2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-3232 | HIGH | 7.5 | 0.5% | Dec 24, 2025 | A remote unauthenticated attacker may be able to bypass authentication by utilizing a specific API route to execute arb... |
| CVE-2025-2515 | HIGH | 7.2 | 0.2% | Dec 24, 2025 | A vulnerability was found in BlueChi, a multi-node systemd service controller used in RHIVOS. This flaw allows a user wi... |
| CVE-2025-43876 | HIGH | 8.7 | 0.3% | Dec 24, 2025 | Under certain circumstances a successful exploitation could result in access to the device. |
| CVE-2025-43875 | HIGH | 8.7 | 0.3% | Dec 24, 2025 | Under certain circumstances a successful exploitation could result in access to the device. |
| CVE-2025-2155 | HIGH | 8.8 | 0.3% | Dec 24, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade and Industry Inc. Spect... |
| CVE-2025-68748 | HIGH | 7.8 | 0.1% | Dec 24, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF race between device unplug and... |
| CVE-2025-68747 | HIGH | 7.8 | 0.1% | Dec 24, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF on kernel BO VA nodes If the ... |
| CVE-2025-68746 | HIGH | 7.8 | 0.1% | Dec 24, 2025 | In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When the ... |
| CVE-2025-68736 | HIGH | 8.8 | 0.1% | Dec 24, 2025 | In the Linux kernel, the following vulnerability has been resolved: landlock: Fix handling of disconnected directories ... |
| CVE-2025-68735 | HIGH | 7.8 | 0.2% | Dec 24, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Prevent potential UAF in group creatio... |
| CVE-2025-68608 | HIGH | 7.5 | 0.2% | Dec 24, 2025 | Missing Authorization vulnerability in DeluxeThemes Userpro userpro allows Exploiting Incorrectly Configured Access Cont... |
| CVE-2025-68590 | HIGH | 7.6 | 0.3% | Dec 24, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Integrat... |
| CVE-2025-68570 | HIGH | 7.6 | 0.3% | Dec 24, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in captivateaudio Cap... |
| CVE-2025-68563 | HIGH | 7.5 | 0.4% | Dec 24, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68540 | HIGH | 7.5 | 0.4% | Dec 24, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68537 | HIGH | 7.5 | 0.4% | Dec 24, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68530 | HIGH | 7.5 | 0.4% | Dec 24, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68519 | HIGH | 8.5 | 0.3% | Dec 24, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BeRocket Brands fo... |
| CVE-2025-68506 | HIGH | 8.1 | 0.5% | Dec 24, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68496 | HIGH | 7.6 | 0.5% | Dec 24, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Syed Balkhi User F... |
| CVE-2025-68038 | HIGH | 7.2 | 0.4% | Dec 24, 2025 | Deserialization of Untrusted Data vulnerability in Icegram Icegram Express Pro email-subscribers-premium allows Object I... |
| CVE-2025-67909 | HIGH | 7.5 | 0.4% | Dec 24, 2025 | Authorization Bypass Through User-Controlled Key vulnerability in WP Swings Membership For WooCommerce membership-for-wo... |
| CVE-2025-67622 | HIGH | 7.1 | 0.1% | Dec 24, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in titopandub Evergreen Post Tweeter evergreen-post-tweeter allows Store... |
| CVE-2025-68730 | HIGH | 7.8 | 0.1% | Dec 24, 2025 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bo... |
| CVE-2025-68724 | HIGH | 7.8 | 0.1% | Dec 24, 2025 | In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in asymm... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now