2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-15460 | HIGH | 8.8 | 0.6% | Jan 5, 2026 | A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formPptpC... |
| CVE-2025-15459 | HIGH | 8.8 | 0.9% | Jan 5, 2026 | A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of... |
| CVE-2025-14124 | HIGH | 8.6 | 1.6% | Jan 5, 2026 | The Team WordPress plugin before 5.0.11 does not properly sanitize and escape a parameter before using it in a SQL stat... |
| CVE-2025-15456 | HIGH | 7.5 | 0.4% | Jan 5, 2026 | A vulnerability has been found in bg5sbk MiniCMS up to 1.8. The affected element is an unknown function of the file /mc-... |
| CVE-2025-15443 | HIGH | 7.2 | 0.4% | Jan 4, 2026 | A vulnerability was identified in CRMEB up to 5.6.1. This issue affects some unknown processing of the file /adminapi/pr... |
| CVE-2025-15442 | HIGH | 7.2 | 0.4% | Jan 4, 2026 | A vulnerability was determined in CRMEB up to 5.6.1. This vulnerability affects unknown code of the file /adminapi/expor... |
| CVE-2025-3660 | HIGH | 8.2 | 0.2% | Jan 4, 2026 | Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows auth... |
| CVE-2025-3646 | HIGH | 8.2 | 0.2% | Jan 4, 2026 | Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authorization bypass vulnerability that allows unau... |
| CVE-2025-64124 | HIGH | 8.8 | 1.0% | Jan 3, 2026 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Ene... |
| CVE-2025-64120 | HIGH | 8.8 | 1.0% | Jan 2, 2026 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Ene... |
| CVE-2025-69415 | HIGH | 7.1 | 0.3% | Jan 2, 2026 | In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device token is not properly a... |
| CVE-2025-69414 | HIGH | 7.1 | 0.3% | Jan 2, 2026 | Plex Media Server (PMS) through 1.42.2.10156 allows retrieval of a permanent access token via a /myplex/account call wit... |
| CVE-2025-67160 | HIGH | 7.5 | 0.9% | Jan 2, 2026 | An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory travers... |
| CVE-2025-67159 | HIGH | 7.5 | 0.3% | Jan 2, 2026 | Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext. |
| CVE-2025-67158 | HIGH | 7.5 | 0.5% | Jan 2, 2026 | An authentication bypass in the /cgi-bin/jvsweb.cgi endpoint of Revotech I6032W-FHW v1.0.0014 - 20210517 allows attacker... |
| CVE-2025-9110 | HIGH | 7.5 | 0.5% | Jan 2, 2026 | An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect ... |
| CVE-2025-67269 | HIGH | 7.5 | 0.6% | Jan 2, 2026 | An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to com... |
| CVE-2025-62842 | HIGH | 7.8 | 0.2% | Jan 2, 2026 | An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attac... |
| CVE-2025-59387 | HIGH | 8.1 | 0.4% | Jan 2, 2026 | An SQL injection vulnerability has been reported to affect MARS (Multi-Application Recovery Service). The remote attacke... |
| CVE-2025-59384 | HIGH | 7.5 | 0.5% | Jan 2, 2026 | A path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerabil... |
| CVE-2025-52872 | HIGH | 8.1 | 0.4% | Jan 2, 2026 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker... |
| CVE-2025-52864 | HIGH | 8.1 | 0.4% | Jan 2, 2026 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker... |
| CVE-2025-52863 | HIGH | 8.1 | 0.4% | Jan 2, 2026 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker... |
| CVE-2025-15438 | HIGH | 7.2 | 0.5% | Jan 2, 2026 | A vulnerability was determined in PluXml up to 5.8.22. Affected is the function FileCookieJar::__destruct of the file co... |
| CVE-2025-15432 | HIGH | 7.5 | 0.7% | Jan 2, 2026 | A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This vulnerability af... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now