2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-25341 | HIGH | 7.5 | 0.4% | Dec 26, 2025 | A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref... |
| CVE-2025-36192 | HIGH | 7.1 | 0.1% | Dec 26, 2025 | IBM DS8A00( R10.1) 10.10.106.0 and IBM DS8A00 ( R10.0) 10.1.3.010.2.45.0 and IBM DS8900F ( R9.4) 89.40.83.089.42.18.089.... |
| CVE-2025-1721 | HIGH | 7.5 | 0.3% | Dec 26, 2025 | IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due ... |
| CVE-2025-12771 | HIGH | 7.8 | 0.2% | Dec 26, 2025 | IBM Concert 1.0.0 through 2.1.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A lo... |
| CVE-2025-67450 | HIGH | 7.8 | 0.1% | Dec 26, 2025 | Due to insecure library loading in the Eaton UPS Companion software executable, an attacker with access to the software ... |
| CVE-2025-59887 | HIGH | 8.6 | 0.3% | Dec 26, 2025 | Improper authentication of library files in the Eaton UPS Companion software installer could lead to arbitrary code exec... |
| CVE-2025-62578 | HIGH | 7.5 | 0.3% | Dec 26, 2025 | DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information |
| CVE-2025-52601 | HIGH | 7.8 | 0.1% | Dec 26, 2025 | Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/Io... |
| CVE-2025-52600 | HIGH | 7.2 | 0.4% | Dec 26, 2025 | Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/Io... |
| CVE-2025-15097 | HIGH | 7.3 | 0.5% | Dec 26, 2025 | A vulnerability was found in Alteryx Server. Affected by this issue is some unknown functionality of the file /gallery/a... |
| CVE-2025-15085 | HIGH | 8.1 | 0.3% | Dec 25, 2025 | A security flaw has been discovered in youlaitech youlai-mall 1.0.0/2.0.0. This affects the function deductBalance of th... |
| CVE-2025-15082 | HIGH | 7.5 | 0.7% | Dec 25, 2025 | A vulnerability was found in TOZED ZLT M30s up to 1.47. Impacted is an unknown function of the file /reqproc/proc_post o... |
| CVE-2025-2406 | HIGH | 7.6 | 0.3% | Dec 25, 2025 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Verisay Com... |
| CVE-2025-2405 | HIGH | 7.6 | 0.3% | Dec 25, 2025 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Verisay Com... |
| CVE-2025-2307 | HIGH | 7.6 | 0.3% | Dec 25, 2025 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Verisay Com... |
| CVE-2025-66379 | HIGH | 7.5 | 0.4% | Dec 25, 2025 | Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trig... |
| CVE-2025-66378 | HIGH | 7.5 | 0.3% | Dec 25, 2025 | Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacke... |
| CVE-2025-66377 | HIGH | 7.5 | 0.2% | Dec 25, 2025 | Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an att... |
| CVE-2025-48704 | HIGH | 7.5 | 0.3% | Dec 25, 2025 | Pexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Validation in signalling that allows an attacker to trig... |
| CVE-2025-32096 | HIGH | 7.5 | 0.3% | Dec 25, 2025 | Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to trigg... |
| CVE-2025-32095 | HIGH | 7.5 | 0.4% | Dec 25, 2025 | Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a softwa... |
| CVE-2025-15076 | HIGH | 7.3 | 0.7% | Dec 25, 2025 | A weakness has been identified in Tenda CH22 1.0.0.1. Impacted is an unknown function of the file /public/. Executing a ... |
| CVE-2025-68922 | HIGH | 7.4 | 0.2% | Dec 25, 2025 | OpenOps before 0.6.11 allows remote code execution in the Terraform block. |
| CVE-2025-68920 | HIGH | 8.9 | 0.4% | Dec 24, 2025 | C-Kermit (aka ckermit) through 10.0 Beta.12 (aka 416-beta12) before 244644d allows a remote Kermit system to overwrite f... |
| CVE-2025-68916 | HIGH | 7.2 | 2.6% | Dec 24, 2025 | Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload wi... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now