2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-68131 | HIGH | 7.5 | 0.4% | Dec 31, 2025 | cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format. Starting ... |
| CVE-2025-15371 | HIGH | 7.8 | 0.1% | Dec 31, 2025 | A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. A... |
| CVE-2025-62753 | HIGH | 7.5 | 0.3% | Dec 30, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-59131 | HIGH | 7.1 | 0.1% | Dec 30, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in hoernerfranz WP-CalDav2ICS wp-caldav2ics allows Stored XSS.This issue... |
| CVE-2025-15360 | HIGH | 7.2 | 0.3% | Dec 30, 2025 | A vulnerability was determined in newbee-mall-plus 2.0.0. This impacts the function Upload of the file src/main/java/ltd... |
| CVE-2025-66723 | HIGH | 7.5 | 0.4% | Dec 30, 2025 | inMusic Brands Engine DJ before 4.3.4 suffers from Insecure Permissions due to exposed HTTP service in the Remote Librar... |
| CVE-2025-61594 | HIGH | 7.5 | 0.5% | Dec 30, 2025 | URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Rub... |
| CVE-2025-15356 | HIGH | 8.8 | 3.4% | Dec 30, 2025 | A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the function sscanf of the file ... |
| CVE-2025-69261 | HIGH | 7.5 | 0.3% | Dec 30, 2025 | WasmEdge is a WebAssembly runtime. Prior to version 0.16.0-alpha.3, a multiplication in `WasmEdge/include/runtime/instan... |
| CVE-2025-69256 | HIGH | 7.5 | 1.9% | Dec 30, 2025 | The Serverless Framework is a framework for using AWS Lambda and other managed cloud services to build applications. Sta... |
| CVE-2025-66835 | HIGH | 7.1 | 0.2% | Dec 30, 2025 | TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers to execute arbitrary... |
| CVE-2025-66834 | HIGH | 7.3 | 0.3% | Dec 30, 2025 | A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadshe... |
| CVE-2025-66824 | HIGH | 8.7 | 0.3% | Dec 30, 2025 | A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference fun... |
| CVE-2025-15264 | HIGH | 7.3 | 0.3% | Dec 30, 2025 | A vulnerability was determined in FeehiCMS up to 2.1.1. Impacted is an unknown function of the file frontend/web/timthum... |
| CVE-2025-65411 | HIGH | 7.5 | 0.5% | Dec 30, 2025 | A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Servi... |
| CVE-2025-65409 | HIGH | 7.5 | 0.3% | Dec 30, 2025 | A divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Servic... |
| CVE-2025-15262 | HIGH | 7.2 | 0.3% | Dec 30, 2025 | A security flaw has been discovered in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admi... |
| CVE-2025-69204 | HIGH | 7.5 | 0.5% | Dec 30, 2025 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12... |
| CVE-2025-68618 | HIGH | 7.5 | 0.6% | Dec 30, 2025 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12... |
| CVE-2025-59129 | HIGH | 7.6 | 0.3% | Dec 30, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appointify Appoint... |
| CVE-2025-61557 | HIGH | 7.5 | 0.6% | Dec 30, 2025 | nixseparatedebuginfod before v0.4.1 is vulnerable to Directory Traversal. |
| CVE-2025-15254 | HIGH | 8.8 | 3.3% | Dec 30, 2025 | A vulnerability was found in Tenda W6-S 1.0.0.4(510). This affects the function TendaAte of the file /goform/ate of the ... |
| CVE-2025-15253 | HIGH | 8.8 | 0.6% | Dec 30, 2025 | A vulnerability has been found in Tenda M3 1.0.0.13(4903). The impacted element is an unknown function of the file /gofo... |
| CVE-2025-15252 | HIGH | 8.8 | 2.9% | Dec 30, 2025 | A flaw has been found in Tenda M3 1.0.0.13(4903). The affected element is the function formSetRemoteDhcpForAp of the fil... |
| CVE-2025-14509 | HIGH | 7.2 | 0.6% | Dec 30, 2025 | The Lucky Wheel for WooCommerce – Spin a Sale plugin for WordPress is vulnerable to PHP Code Injection in all versions u... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now