
| CVE-2025-20796 | HIGH | 7.8 | 0.1% | Jan 6, 2026 | In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation... |
| CVE-2025-20795 | HIGH | 7.8 | 0.1% | Jan 6, 2026 | In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio... |
| CVE-2025-20781 | HIGH | 7.8 | 0.1% | Jan 6, 2026 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg... |
| CVE-2025-20780 | HIGH | 7.8 | 0.1% | Jan 6, 2026 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg... |
| CVE-2025-20779 | HIGH | 7 | 0.1% | Jan 6, 2026 | In display, there is a possible use after free due to a race condition. This could lead to local escalation of privilege... |
| CVE-2025-20778 | HIGH | 7.8 | 0.1% | Jan 6, 2026 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o... |
| CVE-2025-15364 | HIGH | 7.3 | 0.2% | Jan 6, 2026 | The Download Manager plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up ... |
| CVE-2025-69228 | HIGH | 7.5 | 0.4% | Jan 6, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a reques... |
| CVE-2025-69227 | HIGH | 7.5 | 0.4% | Jan 6, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow for an i... |
| CVE-2025-69223 | HIGH | 7.5 | 0.6% | Jan 5, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bo... |
| CVE-2025-68953 | HIGH | 7.5 | 0.4% | Jan 5, 2026 | Frappe is a full-stack web application framework. Versions 14.99.5 and below and 15.0.0 through 15.80.1 include requests... |
| CVE-2025-68455 | HIGH | 7.2 | 1.0% | Jan 5, 2026 | Craft is a platform for creating digital experiences. Versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16 ar... |
| CVE-2025-68454 | HIGH | 8.8 | 0.9% | Jan 5, 2026 | Craft is a platform for creating digital experiences. Versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16 ar... |
| CVE-2025-68428 | HIGH | 7.5 | 2.2% | Jan 5, 2026 | jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loa... |
| CVE-2025-64425 | HIGH | 8.1 | 0.4% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions ... |
| CVE-2025-64424 | HIGH | 8.8 | 2.1% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions ... |
| CVE-2025-64423 | HIGH | 8.8 | 0.4% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions ... |
| CVE-2025-67419 | HIGH | 7.5 | 0.3% | Jan 5, 2026 | A Denial of Service (DoS) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to exhaust the appl... |
| CVE-2025-64421 | HIGH | 8 | 0.3% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions ... |
| CVE-2025-64420 | HIGH | 8.8 | 0.5% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions ... |
| CVE-2025-64419 | HIGH | 8.8 | 0.7% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now