2025 CVE Vulnerabilities
45,137 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-13968 | MEDIUM | 6.4 | 0.2% | Jul 11, 2026 | The Starboard Suite Reservation Calendars plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcod... |
| CVE-2025-30008 | MEDIUM | 5.4 | 0.2% | Jul 10, 2026 | HestiaCP before 1.9.5 contains a stored cross-site scripting vulnerability that allows authenticated low-privilege users... |
| CVE-2025-30007 | HIGH | 8.8 | 2.1% | Jul 10, 2026 | HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows low-privilege authenticat... |
| CVE-2025-70796 | HIGH | 7.5 | — | Jul 10, 2026 | An unauthenticated path traversal vulnerability exists in the web management interface of WTI (Wireless Technology, Inc.... |
| CVE-2025-12127 | — | — | — | Jul 10, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2025-11977 | MEDIUM | 6.6 | 0.5% | Jul 10, 2026 | The Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms plugin fo... |
| CVE-2025-45422 | HIGH | 8.1 | 0.2% | Jul 9, 2026 | Incorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass normal restrictions and mak... |
| CVE-2025-63579 | HIGH | 7.5 | 0.2% | Jul 9, 2026 | Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The secu... |
| CVE-2025-58151 | CRITICAL | 9.4 | — | Jul 9, 2026 | varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF ... |
| CVE-2025-58146 | CRITICAL | 9.4 | — | Jul 9, 2026 | There are multiple issues. 1. Updates to the XAPI database sanitise input strings, but try generating the notifica... |
| CVE-2025-27464 | CRITICAL | 9.4 | — | Jul 9, 2026 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi... |
| CVE-2025-27463 | CRITICAL | 9.4 | — | Jul 9, 2026 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi... |
| CVE-2025-27462 | CRITICAL | 9.4 | — | Jul 9, 2026 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi... |
| CVE-2025-12506 | MEDIUM | 4.3 | 0.2% | Jul 8, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and ... |
| CVE-2025-3110 | HIGH | 7.5 | 0.3% | Jul 8, 2026 | OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote at... |
| CVE-2025-14785 | MEDIUM | 6.4 | — | Jul 8, 2026 | The Website Builder by SeedProd - Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for Wor... |
| CVE-2025-12799 | MEDIUM | 6.5 | 0.2% | Jul 7, 2026 | A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined config... |
| CVE-2025-59617 | HIGH | 7.3 | 0.1% | Jul 6, 2026 | Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input. |
| CVE-2025-59616 | HIGH | 7.8 | 0.1% | Jul 6, 2026 | Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing alrea... |
| CVE-2025-59615 | HIGH | 7.8 | 0.1% | Jul 6, 2026 | Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffe... |
| CVE-2025-53831 | HIGH | 8.2 | — | Jul 6, 2026 | DrawIO for ownCloud is an application for using DrawIO with the file storage, synchronization, and sharing application o... |
| CVE-2025-53830 | CRITICAL | 9.1 | 0.3% | Jul 6, 2026 | Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud... |
| CVE-2025-53829 | HIGH | 8 | 0.3% | Jul 6, 2026 | ownCloud is a file storage, synchronization, and sharing application. In ownCloud 10 prior to version 10.15.3, an attack... |
| CVE-2025-53828 | HIGH | 8.5 | 0.2% | Jul 6, 2026 | SharePoint for ownCloud is an application for using SharePoint with the file storage, synchronization, and sharing appli... |
| CVE-2025-53827 | CRITICAL | 9.1 | 0.3% | Jul 6, 2026 | ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCloud Classi... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now