2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-66837 | MEDIUM | 6.8 | 0.3% | Jan 7, 2026 | A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading a crafted... |
| CVE-2025-66686 | MEDIUM | 6.1 | 0.2% | Jan 7, 2026 | A stored Cross-Site Scripting (XSS) vulnerability exists in Perch CMS version 3.2. An authenticated attacker with admini... |
| CVE-2025-61489 | MEDIUM | 6.5 | 1.0% | Jan 7, 2026 | A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute ar... |
| CVE-2025-4675 | MEDIUM | 6.5 | 0.2% | Jan 7, 2026 | Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP C... |
| CVE-2025-66838 | MEDIUM | 6.5 | 0.4% | Jan 7, 2026 | In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or throttling, a... |
| CVE-2025-62327 | MEDIUM | 4.9 | 0.3% | Jan 7, 2026 | In HCL DevOps Deploy 8.1.2.0 through 8.1.2.3, a user with LLM configuration privileges may be able to recover a credenti... |
| CVE-2025-49335 | MEDIUM | 4.9 | 0.1% | Jan 7, 2026 | Server-Side Request Forgery (SSRF) vulnerability in minnur External Media external-media allows Server Side Request Forg... |
| CVE-2025-6225 | MEDIUM | 6.9 | 1.1% | Jan 7, 2026 | Kieback&Peter Neutrino-GLT product is used for building management. It's web component "SM70 PHWEB" is vulnerable to she... |
| CVE-2025-15479 | MEDIUM | 5.4 | 0.2% | Jan 7, 2026 | Stored cross-site scripting (XSS, CWE-79) in the survey content and administration functionality in Data Illusion Zumbru... |
| CVE-2025-46434 | MEDIUM | 6.5 | 0.2% | Jan 7, 2026 | Missing Authorization vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro theplus_elementor_addon all... |
| CVE-2025-46256 | MEDIUM | 6.4 | 0.3% | Jan 7, 2026 | Path Traversal: '.../...//' vulnerability in SigmaPlugin Advanced Database Cleaner PRO allows Path Traversal.This issue ... |
| CVE-2025-69344 | MEDIUM | 4.3 | 0.2% | Jan 7, 2026 | Missing Authorization vulnerability in themehunk Oneline Lite oneline-lite allows Exploiting Incorrectly Configured Acce... |
| CVE-2025-69333 | MEDIUM | 4.3 | 0.2% | Jan 7, 2026 | Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access C... |
| CVE-2025-47395 | MEDIUM | 6.5 | 0.1% | Jan 7, 2026 | Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element. |
| CVE-2025-47369 | MEDIUM | 5.5 | 0.1% | Jan 7, 2026 | Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a ses... |
| CVE-2025-47344 | MEDIUM | 6.4 | 0.1% | Jan 7, 2026 | Memory corruption while handling sensor utility operations. |
| CVE-2025-47337 | MEDIUM | 6.7 | 0.1% | Jan 7, 2026 | Memory corruption while accessing a synchronization object during concurrent operations. |
| CVE-2025-47336 | MEDIUM | 6.7 | 0.1% | Jan 7, 2026 | Memory corruption while performing sensor register read operations. |
| CVE-2025-47335 | MEDIUM | 6.7 | 0.1% | Jan 7, 2026 | Memory corruption while parsing clock configuration data for a specific hardware type. |
| CVE-2025-47334 | MEDIUM | 6.7 | 0.1% | Jan 7, 2026 | Memory corruption while processing shared command buffer packet between camera userspace and kernel. |
| CVE-2025-47333 | MEDIUM | 6.6 | 0.1% | Jan 7, 2026 | Memory corruption while handling buffer mapping operations in the cryptographic driver. |
| CVE-2025-47332 | MEDIUM | 6.4 | 0.1% | Jan 7, 2026 | Memory corruption while processing a config call from userspace. |
| CVE-2025-47331 | MEDIUM | 6.1 | 0.1% | Jan 7, 2026 | Information disclosure while processing a firmware event. |
| CVE-2025-47330 | MEDIUM | 5.5 | 0.1% | Jan 7, 2026 | Transient DOS while parsing video packets received from the video firmware. |
| CVE-2025-31964 | MEDIUM | 4.9 | 0.3% | Jan 7, 2026 | Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now