2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-14930 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability... |
| CVE-2025-14929 | HIGH | 7.8 | 0.4% | Dec 23, 2025 | Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerabi... |
| CVE-2025-14928 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability a... |
| CVE-2025-14927 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability al... |
| CVE-2025-14926 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allo... |
| CVE-2025-14925 | HIGH | 7.8 | 0.4% | Dec 23, 2025 | Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows... |
| CVE-2025-14924 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vuln... |
| CVE-2025-14922 | HIGH | 7.8 | 0.4% | Dec 23, 2025 | Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerabilit... |
| CVE-2025-14921 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. Th... |
| CVE-2025-14920 | HIGH | 7.8 | 0.4% | Dec 23, 2025 | Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vu... |
| CVE-2025-11419 | HIGH | 7.5 | 0.7% | Dec 23, 2025 | A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service ... |
| CVE-2025-25364 | HIGH | 8.4 | 0.9% | Dec 23, 2025 | A command injection vulnerability in the me.connectify.SMJobBlessHelper XPC service of Speedify VPN up to v15.0.0 allows... |
| CVE-2025-67111 | HIGH | 7.5 | 0.3% | Dec 23, 2025 | An integer overflow in the RTPS protocol implementation of OpenDDS DDS before v3.33.0 allows attackers to cause a Denial... |
| CVE-2025-65865 | HIGH | 7.5 | 0.4% | Dec 23, 2025 | An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2025-13183 | HIGH | 7.3 | 0.3% | Dec 23, 2025 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hotech Soft... |
| CVE-2025-68561 | HIGH | 7.6 | 0.3% | Dec 23, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia Autom... |
| CVE-2025-68560 | HIGH | 7.5 | 0.4% | Dec 23, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68550 | HIGH | 7.6 | 0.3% | Dec 23, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme WPBulky... |
| CVE-2025-68546 | HIGH | 7.5 | 0.4% | Dec 23, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68544 | HIGH | 7.5 | 0.4% | Dec 23, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-59886 | HIGH | 8.8 | 0.3% | Dec 23, 2025 | Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could lead into an attacker w... |
| CVE-2025-12934 | HIGH | 8.1 | 0.4% | Dec 23, 2025 | The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to unauthorized access and modification o... |
| CVE-2025-68476 | HIGH | 8.2 | 0.6% | Dec 22, 2025 | KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to versions 2.17.3 and 2.18.3, an Arbitrary File Re... |
| CVE-2025-68475 | HIGH | 7.5 | 0.6% | Dec 22, 2025 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to versions 1.6.13, 1.7.... |
| CVE-2025-65857 | HIGH | 7.5 | 0.4% | Dec 22, 2025 | An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetS... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now