2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-52739 | HIGH | 7.1 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Sala allows ... |
| CVE-2025-50053 | HIGH | 7.1 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nebelhorn Blappsta... |
| CVE-2025-47566 | HIGH | 7.1 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZoomSounds allows ... |
| CVE-2025-31054 | HIGH | 7.1 | 0.1% | Dec 31, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Themefy Bloggie allows Reflected XSS.This issue affects Bloggie: from... |
| CVE-2025-30628 | HIGH | 8.5 | 0.2% | Dec 31, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Amazon Aff... |
| CVE-2025-28949 | HIGH | 8.5 | 0.2% | Dec 31, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codedraft Mediabay... |
| CVE-2025-23757 | HIGH | 7.1 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proloy Chakroborty... |
| CVE-2025-23719 | HIGH | 7.1 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zckevin ZhinaTwitt... |
| CVE-2025-23707 | HIGH | 7.1 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matamko En Masse e... |
| CVE-2025-23705 | HIGH | 7.1 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Terry Zielke Zielk... |
| CVE-2025-23667 | HIGH | 7.1 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Christopher Church... |
| CVE-2025-15394 | HIGH | 7.2 | 0.5% | Dec 31, 2025 | A vulnerability was detected in iCMS up to 8.0.0. Affected is the function Save of the file app/config/ConfigAdmincp.php... |
| CVE-2025-15393 | HIGH | 8.8 | 0.4% | Dec 31, 2025 | A security vulnerability has been detected in Kohana KodiCMS up to 13.82.135. This impacts the function Save of the file... |
| CVE-2025-23608 | HIGH | 7.1 | 0.2% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Omar Mohamed Moham... |
| CVE-2025-15392 | HIGH | 8.8 | 0.3% | Dec 31, 2025 | A weakness has been identified in Kohana KodiCMS up to 13.82.135. This affects the function like of the file cms/modules... |
| CVE-2025-64699 | HIGH | 7.8 | — | Dec 31, 2025 | An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The regService process, which run... |
| CVE-2025-62751 | HIGH | 8.8 | 0.2% | Dec 31, 2025 | Missing Authorization vulnerability in extendthemes Vireo vireo allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2025-61037 | HIGH | 7 | 0.1% | Dec 31, 2025 | A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The flaw is a Time-... |
| CVE-2025-15390 | HIGH | 8.8 | 0.3% | Dec 31, 2025 | A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edi... |
| CVE-2025-15389 | HIGH | 8.8 | 1.1% | Dec 31, 2025 | VPN Firewall developed by QNO Technology has an OS Command Injection vulnerability, allowing authenticated remote attack... |
| CVE-2025-62992 | HIGH | 8.1 | 0.2% | Dec 31, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path Traversal.Thi... |
| CVE-2025-49028 | HIGH | 7.1 | 0.1% | Dec 31, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Zoho Mail Zoho ZeptoMail transmail allows Stored XSS.This issue affec... |
| CVE-2025-15388 | HIGH | 8.8 | 0.9% | Dec 31, 2025 | VPN Firewall developed by QNO Technology has an OS Command Injection vulnerability, allowing authenticated remote attack... |
| CVE-2025-15387 | HIGH | 8.8 | 0.3% | Dec 31, 2025 | VPN Firewall developed by QNO Technology has a Insufficient Entropy vulnerability, allowing unauthenticated remote attac... |
| CVE-2025-2026 | HIGH | 7.1 | 0.4% | Dec 31, 2025 | The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attacke... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now