2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-59954 | CRITICAL | 9.8 | 0.5% | Sep 30, 2025 | Knowage is an open source analytics and business intelligence suite. Versions 8.1.26 and below are vulnerable to Remote ... |
| CVE-2025-11148 | CRITICAL | 9.8 | 1.4% | Sep 30, 2025 | All versions of the package check-branches are vulnerable to Command Injection check-branches is a command-line tool tha... |
| CVE-2025-59937 | CRITICAL | 9.1 | 0.5% | Sep 29, 2025 | go-mail is a comprehensive library for sending mails with Go. In versions 0.7.0 and below, due to incorrect handling of ... |
| CVE-2025-54875 | CRITICAL | 9.8 | 0.5% | Sep 29, 2025 | FreshRSS is a free, self-hostable RSS aggregator. In versions 1.16.0 and above through 1.26.3, an unprivileged attacker ... |
| CVE-2025-54592 | CRITICAL | 9.8 | 0.5% | Sep 29, 2025 | FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during... |
| CVE-2025-57266 | CRITICAL | 9.8 | 0.4% | Sep 29, 2025 | An issue was discovered in file AssistantController.java in ThriveX Blogging Framework 2.5.9 thru 3.1.3 allowing unauthe... |
| CVE-2025-34224 | CRITICAL | 9.1 | 1.0% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version ... |
| CVE-2025-34223 | CRITICAL | 9.8 | 1.2% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version ... |
| CVE-2025-34222 | CRITICAL | 9.1 | 0.5% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version ... |
| CVE-2025-34221 | CRITICAL | 9.8 | 1.5% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version 2... |
| CVE-2025-34218 | CRITICAL | 9.8 | 1.0% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version ... |
| CVE-2025-34216 | CRITICAL | 9.8 | 0.8% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version ... |
| CVE-2025-34215 | CRITICAL | 9.8 | 1.1% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version ... |
| CVE-2025-34212 | CRITICAL | 9.8 | 0.7% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.843 and Application prior to version 2... |
| CVE-2025-34207 | CRITICAL | 9.8 | 0.7% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 (VA an... |
| CVE-2025-30247 | CRITICAL | 9.3 | 1.1% | Sep 29, 2025 | An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS pl... |
| CVE-2025-35032 | CRITICAL | 9.9 | 0.3% | Sep 29, 2025 | Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of th... |
| CVE-2025-34196 | CRITICAL | 9.8 | 0.5% | Sep 29, 2025 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application prior to 25.1.141... |
| CVE-2025-56795 | CRITICAL | 9 | 0.4% | Sep 29, 2025 | Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting (XSS) in the recipe creation functionality. Unsani... |
| CVE-2025-48006 | CRITICAL | 9.1 | 0.5% | Sep 29, 2025 | Improper restriction of XML external entity reference issue exists in DataSpider Servista 4.4 and earlier. If a speciall... |
| CVE-2025-11140 | CRITICAL | 9.8 | 0.6% | Sep 29, 2025 | A vulnerability was identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this vulnerability is the function openForm ... |
| CVE-2025-11139 | CRITICAL | 9.8 | 0.7% | Sep 29, 2025 | A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the compone... |
| CVE-2025-11126 | CRITICAL | 9.8 | 0.6% | Sep 29, 2025 | A security flaw has been discovered in Apeman ID71 218.53.203.117. This vulnerability affects unknown code of the file /... |
| CVE-2025-11118 | CRITICAL | 9.8 | 0.5% | Sep 28, 2025 | A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of th... |
| CVE-2025-11116 | CRITICAL | 9.8 | 0.5% | Sep 28, 2025 | A vulnerability was found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /add.h... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now