2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-15431 | HIGH | 8.8 | 0.8% | Jan 2, 2026 | A flaw has been found in UTT 进取 512W 1.7.7-171114. This affects the function strcpy of the file /goform/formFtpServerDir... |
| CVE-2025-15430 | HIGH | 8.8 | 0.8% | Jan 2, 2026 | A vulnerability was detected in UTT 进取 512W 1.7.7-171114. Affected by this issue is the function strcpy of the file /gof... |
| CVE-2025-15429 | HIGH | 8.8 | 0.9% | Jan 2, 2026 | A security vulnerability has been detected in UTT 进取 512W 1.7.7-171114. Affected by this vulnerability is the function s... |
| CVE-2025-15428 | HIGH | 8.8 | 0.9% | Jan 2, 2026 | A weakness has been identified in UTT 进取 512W 1.7.7-171114. Affected is the function strcpy of the file /goform/formRemo... |
| CVE-2025-15426 | HIGH | 7.3 | 0.4% | Jan 2, 2026 | A vulnerability was identified in jackying H-ui.admin up to 3.1. This affects an unknown function in the library /lib/we... |
| CVE-2025-15423 | HIGH | 8.8 | 0.4% | Jan 2, 2026 | A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0. Impacted is the function CheckSaveTranFiletype of the ... |
| CVE-2025-15422 | HIGH | 7.5 | 1.3% | Jan 2, 2026 | A flaw has been found in EmpireSoft EmpireCMS up to 8.0. This issue affects the function egetip of the file e/class/conn... |
| CVE-2025-15413 | HIGH | 7.8 | 0.2% | Jan 1, 2026 | A vulnerability was detected in wasm3 up to 0.5.0. Impacted is the function op_SetSlot_i32/op_CallIndirect of the file m... |
| CVE-2025-15412 | HIGH | 7.8 | 0.2% | Jan 1, 2026 | A security vulnerability has been detected in WebAssembly wabt up to 1.0.39. This issue affects the function wabt::Decom... |
| CVE-2025-15411 | HIGH | 7.8 | 0.2% | Jan 1, 2026 | A weakness has been identified in WebAssembly wabt up to 1.0.39. This vulnerability affects the function wabt::AST::Inse... |
| CVE-2025-69203 | HIGH | 8.8 | 0.3% | Jan 1, 2026 | Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the access req... |
| CVE-2025-68619 | HIGH | 7.2 | 0.7% | Jan 1, 2026 | Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the appstore i... |
| CVE-2025-55065 | HIGH | 7.5 | 0.2% | Jan 1, 2026 | CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
| CVE-2025-68272 | HIGH | 7.5 | 0.6% | Jan 1, 2026 | Signal K Server is a server application that runs on a central hub in a boat. A Denial of Service (DoS) vulnerability in... |
| CVE-2025-66398 | HIGH | 8.8 | 19.9% | Jan 1, 2026 | Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.19.0, an unauthenticate... |
| CVE-2025-48769 | HIGH | 8.1 | 1.6% | Jan 1, 2026 | Use After Free vulnerability was discovered in fs/vfs/fs_rename code of the Apache NuttX RTOS, that due recursive implem... |
| CVE-2025-47411 | HIGH | 8.1 | 15.3% | Jan 1, 2026 | A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apac... |
| CVE-2025-15406 | HIGH | 8.8 | 0.5% | Jan 1, 2026 | A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipul... |
| CVE-2025-15405 | HIGH | 8.8 | 0.3% | Jan 1, 2026 | A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results... |
| CVE-2025-15404 | HIGH | 8.8 | 0.3% | Jan 1, 2026 | A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an un... |
| CVE-2025-11157 | HIGH | 7.8 | 0.3% | Jan 1, 2026 | A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the Kubern... |
| CVE-2025-68700 | HIGH | 8.8 | 0.7% | Dec 31, 2025 | RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.23.0, a low-privileged aut... |
| CVE-2025-34469 | HIGH | 7.5 | 0.7% | Dec 31, 2025 | Cowrie versions prior to 2.9.0 contain a server-side request forgery (SSRF) vulnerability in the emulated shell implemen... |
| CVE-2025-15398 | HIGH | 8.1 | 0.5% | Dec 31, 2025 | A security vulnerability has been detected in Uasoft badaso up to 2.9.7. Affected is the function forgetPassword of the ... |
| CVE-2025-53235 | HIGH | 7.1 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in osuthorpe Easy Soc... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now