2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-53966 | HIGH | 8.4 | 0.2% | Jan 5, 2026 | An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211... |
| CVE-2025-49495 | HIGH | 8.4 | 0.2% | Jan 5, 2026 | An issue was discovered in the WiFi driver in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580. Mishandling of an ... |
| CVE-2025-43706 | HIGH | 7.5 | 0.3% | Jan 5, 2026 | An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 240... |
| CVE-2025-59158 | HIGH | 8 | 0.5% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Coolify versions pri... |
| CVE-2025-59157 | HIGH | 8.8 | 1.8% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0... |
| CVE-2025-59156 | HIGH | 8.8 | 1.0% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0... |
| CVE-2025-57836 | HIGH | 7.8 | 0.1% | Jan 5, 2026 | An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows. The installer creates a temporary folder wit... |
| CVE-2025-52519 | HIGH | 7.1 | 0.1% | Jan 5, 2026 | An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, ... |
| CVE-2025-46255 | HIGH | 7.5 | 0.2% | Jan 5, 2026 | Missing Authorization vulnerability in Marketing Fire LLC LoginWP - Pro allows Accessing Functionality Not Properly Cons... |
| CVE-2025-67303 | HIGH | 7.5 | 1.4% | Jan 5, 2026 | An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration a... |
| CVE-2025-69087 | HIGH | 8.1 | 0.4% | Jan 5, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68850 | HIGH | 7.5 | 0.3% | Jan 5, 2026 | Missing Authorization vulnerability in codepeople Sell Downloads sell-downloads allows Exploiting Incorrectly Configured... |
| CVE-2025-68547 | HIGH | 7.5 | 0.3% | Jan 5, 2026 | Missing Authorization vulnerability in wpweb Follow My Blog Post follow-my-blog-post allows Exploiting Incorrectly Confi... |
| CVE-2025-68044 | HIGH | 8.6 | 0.3% | Jan 5, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Rustaurius Five Star Restaurant Reservations restauran... |
| CVE-2025-68033 | HIGH | 7.5 | 0.3% | Jan 5, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allo... |
| CVE-2025-31047 | HIGH | 8.8 | 0.4% | Jan 5, 2026 | Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Them... |
| CVE-2025-31044 | HIGH | 8.5 | 0.3% | Jan 5, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Premium SE... |
| CVE-2025-68764 | HIGH | 7.8 | 0.2% | Jan 5, 2026 | In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noex... |
| CVE-2025-68761 | HIGH | 7.8 | 0.1% | Jan 5, 2026 | In the Linux kernel, the following vulnerability has been resolved: hfs: fix potential use after free in hfs_correct_ne... |
| CVE-2025-68753 | HIGH | 7.1 | 0.1% | Jan 5, 2026 | In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in put_user l... |
| CVE-2025-5965 | HIGH | 7.2 | 28.2% | Jan 5, 2026 | In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Imp... |
| CVE-2025-66518 | HIGH | 8.8 | 1.0% | Jan 5, 2026 | Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.ses... |
| CVE-2025-15240 | HIGH | 8.8 | 0.5% | Jan 5, 2026 | QOCA aim AI Medical Cloud Platform developed by Quanta Computer has an Arbitrary File Upload vulnerability, allowing aut... |
| CVE-2025-15462 | HIGH | 8.8 | 0.9% | Jan 5, 2026 | A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/C... |
| CVE-2025-15461 | HIGH | 8.8 | 0.9% | Jan 5, 2026 | A flaw has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/fo... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now