2025 CVE Vulnerabilities
45,138 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-15392 | HIGH | 8.8 | 0.2% | Dec 31, 2025 | A weakness has been identified in Kohana KodiCMS up to 13.82.135. This affects the function like of the file cms/modules... |
| CVE-2025-64699 | HIGH | 7.8 | 0.1% | Dec 31, 2025 | An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The regService process, which run... |
| CVE-2025-62751 | HIGH | 8.8 | 0.2% | Dec 31, 2025 | Missing Authorization vulnerability in extendthemes Vireo vireo allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2025-61037 | HIGH | 7 | 0.1% | Dec 31, 2025 | A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The flaw is a Time-... |
| CVE-2025-15390 | HIGH | 8.8 | 0.3% | Dec 31, 2025 | A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edi... |
| CVE-2025-15389 | HIGH | 8.8 | 1.1% | Dec 31, 2025 | VPN Firewall developed by QNO Technology has an OS Command Injection vulnerability, allowing authenticated remote attack... |
| CVE-2025-62992 | HIGH | 8.1 | 0.2% | Dec 31, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path Traversal.Thi... |
| CVE-2025-49028 | HIGH | 7.1 | 0.1% | Dec 31, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Zoho Mail Zoho ZeptoMail transmail allows Stored XSS.This issue affec... |
| CVE-2025-15388 | HIGH | 8.8 | 0.9% | Dec 31, 2025 | VPN Firewall developed by QNO Technology has an OS Command Injection vulnerability, allowing authenticated remote attack... |
| CVE-2025-15387 | HIGH | 8.8 | 0.3% | Dec 31, 2025 | VPN Firewall developed by QNO Technology has a Insufficient Entropy vulnerability, allowing unauthenticated remote attac... |
| CVE-2025-2026 | HIGH | 7.1 | 0.4% | Dec 31, 2025 | The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attacke... |
| CVE-2025-1977 | HIGH | 7.7 | 0.3% | Dec 31, 2025 | The NPort 6100-G2/6200-G2 Series is affected by an execution with unnecessary privileges vulnerability (CVE-2025-1977) t... |
| CVE-2025-15017 | HIGH | 7 | 0.2% | Dec 31, 2025 | A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface. An attack... |
| CVE-2025-15280 | HIGH | 8.8 | 0.5% | Dec 31, 2025 | FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacker... |
| CVE-2025-15279 | HIGH | 7.8 | 0.3% | Dec 31, 2025 | FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability all... |
| CVE-2025-15278 | HIGH | 7.8 | 0.3% | Dec 31, 2025 | FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote... |
| CVE-2025-15277 | HIGH | 7.8 | 0.3% | Dec 31, 2025 | FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability all... |
| CVE-2025-15276 | HIGH | 7.8 | 0.3% | Dec 31, 2025 | FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability all... |
| CVE-2025-15275 | HIGH | 8.8 | 0.6% | Dec 31, 2025 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows rem... |
| CVE-2025-15274 | HIGH | 8.8 | 0.6% | Dec 31, 2025 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows rem... |
| CVE-2025-15273 | HIGH | 8.8 | 0.6% | Dec 31, 2025 | FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows re... |
| CVE-2025-15272 | HIGH | 8.8 | 0.6% | Dec 31, 2025 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows rem... |
| CVE-2025-15271 | HIGH | 8.8 | 0.6% | Dec 31, 2025 | FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability al... |
| CVE-2025-15270 | HIGH | 8.8 | 0.6% | Dec 31, 2025 | FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability al... |
| CVE-2025-15269 | HIGH | 8.8 | 0.5% | Dec 31, 2025 | FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacker... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now