2025 CVE Vulnerabilities

45,138 CVEs published in 2025.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2025-60458MEDIUM6.5UxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially crafted RTSP TEARDOWN request...
CVE-2025-57462MEDIUM6.1Stored cross-site scripting (xss) in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML ...
CVE-2025-15188MEDIUM4.8A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affe...
CVE-2025-15187MEDIUM6.5A vulnerability was found in GreenCMS up to 2.3. This affects an unknown part of the file /DataController.class.php of t...
CVE-2025-15175MEDIUM5.4A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doAppList/appComma...
CVE-2025-15174MEDIUM5.4A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this vulnerability is the funct...
CVE-2025-15070MEDIUM6.5Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allo...
CVE-2025-13958MEDIUM5.9The YaMaps for WordPress Plugin WordPress plugin before 0.6.40 does not validate and escape some of its shortcode attrib...
CVE-2025-15173MEDIUM5.4A weakness has been identified in SohuTV CacheCloud up to 3.2.0. Affected is the function advancedAnalysis of the file s...
CVE-2025-15172MEDIUM5.4A security flaw has been discovered in SohuTV CacheCloud up to 3.2.0. This impacts the function preview of the file src/...
CVE-2025-15171MEDIUM5.4A vulnerability was identified in SohuTV CacheCloud up to 3.2.0. This affects the function index of the file src/main/ja...
CVE-2025-15170MEDIUM6.1A security vulnerability has been detected in Advaya Softech GEMS ERP Portal up to 2.1. This affects an unknown part of ...
CVE-2025-15066MEDIUM6.9Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in I...
CVE-2025-15156MEDIUM4.3A flaw has been found in omec-project UPF up to 2.1.3-dev. This affects the function handleSessionEstablishmentRequest o...
CVE-2025-15154MEDIUM5.5A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function get_user_ip of...
CVE-2025-15153MEDIUM5.9A weakness has been identified in PbootCMS up to 3.2.12. Impacted is an unknown function of the file /data/pbootcms.db o...
CVE-2025-15152MEDIUM6.3A vulnerability was identified in h-moses moga-mall up to 392d631a5ef15962a9bddeeb9f1269b9085473fa. This vulnerability a...
CVE-2025-15146MEDIUM4.8A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This impacts the function doUserList of the file src/main...
CVE-2025-15145MEDIUM6.1A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. This affects the function doTotalList of th...
CVE-2025-15144MEDIUM6.1A weakness has been identified in dayrui XunRuiCMS up to 4.7.1. The impacted element is the function dr_show_error/dr_ex...
CVE-2025-15135MEDIUM6.3A weakness has been identified in joey-zhou xiaozhi-esp32-server-java up to 3.0.0. This impacts the function tryAuthenti...
CVE-2025-15130MEDIUM4.7A vulnerability has been found in shanyu SyCms up to a242ef2d194e8bb249dc175e7c49f2c1673ec921. This issue affects the fu...
CVE-2025-15129MEDIUM6.3A flaw has been found in ChenJinchuang Lin-CMS-TP5 up to 0.3.3. This vulnerability affects the function Upload of the fi...
CVE-2025-15128MEDIUM5.5A vulnerability was detected in ZKTeco BioTime up to 9.0.3/9.0.4/9.5.2. This affects an unknown part of the file /base/s...
CVE-2025-15121MEDIUM4.9A vulnerability has been found in JeecgBoot up to 3.9.0. The affected element is the function getDeptRoleByUserId of the...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now