2025 CVE Vulnerabilities
45,255 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-55622 | MEDIUM | 6.5 | 0.3% | Aug 22, 2025 | Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity se... |
| CVE-2025-55621 | MEDIUM | 6.5 | 0.2% | Aug 22, 2025 | An Insecure Direct Object Reference (IDOR) vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to ... |
| CVE-2025-55620 | MEDIUM | 6.1 | 0.2% | Aug 22, 2025 | A cross-site scripting (XSS) vulnerability in the valuateJavascript() function of Reolink v4.54.0.4.20250526 allows atta... |
| CVE-2025-55619 | CRITICAL | 9.8 | 0.4% | Aug 22, 2025 | Reolink v4.54.0.4.20250526 was discovered to contain a hardcoded encryption key and initialization vector. An attacker c... |
| CVE-2025-55398 | CRITICAL | 9.8 | 0.3% | Aug 22, 2025 | An issue was discovered in mouse07410 asn1c thru 0.9.29 (2025-03-20) - a fork of vlm asn1c. In UPER (Unaligned Packed En... |
| CVE-2025-55741 | HIGH | 8.1 | 0.4% | Aug 22, 2025 | UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. In versions 0.3.0 a... |
| CVE-2025-55611 | HIGH | 7.5 | 0.4% | Aug 22, 2025 | D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formLanguageChange function via the nextPage parameter. |
| CVE-2025-55606 | HIGH | 7.5 | 0.4% | Aug 22, 2025 | Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function via the serverName parame... |
| CVE-2025-55605 | HIGH | 7.5 | 0.4% | Aug 22, 2025 | Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName para... |
| CVE-2025-55603 | HIGH | 7.5 | 0.4% | Aug 22, 2025 | Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter. |
| CVE-2025-55602 | HIGH | 7.5 | 0.5% | Aug 22, 2025 | D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formSysCmd function via the submit-url parameter. |
| CVE-2025-55599 | HIGH | 7.5 | 0.4% | Aug 22, 2025 | D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formWlanSetup function via the parameter f_wds_wepKey. |
| CVE-2025-53363 | MEDIUM | 4.8 | 0.4% | Aug 22, 2025 | dpanel is an open source server management panel written in Go. In versions 1.2.0 through 1.7.2, dpanel allows authentic... |
| CVE-2025-52095 | CRITICAL | 9.8 | 0.3% | Aug 22, 2025 | An issue in PDQ Smart Deploy V.3.0.2040 allows an attacker to escalate privileges via the Credential encryption routines... |
| CVE-2025-52094 | HIGH | 7.8 | 0.2% | Aug 22, 2025 | Insecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to execute arbtirary code via ... |
| CVE-2025-51605 | HIGH | 8.1 | 0.2% | Aug 22, 2025 | An issue was discovered in Shopizer 3.2.7. The server's CORS implementation reflects the client-supplied Origin header v... |
| CVE-2025-50733 | MEDIUM | 6.1 | 0.2% | Aug 22, 2025 | NextChat contains a cross-site scripting (XSS) vulnerability in the HTMLPreview component of artifacts.tsx that allows a... |
| CVE-2025-50674 | HIGH | 7.8 | 0.2% | Aug 22, 2025 | An issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system/user.inc in OpenMediaV... |
| CVE-2025-43751 | MEDIUM | 5.3 | 0.3% | Aug 22, 2025 | User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2... |
| CVE-2025-38675 | MEDIUM | 4.7 | 0.1% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: xfrm: state: initialize state_ptrs earlier in xfrm_... |
| CVE-2025-38674 | MEDIUM | 5.5 | 0.1% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/prime: Use dma_buf from GEM object inst... |
| CVE-2025-38673 | MEDIUM | 5.5 | 0.1% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-framebuffer: Use dma_buf from GEM o... |
| CVE-2025-38672 | MEDIUM | 5.5 | 0.1% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-dma: Use dma_buf from GEM object in... |
| CVE-2025-38671 | MEDIUM | 5.5 | 0.1% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: i2c: qup: jump out of the loop in case of timeout ... |
| CVE-2025-38670 | HIGH | 7.1 | 0.2% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: arm64/entry: Mask DAIF in cpu_switch_to(), call_on_... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now