2025 CVE Vulnerabilities
45,321 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-12513 | MEDIUM | 4.8 | 0.2% | Jan 5, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon In... |
| CVE-2025-12511 | MEDIUM | 4.8 | 0.2% | Jan 5, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon In... |
| CVE-2025-68029 | MEDIUM | 6.3 | 0.2% | Jan 5, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in WP Swings Wallet System for WooCommerce wallet-system... |
| CVE-2025-68014 | MEDIUM | 6.5 | 0.2% | Jan 5, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in awethemes AweBooking awebooking allows Retrieve Embed... |
| CVE-2025-31046 | MEDIUM | 4.3 | 0.2% | Jan 5, 2026 | Missing Authorization vulnerability in WPvibes AnyWhere Elementor Pro allows Exploiting Incorrectly Configured Access Co... |
| CVE-2025-13056 | MEDIUM | 4.8 | 0.2% | Jan 5, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon In... |
| CVE-2025-12519 | MEDIUM | 5.3 | 0.2% | Jan 5, 2026 | Missing Authorization vulnerability in Centreon Infra Monitoring (Administration parameters API endpoint modules) allows... |
| CVE-2025-15237 | MEDIUM | 5.3 | 0.3% | Jan 5, 2026 | QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticat... |
| CVE-2025-15236 | MEDIUM | 5.3 | 0.3% | Jan 5, 2026 | QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticat... |
| CVE-2025-15022 | MEDIUM | 4.8 | 0.3% | Jan 5, 2026 | Action captions in Vaadin accept HTML by default but were not sanitized, potentially allowing Cross-site Scripting (XSS)... |
| CVE-2025-15455 | MEDIUM | 6.5 | 0.6% | Jan 5, 2026 | A flaw has been found in bg5sbk MiniCMS up to 1.8. Impacted is the function delete_page of the file /minicms/mc-admin/pa... |
| CVE-2025-15453 | MEDIUM | 6.3 | 0.3% | Jan 5, 2026 | A security vulnerability has been detected in milvus up to 2.6.7. This vulnerability affects the function expr.Exec of t... |
| CVE-2025-15452 | MEDIUM | 4.8 | 0.2% | Jan 5, 2026 | A weakness has been identified in xnx3 wangmarket up to 4.9. This affects the function variableList of the file /admin/s... |
| CVE-2025-15451 | MEDIUM | 4.8 | 0.2% | Jan 5, 2026 | A security flaw has been discovered in xnx3 wangmarket up to 4.9. Affected by this issue is some unknown functionality o... |
| CVE-2025-15450 | MEDIUM | 6.3 | 0.3% | Jan 5, 2026 | A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected by this v... |
| CVE-2025-5591 | MEDIUM | 5.4 | 0.1% | Jan 5, 2026 | Kentico Xperience 13 is vulnerable to a stored cross-site scripting attack via a form component, allowing an attacker to... |
| CVE-2025-14830 | MEDIUM | 4.9 | 0.2% | Jan 4, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in JFrog Artif... |
| CVE-2025-3652 | MEDIUM | 6.9 | 0.2% | Jan 4, 2026 | Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows un... |
| CVE-2025-64122 | MEDIUM | 5.5 | 0.1% | Jan 2, 2026 | Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoo... |
| CVE-2025-69417 | MEDIUM | 4.3 | 0.3% | Jan 2, 2026 | In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token can retrieve share toke... |
| CVE-2025-69416 | MEDIUM | 4.3 | 0.3% | Jan 2, 2026 | In the plex.tv backend for Plex Media Server (PMS) through 2025-12-31, a non-server device token can retrieve other toke... |
| CVE-2025-34171 | MEDIUM | 5.3 | 0.5% | Jan 2, 2026 | CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retr... |
| CVE-2025-15439 | MEDIUM | 6.3 | 0.2% | Jan 2, 2026 | A vulnerability was identified in Daptin 0.10.3. Affected by this vulnerability is the function goqu.L of the file serve... |
| CVE-2025-69284 | MEDIUM | 4.3 | 0.2% | Jan 2, 2026 | Plane is an an open-source project management tool. In plane.io, a guest user doesn't have a permission to access https[... |
| CVE-2025-62852 | MEDIUM | 6.5 | 0.3% | Jan 2, 2026 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now