2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-34458 | HIGH | 8.7 | 0.5% | Dec 22, 2025 | wb2osz/direwolf (Dire Wolf) versions up to and including 1.8.1, prior to commit 3658a87, contain a reachable assertion v... |
| CVE-2025-34457 | HIGH | 8.7 | 0.5% | Dec 22, 2025 | wb2osz/direwolf (Dire Wolf) versions up to and including 1.8.1, prior to commit 694c954, contain a stack-based buffer ov... |
| CVE-2025-66736 | HIGH | 7.1 | 0.3% | Dec 22, 2025 | youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does n... |
| CVE-2025-66735 | HIGH | 7.5 | 0.4% | Dec 22, 2025 | youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does n... |
| CVE-2025-65817 | HIGH | 8.8 | 0.3% | Dec 22, 2025 | LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in start_app.sh. |
| CVE-2025-63664 | HIGH | 7.5 | 0.3% | Dec 22, 2025 | Incorrect access control in the /api/v1/conversations/*/messages API of GT Edge AI Platform before v2.0.10-dev allows un... |
| CVE-2025-63663 | HIGH | 7.5 | 0.3% | Dec 22, 2025 | Incorrect access control in the /api/v1/conversations/*/files API of GT Edge AI Platform before v2.0.10 allows unauthori... |
| CVE-2025-63662 | HIGH | 7.5 | 0.3% | Dec 22, 2025 | Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers t... |
| CVE-2025-68645 | HIGH | 8.8 | 48.9% | Dec 22, 2025 | A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 ... |
| CVE-2025-68337 | HIGH | 7.5 | 0.6% | Dec 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_acces... |
| CVE-2025-68336 | HIGH | 7.5 | 0.5% | Dec 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: locking/spinlock/debug: Fix data-race in do_raw_wri... |
| CVE-2025-10021 | HIGH | 7 | 0.2% | Dec 22, 2025 | A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK static versions (mt) before 20... |
| CVE-2025-67826 | HIGH | 7.7 | 0.1% | Dec 22, 2025 | An issue was discovered in K7 Ultimate Security 17.0.2045. A Local Privilege Escalation (LPE) vulnerability in the K7 Ul... |
| CVE-2025-61740 | HIGH | 7.2 | 0.1% | Dec 22, 2025 | Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-ser... |
| CVE-2025-26379 | HIGH | 7.2 | 0.2% | Dec 22, 2025 | Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets. |
| CVE-2025-14018 | HIGH | 7.3 | 0.4% | Dec 22, 2025 | Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating ... |
| CVE-2025-14273 | HIGH | 8.3 | 0.3% | Dec 22, 2025 | Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 with the Jira plugin enab... |
| CVE-2025-61739 | HIGH | 7.2 | 0.2% | Dec 22, 2025 | Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets. |
| CVE-2025-12514 | HIGH | 7.2 | 0.3% | Dec 22, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Mon... |
| CVE-2025-11540 | HIGH | 7.5 | 0.3% | Dec 22, 2025 | Path Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access and read any files withi... |
| CVE-2025-59301 | HIGH | 7.5 | 0.2% | Dec 22, 2025 | Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service. |
| CVE-2025-15015 | HIGH | 7.5 | 0.6% | Dec 22, 2025 | Enterprise Cloud Database developed by Ragic has a Arbitrary File Read vulnerability, allowing unauthenticated remote at... |
| CVE-2025-15009 | HIGH | 8.8 | 0.3% | Dec 22, 2025 | A flaw has been found in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function FilenameUtils.getExten... |
| CVE-2025-15004 | HIGH | 8.8 | 0.4% | Dec 22, 2025 | A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelist_main.php... |
| CVE-2025-15003 | HIGH | 7.2 | 0.4% | Dec 22, 2025 | A vulnerability was found in SeaCMS up to 13.3. The impacted element is an unknown function of the file admin_video.php.... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now