2025 CVE Vulnerabilities
45,138 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-13999 | HIGH | 7.2 | 0.2% | Dec 19, 2025 | The HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player plugin for WordPress is vulnerable to Server-S... |
| CVE-2025-13008 | HIGH | 8.6 | 0.5% | Dec 19, 2025 | An information disclosure vulnerability in M-Files Server before versions 25.12.15491.7, 25.8 LTS SR3, 25.2 LTS SR3 and ... |
| CVE-2025-13307 | HIGH | 7.2 | 0.5% | Dec 19, 2025 | The Ocean Modal Window WordPress plugin before 2.3.3 is vulnerable to Remote Code Execution via the modal display logic.... |
| CVE-2025-14939 | HIGH | 7.2 | 0.3% | Dec 19, 2025 | A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the... |
| CVE-2025-52692 | HIGH | 8.8 | 5.6% | Dec 19, 2025 | Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially craft... |
| CVE-2025-14909 | HIGH | 8.1 | 0.4% | Dec 19, 2025 | A weakness has been identified in JeecgBoot up to 3.9.0. The impacted element is the function SysUserOnlineController of... |
| CVE-2025-13941 | HIGH | 8.8 | 0.2% | Dec 19, 2025 | A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installat... |
| CVE-2025-14908 | HIGH | 8.1 | 0.3% | Dec 19, 2025 | A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file je... |
| CVE-2025-14900 | HIGH | 7.2 | 0.4% | Dec 19, 2025 | A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown functi... |
| CVE-2025-14899 | HIGH | 7.2 | 0.3% | Dec 19, 2025 | A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the f... |
| CVE-2025-11774 | HIGH | 8.2 | 0.5% | Dec 19, 2025 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software... |
| CVE-2025-14898 | HIGH | 7.2 | 0.3% | Dec 19, 2025 | A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of ... |
| CVE-2025-14897 | HIGH | 7.2 | 0.3% | Dec 19, 2025 | A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown functi... |
| CVE-2025-64677 | HIGH | 8.2 | 0.5% | Dec 18, 2025 | Improper neutralization of input during web page generation ('cross-site scripting') in Office Out-of-Box Experience all... |
| CVE-2025-64676 | HIGH | 7.2 | 0.9% | Dec 18, 2025 | '.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network. |
| CVE-2025-64663 | HIGH | 8.8 | 0.7% | Dec 18, 2025 | Custom Question Answering Elevation of Privilege Vulnerability |
| CVE-2025-34452 | HIGH | 8.7 | 5.0% | Dec 18, 2025 | Streama versions 1.10.0 through 1.10.5 and prior to commit b7c8767 contain a combination of path traversal and server-si... |
| CVE-2025-34451 | HIGH | 7.8 | 0.2% | Dec 18, 2025 | rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflo... |
| CVE-2025-34450 | HIGH | 7.8 | 0.2% | Dec 18, 2025 | merbanan/rtl_433 versions up to and including 25.02 and prior to commit 25e47f8 contain a stack-based buffer overflow vu... |
| CVE-2025-67653 | HIGH | 7.5 | 0.6% | Dec 18, 2025 | Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to determine the existence o... |
| CVE-2025-63951 | HIGH | 7.5 | 0.4% | Dec 18, 2025 | An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID project thro... |
| CVE-2025-63950 | HIGH | 7.5 | 0.4% | Dec 18, 2025 | An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through co... |
| CVE-2025-62004 | HIGH | 7.7 | 0.3% | Dec 18, 2025 | BullWall Server Intrusion Protection (SIP) services are initialized after login services during system startup. A local,... |
| CVE-2025-62003 | HIGH | 7.7 | 0.3% | Dec 18, 2025 | BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connect... |
| CVE-2025-62002 | HIGH | 8.1 | 0.3% | Dec 18, 2025 | BullWall Ransomware Containment considers the number of files modified to trigger detection. An authenticated attacker c... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now