CVE-2025 list

CVE-2025 records published in December 2025

Page three of five: records 2,001 to 3,000 of the 4,374 published in December 2025, newest first. The first page carries the figures for December 2025.

CVE-2025 records published in December 2025, newest first: records 2,001 to 3,000 of 4,374
CVE Summary CVSS EPSS Published Signals
CVE-2025-29231Linksys E5600 page_save component stored cross-site scripting6.1CISA ADP v3.10.2%2025-12-16
CVE-2025-14780Xiongwei Smart Catering Cloud Platform dish_trade_detail_get SQL injection5.3CNA v4.00.2%2025-12-16
CVE-2025-14777Keycloak: Keycloak IDOR in realm client creating/deleting6.0CNA v3.10.3%2025-12-16Fix
CVE-2025-14766Google Chrome V8 out-of-bounds read8.8NVD v3.13.2%2025-12-16Fix
CVE-2025-14765Google Chrome WebGPU use-after-free8.8CISA ADP v3.13.0%2025-12-16Fix
CVE-2025-14758Initialization of a resource with an insecure default in YAOOK6.5CNA v3.10.2%2025-12-16Fix
CVE-2025-14749Ningyuanda TC155 ONVIF PTZ Control device_service access control8.8NVD v3.10.8%2025-12-16
CVE-2025-14748Ningyuanda TC155 ONVIF Device Management service device_service access control5.3CNA v4.00.6%2025-12-16
CVE-2025-14747Ningyuanda TC155 RTSP service denial of service6.5NVD v3.10.7%2025-12-16
CVE-2025-14746Ningyuanda TC155 RTSP Live Video Stream endpoint improper authentication6.5NVD v3.10.9%2025-12-16
CVE-2025-14731CTCMS Content Management System template parser server-side template injection7.2NVD v3.10.4%2025-12-16
CVE-2025-14593Autodesk Shared Components CATPART File Parsing out-of-bounds read7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-14553Password hash leak could lead to unauthorized access on Tapo App via Local Network7.0CNA v4.00.2%2025-12-16Fix
CVE-2025-14466Güralp Systems Fortimus, Minimus and Certimus series web interface denial of service6.9CNA v4.00.4%2025-12-16
CVE-2025-14443Red Hat OpenShift Container Platform 4 openshift-apiserver: SSRF6.4CNA v3.10.3%2025-12-16
CVE-2025-14432Poly Video Sensitive Data might be Written to Log file8.1CNA v4.00.4%2025-12-16Fix
CVE-2025-14252Advantech SUSI improper access control8.5CNA v4.00.1%2025-12-16
CVE-2025-14002WPCOM Member WordPress plugin authentication bypass via Weak OTP8.1CNA v3.10.5%2025-12-16Fix
CVE-2025-13956LearnPress WordPress LMS plugin missing authorization to unauthenticated orders Statistics exposure5.3CNA v3.10.9%2025-12-16NucleiFix
CVE-2025-13794Auto Featured Image WordPress plugin missing authorization authenticated post Thumbnail modification4.3CNA v3.10.3%2025-12-16Fix
CVE-2025-13741Schedule Post Changes With PublishPress Future: Unpublish WordPress plugin unauthorized access4.3CNA v3.10.3%2025-12-16Fix
CVE-2025-13532Weak password hash in Core Privileged Access Manager (BoKS)6.2CNA v3.10.1%2025-12-16
CVE-2025-13474IDOR in Menulux Software's Mobile App7.5CNA v3.10.3%2025-12-16Fix
CVE-2025-13439Fancy Product Designer WordPress plugin information disclosure5.9CNA v3.10.3%2025-12-16Fix
CVE-2025-13231Fancy Product Designer WooCommerce WordPress plugin unauthenticated server-side request forgery6.5CNA v3.10.2%2025-12-16Fix
CVE-2025-12809dokan pro WordPress plugin missing authorization to unauthenticated sensitive information exposure5.3CNA v3.10.2%2025-12-16Fix
CVE-2025-11991JetFormBuilder WordPress plugin missing authorization to unauthenticated form Generation5.3CNA v3.10.2%2025-12-16Fix
CVE-2025-11220Elementor WordPress plugin stored DOM-based cross-site scripting6.4CNA v3.10.2%2025-12-16Fix
CVE-2025-10900Autodesk Shared Components MODEL File Parsing out-of-bounds write7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-10899Autodesk Shared Components MODEL File Parsing out-of-bounds write7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-10889Autodesk Shared Components CATPART File Parsing memory corruption7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-10888Autodesk Shared Components MODEL File Parsing out-of-bounds write7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-10887Autodesk Shared Components MODEL File Parsing memory corruption7.8CNA v3.10.2%2025-12-16Fix
CVE-2025-10886Autodesk Shared Components MODEL File Parsing memory corruption7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-10884Autodesk Shared Components CATPART File Parsing out-of-bounds write7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-10883Autodesk Shared Components CATPRODUCT File Parsing out-of-bounds read7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-10450RTI Connext Professional personal information exposure8.3CNA v4.00.2%2025-12-16Fix
CVE-2025-9460Autodesk Shared Components SLDPRT File Parsing out-of-bounds read7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-9459Autodesk Shared Components SLDPRT File Parsing out-of-bounds read7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-9457Autodesk Shared Components PRT File Parsing memory corruption7.8CNA v3.10.2%2025-12-16Fix
CVE-2025-9456Autodesk Shared Components SLDPRT File Parsing memory corruption7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-9455Autodesk Shared Components CATPRODUCT File Parsing out-of-bounds read7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-9454Autodesk Shared Components PRT File Parsing out-of-bounds read7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-9453Autodesk Shared Components PRT File Parsing out-of-bounds read7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-9452Autodesk Shared Components SLDPRT File Parsing memory corruption7.8CNA v3.10.3%2025-12-16Fix
CVE-2025-8872Arista EOS OSPFv3 process denial of service7.1CNA v4.00.3%2025-12-16
CVE-2025-0836XProtect MIP API missing authorization5.3CNA v4.00.2%2025-12-16Fix
CVE-2025-67906MISP cross-site scripting9.0NVD v3.10.3%2025-12-15Exploit codeFix
CVE-2025-67901kristapsdz openrsync improper quantity validation5.3CNA v3.10.3%2025-12-15
CVE-2025-67809Zimbra Collaboration hard-coded credentials4.7CISA ADP v3.10.3%2025-12-15Fix
CVE-2025-66963Hitrontech HI3120 information disclosure5.5CISA ADP v3.10.1%2025-12-15
CVE-2025-66844Grav may be vulnerable to SSRF attack via Twig templates9.1CISA ADP v3.10.3%2025-12-15
CVE-2025-66843Grav is vulnerable to stored XSS through authenticated user-edited content5.4NVD v3.10.2%2025-12-15
CVE-2025-66440frappe erpnext SQL injection8.8NVD v3.10.4%2025-12-15
CVE-2025-66439frappe erpnext SQL injection8.8NVD v3.10.4%2025-12-15
CVE-2025-66438frappe erpnext server-side template injection8.8NVD v3.10.5%2025-12-15
CVE-2025-66437frappe erpnext get_address_display method server-side template injection8.8NVD v3.10.6%2025-12-15
CVE-2025-66436frappe erpnext get_terms_and_conditions method server-side template injection4.3NVD v3.10.3%2025-12-15
CVE-2025-66435frappe erpnext get_contract_template method server-side template injection4.3NVD v3.10.3%2025-12-15
CVE-2025-66434frappe erpnext get_dunning_letter_text method server-side template injection8.8NVD v3.10.6%2025-12-15
CVE-2025-66388Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI6.5NVD v3.10.5%2025-12-15Fix
CVE-2025-65835Eddyverbruggen Cordova-plugin-x-socialsharing null pointer dereference6.2CISA ADP v3.10.3%2025-12-15
CVE-2025-65782WeKan improper authorization6.5NVD v3.10.3%2025-12-15Fix
CVE-2025-65781WeKan improper authentication8.2NVD v3.10.3%2025-12-15Fix
CVE-2025-65780WeKan privilege escalation8.8NVD v3.10.3%2025-12-15Fix
CVE-2025-65779WeKan improper access control7.5NVD v3.10.3%2025-12-15Fix
CVE-2025-65778WeKan cross-site scripting8.1NVD v3.10.4%2025-12-15Fix
CVE-2025-65742Newgensoft OmniDocs missing authorization8.2CISA ADP v3.10.3%2025-12-15
CVE-2025-65431Allauth improper authentication5.4CISA ADP v3.10.2%2025-12-15Fix
CVE-2025-65430Allauth django-allauth does not reject access tokens for inactive users5.4CISA ADP v3.10.2%2025-12-15Fix
CVE-2025-65213Mthreads Torch Musa deserialization of untrusted data9.8CISA ADP v3.10.7%2025-12-15
CVE-2025-65176Dynatrace One Agent improper access control7.5CISA ADP v3.10.4%2025-12-15Fix
CVE-2025-64725Weblate has improper validation upon invitation acceptance1.0CNA v4.00.3%2025-12-15Fix
CVE-2025-60786Kagilum Icescrum path traversal8.8CISA ADP v3.10.6%2025-12-15
CVE-2025-59947NanoMQ has buffer overflow8.5CNA v4.00.3%2025-12-15Fix
CVE-2025-55901TOTOLINK A3300R command injection6.5CISA ADP v3.11.1%2025-12-15
CVE-2025-55895TOTOLINK A3300R improper access control9.1CISA ADP v3.10.3%2025-12-15
CVE-2025-55893TOTOLINK N200RE command injection6.5CISA ADP v3.11.1%2025-12-15
CVE-2025-55703Sunbirddcim Power IQ SQL injection3.3NVD v3.10.1%2025-12-15
CVE-2025-51962Microstudio comment section of the project page HTML injection6.1CISA ADP v3.10.2%2025-12-15
CVE-2025-37732Kibana cross-site scripting via the Integration Package Upload Functionality5.4CNA v3.10.2%2025-12-15Fix
CVE-2025-37731Elasticsearch improper authentication6.8CNA v3.10.2%2025-12-15Fix
CVE-2025-36360IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an insufficient session expiration5.0CNA v3.10.2%2025-12-15Fix
CVE-2025-34181NetSupport Manager Authenticated path traversal arbitrary file write RCE8.7CNA v4.01.0%2025-12-15Fix
CVE-2025-34180NetSupport Manager Gateway Key Reversible Encoding Credential Recovery8.4CNA v4.00.2%2025-12-15Fix
CVE-2025-34179NetSupport Manager Unauthenticated SQLi Local File Disclosure8.7CNA v4.00.4%2025-12-15Fix
CVE-2025-14730Ctcms Content Management System Backend System Configuration Ct_Config.php code injection7.2NVD v3.10.5%2025-12-15
CVE-2025-14729Ctcms Content Management System Backend App Configuration Ct_App.php save code injection7.2NVD v3.10.5%2025-12-15
CVE-2025-14722vion707 DMadmin Backend AddonsController.class.php add cross-site scripting4.8CNA v4.00.2%2025-12-15
CVE-2025-14714The Document Foundation LibreOffice TCC Bypass via Inherited Permissions in Bundled Interpreter0.9CNA v4.00.1%2025-12-15Fix
CVE-2025-14712JHENG GAO｜Student Learning Assessment and Support System exposure of sensitive information8.7CNA v4.00.4%2025-12-15Fix
CVE-2025-14711FantasticLBP Hotels Server hotelList.php SQL injection9.8NVD v3.10.5%2025-12-15
CVE-2025-14710FantasticLBP Hotels Server OrderList.php SQL injection9.8NVD v3.10.4%2025-12-15
CVE-2025-14709Shiguangwu Sgwbox N3 WIRELESSCFGGET http_eshell_server buffer overflow9.3CNA v4.05.9%2025-12-15Emerging Threats
CVE-2025-14708Shiguangwu Sgwbox N3 WIREDCFGGET http_eshell_server buffer overflow7.5NVD v3.16.5%2025-12-15Emerging Threats
CVE-2025-14707Shiguangwu Sgwbox N3 DOCKER feature http_eshell_server command injection9.3CNA v4.018.6%2025-12-15Emerging Threats
CVE-2025-14706Shiguangwu Sgwbox N3 NETREBOOT http_eshell_server command injection9.3CNA v4.018.6%2025-12-15Emerging Threats
CVE-2025-14705Shiguangwu Sgwbox N3 SHARESERVER feature command injection9.3CNA v4.016.5%2025-12-15Emerging Threats
CVE-2025-14704Shiguangwu Sgwbox N3 API eshell path traversal9.8NVD v3.112.5%2025-12-15Emerging Threats
CVE-2025-14703Shiguangwu Sgwbox N3 POST message fsnotify improper authentication6.9CNA v4.00.7%2025-12-15
CVE-2025-14702Smartbit CommV Smartschool App be.smartschool.mobile.SplashActivity path traversal4.8CNA v4.00.2%2025-12-15
CVE-2025-14699Municorn FAX App biz.faxapp.app path traversal4.8CNA v4.00.2%2025-12-15
CVE-2025-14698atlaszz AI Photo Team Galleryit App gallery.photogallery.pictures.vault.album path traversal4.8CNA v4.00.2%2025-12-15
CVE-2025-14697Shenzhen Sixun Software Sixun Shanghui Group Business Management System ExportFiles file access6.3CNA v4.00.3%2025-12-15
CVE-2025-14696Shenzhen Sixun Software Sixun Shanghui Group Business Management System weak password recovery6.9CNA v4.00.3%2025-12-15
CVE-2025-14695SamuNatsu HaloBot Inter-plugin API index.js html_renderer dynamically-managed code resources5.3CNA v4.00.3%2025-12-15
CVE-2025-14694ketr JEPaaS readAllPostil SQL injection5.1CNA v4.00.2%2025-12-15
CVE-2025-14693Ugreen DH2100+ USB symlink7.0CNA v4.00.2%2025-12-15
CVE-2025-14692Mayan EDMS has an open redirect through the /authentication/ file6.1NVD v3.10.5%2025-12-15Fix
CVE-2025-14549Omr on Z processors Exposing a possible buffer over-read problem6.9CNA v4.00.3%2025-12-15
CVE-2025-14503Overly Permissive Trust Policy in Harmonix on AWS EKS8.6CNA v4.00.5%2025-12-15Fix
CVE-2025-14387LearnPress WordPress LMS plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-15Fix
CVE-2025-14383Booking Calendar WordPress plugin unauthenticated SQL injection via dates_to_check7.5CNA v3.10.4%2025-12-15Fix
CVE-2025-14156Fox LMS WordPress LMS plugin - unauthenticated privilege escalation via createOrder9.8CNA v3.16.8%2025-12-15Exploit codeFix
CVE-2025-14148IBM DevOps Deploy is susceptible to a insufficiently protected credentials6.5CNA v3.10.3%2025-12-15Fix
CVE-2025-14038EnterpriseDB Hybrid Manager missing authentication7.0CNA v3.10.2%2025-12-15Fix
CVE-2025-14023LINE client UI misrepresentation3.1CNA v3.10.2%2025-12-15Fix
CVE-2025-14022LINE client improper certificate validation7.7CNA v3.10.2%2025-12-15Fix
CVE-2025-14021LINE client UI misrepresentation4.3CNA v3.10.2%2025-12-15Fix
CVE-2025-14020LINE client UI misrepresentation5.4CNA v3.10.2%2025-12-15Fix
CVE-2025-14019LINE client UI misrepresentation3.4CNA v3.10.2%2025-12-15Fix
CVE-2025-14003Image Gallery WordPress plugin unauthorized access4.3CNA v3.10.2%2025-12-15Fix
CVE-2025-13950OneSignal WordPress plugin unauthorized access5.3CNA v3.10.3%2025-12-15Fix
CVE-2025-13888Openshift-gitops-operator: Openshift gitops: Namespace admin cluster takeover via privileged jobs9.1CNA v3.10.7%2025-12-15Fix
CVE-2025-13824Micro820®, Micro850®, Micro870® Specialized Fuzzing vulnerabilities8.7CNA v4.00.3%2025-12-15Fix
CVE-2025-13823Micro820®, Micro850®, Micro870® Specialized Fuzzing vulnerabilities7.1CNA v4.00.2%2025-12-15Fix
CVE-2025-13740Lightweight Accordion WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-12-15Fix
CVE-2025-13728FluentAuth - Auth Security WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-15Fix
CVE-2025-13610RegistrationMagic WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-15Fix
CVE-2025-13608CC Child Pages WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-15Fix
CVE-2025-13489IBM DevOps Deploy is susceptible to a cleartext transmission of sensitive information5.9CNA v3.10.2%2025-12-15Fix
CVE-2025-13367User Registration and Membership WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-12-15Fix
CVE-2025-13355URL Shortify WordPress plugin reflected XSS7.1CISA ADP v3.10.2%2025-12-15Fix
CVE-2025-12900FileBird WordPress plugin missing authorization4.3CNA v3.10.2%2025-12-15Fix
CVE-2025-12684URL Shortify WordPress plugin reflected XSS7.1CISA ADP v3.10.2%2025-12-15Fix
CVE-2025-12035zephyrproject-rtos Zephyr Bluetooth: Integer overflow in Bluetooth Classic (BR/EDR) L2CAP6.5CNA v3.10.2%2025-12-15
CVE-2025-11670Zoho ManageEngine ADManager Plus NTLM hash exposure6.4CNA v3.10.4%2025-12-15Fix
CVE-2025-11393Red Hat Runtimes Inventory Operator internal proxy vulnerability8.7CNA v3.10.2%2025-12-15Fix
CVE-2025-11363Royal Elementor Addons and Templates WordPress plugin unauthenticated Media file upload5.3CISA ADP v3.10.3%2025-12-15Fix
CVE-2025-10898Autodesk Shared Components out-of-bounds write7.8CNA v3.10.3%2025-12-15Fix
CVE-2025-10882Autodesk Shared Components out-of-bounds write7.8CNA v3.10.3%2025-12-15Fix
CVE-2025-10881Autodesk Shared Components CATPRODUCT File Parsing heap-based overflow7.8CNA v3.10.3%2025-12-15Fix
CVE-2025-9122Hitachi Vantara Pentaho Community Dashboard Framework vulnerability5.3CNA v3.10.3%2025-12-15Fix
CVE-2025-9121Hitachi Vantara Pentaho Business Analytics Server deserialization of untrusted data8.8CNA v3.10.4%2025-12-15Fix
CVE-2025-67900NXLog Agent inclusion of untrusted functionality8.1CNA v3.10.1%2025-12-14Fix
CVE-2025-67899uriparser uncontrolled recursion2.9CNA v3.10.1%2025-12-14Fix
CVE-2025-67898MJML allows mj-include directory traversal due to an incomplete fix for4.5CNA v3.10.3%2025-12-14Fix
CVE-2025-67897sequoia-pgp sequoia crash5.3CNA v3.10.4%2025-12-14Fix
CVE-2025-67896Exim heap-based buffer overflow9.8NVD v3.10.5%2025-12-14Fix
CVE-2025-14691Mayan EDMS authentication cross-site scripting6.1NVD v3.10.5%2025-12-14Fix
CVE-2025-14674aizuda snail-job QLExpressEngine.java QLExpressEngine.doEval injection5.3CNA v4.00.3%2025-12-14Fix
CVE-2025-14673gmg137 snap7-rs client.rs as_ct_write heap-based overflow9.8v3.10.5%2025-12-14
CVE-2025-14672gmg137 snap7-rs s7_micro_client.cpp opWriteArea heap-based overflow9.8v3.10.5%2025-12-14
CVE-2025-14668Campcodes Advanced Online Examination System loginExe.php SQL injection9.8v3.10.4%2025-12-14
CVE-2025-14667itsourcecode COVID Tracking System page SQL injection9.8v3.10.4%2025-12-14
CVE-2025-14666itsourcecode COVID Tracking System page SQL injection9.8v3.10.4%2025-12-14
CVE-2025-14665Tenda WH450 HTTP Request DhcpListClient stack-based overflow9.3CNA v4.01.0%2025-12-14
CVE-2025-14664Campcodes Supplier Management System view_unit.php SQL injection9.8v3.10.4%2025-12-14
CVE-2025-14663code-projects Student File Management System update_student.php cross-site scripting4.8NVD v3.10.2%2025-12-14
CVE-2025-14662code-projects Student File Management System Update User update_user.php cross-site scripting5.4NVD v3.10.2%2025-12-14
CVE-2025-14661itsourcecode Student Managemen System advisers.php SQL injection9.8NVD v3.10.4%2025-12-14
CVE-2025-14660DecoCMS Mesh Workspace Domain api.ts createTool access control6.3CNA v4.00.3%2025-12-14Fix
CVE-2025-14659D-Link DIR-860LB1/DIR-868LB1 DHCP command injection9.8NVD v3.13.8%2025-12-14
CVE-2025-14656Tenda AC20 openSchedWifi httpd buffer overflow8.7CNA v4.00.7%2025-12-14
CVE-2025-14655Tenda AC20 httpd SetSysAutoRebbotCfg formSetRebootTimer stack-based overflow8.7CNA v4.03.3%2025-12-14
CVE-2025-14654Tenda AC20 httpd setPptpUserList formSetPPTPUserList stack-based overflow8.7CNA v4.03.3%2025-12-14
CVE-2025-14653itsourcecode Student Management System addrecord.php SQL injection9.8NVD v3.10.4%2025-12-14
CVE-2025-14652itsourcecode Online Cake Ordering System admindetail.php SQL injection9.8NVD v3.10.4%2025-12-14
CVE-2025-14651MartialBE one-hub docker-compose.yml hard-coded key6.3CNA v4.00.4%2025-12-14
CVE-2025-14650itsourcecode Online Cake Ordering System product.php SQL injection9.8NVD v3.10.4%2025-12-14
CVE-2025-14649itsourcecode Online Cake Ordering System supplier.php SQL injection9.8NVD v3.10.4%2025-12-14
CVE-2025-14648DedeBIZ catalog_add.php command injection7.2NVD v3.17.3%2025-12-14
CVE-2025-14647code-projects Computer Book Store admin_delete.php SQL injection9.8NVD v3.10.4%2025-12-14
CVE-2025-14646code-projects Student File Management System delete_student.php SQL injection9.8NVD v3.10.4%2025-12-14
CVE-2025-14645code-projects Student File Management System delete_user.php SQL injection9.8NVD v3.10.4%2025-12-14
CVE-2025-14644itsourcecode Student Management System update_subject.php SQL injection9.8NVD v3.10.4%2025-12-14
CVE-2025-14643code-projects Simple Attendance Record System check.php SQL injection9.8NVD v3.10.4%2025-12-14
CVE-2025-14642code-projects Computer Laboratory System technical_staff_pic.php unrestricted upload7.2NVD v3.10.4%2025-12-14
CVE-2025-14641code-projects Computer Laboratory System admin_pic.php unrestricted upload7.2NVD v3.10.4%2025-12-14
CVE-2025-14640code-projects Student File Management System save_student.php SQL injection9.8NVD v3.10.4%2025-12-14
CVE-2025-14639itsourcecode Student Management System uprec.php SQL injection9.8NVD v3.10.4%2025-12-14
CVE-2025-14638itsourcecode Online Pet Shop Management System update_cnp.php SQL injection9.8NVD v3.10.4%2025-12-14
CVE-2025-13281Kubernetes Portworx Half-blind SSRF in kube-controller-manager5.8CNA v3.10.4%2025-12-14Fix
CVE-2025-13126wpForo Forum WordPress plugin unauthenticated SQL injection7.5CNA v3.10.4%2025-12-14Fix
CVE-2025-12696HelloLeads CRM Form Shortcode WordPress plugin unauthenticated settings reset5.3CISA ADP v3.10.1%2025-12-14
CVE-2025-12537Addon Elements for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-14Fix
CVE-2025-36754Growatt ShineLan-X authentication bypass on web interface9.3CNA v4.00.2%2025-12-13
CVE-2025-36753SWD Interface Open on Growatt ShineLan-X9.8NVD v3.10.3%2025-12-13
CVE-2025-36752Growatt ShineLan-X Undocumented backup Account and no Password Configuration Capability9.8NVD v3.10.3%2025-12-13
CVE-2025-36751Growatt ShineLan-X configuration interface missing encryption9.4CNA v4.00.1%2025-12-13
CVE-2025-36750Stored cross-site scripting (XSS) vulnerability in Growatt ShineLan-X5.4NVD v3.10.2%2025-12-13
CVE-2025-36748Stored cross-site scripting (XSS) vulnerability in Growatt ShineLan-X5.4NVD v3.10.2%2025-12-13
CVE-2025-36747Hard-coded FTP Credentials within the firmware9.8NVD v3.10.3%2025-12-13
CVE-2025-14637itsourcecode Online Pet Shop Management System addcnp.php SQL injection9.8NVD v3.10.4%2025-12-13
CVE-2025-14636Tenda AX9 httpd image_check weak hash6.3CNA v4.00.3%2025-12-13
CVE-2025-14623code-projects Student File Management System update_student.php SQL injection9.8NVD v3.10.4%2025-12-13
CVE-2025-14622code-projects Student File Management System save_user.php SQL injection9.8NVD v3.10.4%2025-12-13
CVE-2025-14621code-projects Student File Management System update_user.php SQL injection9.8NVD v3.10.4%2025-12-13
CVE-2025-14620code-projects Student File Management System login_query.php SQL injection9.8NVD v3.10.5%2025-12-13
CVE-2025-14619code-projects Student File Management System login_query.php SQL injection9.8NVD v3.10.5%2025-12-13
CVE-2025-14617Jehovahs Witnesses JW Library App org.jw.jwlibrary.mobile.activity.SiloContainer path traversal4.8CNA v4.00.2%2025-12-13
CVE-2025-14607OFFIS DCMTK dcmdata dcbytstr.cc makeDicomByteString memory corruption5.3CNA v4.00.3%2025-12-13Fix
CVE-2025-14606tiny-rdm Tiny RDM Pickle Decoding pickle_convert.go pickle.loads deserialization2.3CNA v4.00.3%2025-12-13
CVE-2025-14590code-projects Prison Management System search1.php SQL injection9.8NVD v3.10.4%2025-12-13
CVE-2025-14589code-projects Prison Management System search.php SQL injection8.8NVD v3.10.4%2025-12-13
CVE-2025-14588itsourcecode Student Management System update_program.php SQL injection9.8NVD v3.10.4%2025-12-13
CVE-2025-14587itsourcecode Online Pet Shop Management System available.php SQL injection9.8NVD v3.10.4%2025-12-13
CVE-2025-14586TOTOLINK X5000R cstecgi.cgi snprintf os command injection9.8NVD v3.12.8%2025-12-13
CVE-2025-14581HAPPY WordPress plugin authorization bypass4.3CNA v3.10.3%2025-12-13Fix
CVE-2025-14542Universal Tool Calling Protocol client library for Python vulnerable to trust boundary violation7.5CNA v3.10.3%2025-12-13Fix
CVE-2025-14540Userback WordPress plugin missing authorization authenticated Plugin's Configuration exposure4.3CNA v3.10.2%2025-12-13Fix
CVE-2025-14539Shortcode Loader WordPress plugin unauthenticated arbitrary shortcode execution via code parameter5.4CNA v3.10.3%2025-12-13
CVE-2025-14508yalogica MediaCommander import CSV endpoint missing authorization6.5CNA v3.10.3%2025-12-13Fix
CVE-2025-14477404 Solution WordPress plugin authenticated (Admin+) SQL injection via filterText parameter4.9CNA v3.10.4%2025-12-13Fix
CVE-2025-14476Doubly WordPress plugin authenticated (Subscriber+) PHP object injection via ZIP file import8.8CNA v3.10.5%2025-12-13Fix
CVE-2025-14475Extensive VC Addons for WPBakery page builder WordPress plugin unauthenticated local file inclusion8.1CNA v3.10.6%2025-12-13
CVE-2025-14462Lucky Draw Contests WordPress plugin cross-site request forgery to plugin settings update4.3CNA v3.10.1%2025-12-13
CVE-2025-14454Image Slider by Ays- Responsive Slider and Carousel WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-12-13Fix
CVE-2025-14451Solutions Ad Manager WordPress plugin unauthenticated open redirect via sam-redirect-to parameter4.7CNA v3.10.3%2025-12-13
CVE-2025-14447AnnunciFunebri Impresa WordPress plugin unauthorized access4.3CNA v3.10.3%2025-12-13Fix
CVE-2025-14446Popup Builder (Easy Notify Lite) WordPress plugin unauthorized access5.4CNA v3.10.3%2025-12-13Fix
CVE-2025-14440JAY Login and Register WordPress plugin authentication bypass via Cookie9.8CNA v3.10.8%2025-12-13Exploit codeFix
CVE-2025-14397Postem Ipsum WordPress plugin unauthorized access8.8CNA v3.10.3%2025-12-13
CVE-2025-14395Popover Windows WordPress plugin missing authorization authenticated Popover Configuration update4.3CNA v3.10.2%2025-12-13
CVE-2025-14394Popover Windows WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-12-13
CVE-2025-14378Quick Testimonials WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.2%2025-12-13
CVE-2025-14367Easy Theme Options WordPress plugin missing authorization5.3CNA v3.10.3%2025-12-13
CVE-2025-14366Eyewear prescription form WordPress plugin missing authorization5.3CNA v3.10.3%2025-12-13Fix
CVE-2025-14365Eyewear prescription form WordPress plugin missing authorization5.3CNA v3.10.3%2025-12-13Fix
CVE-2025-14288Gallery Blocks with Lightbox. Image Gallery WordPress plugin unauthorized access4.3CNA v3.10.2%2025-12-13Fix
CVE-2025-14278HT Slider for Elementor WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-12-13Fix
CVE-2025-14056Custom Post Type UI WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2025-12-13Fix
CVE-2025-14050Design Import/Export WordPress plugin SQL injection4.9CNA v3.10.3%2025-12-13Fix
CVE-2025-13970OpenPLC_V3 cross-site request forgery7.0CNA v4.00.3%2025-12-13Fix
CVE-2025-13705Custom Frames WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-13
CVE-2025-13403emarket-design Employee Spotlight tracking opt-in settings missing authorization4.3CNA v3.10.2%2025-12-13Fix
CVE-2025-13094WP3D Model Import Viewer WordPress plugin authenticated (Contributor+) arbitrary file upload8.8CNA v3.10.5%2025-12-13
CVE-2025-13093Devs CRM WordPress plugin unauthorized access5.3CNA v3.10.3%2025-12-13Fix
CVE-2025-13092Devs CRM WordPress plugin unauthorized access5.3CNA v3.10.3%2025-12-13Fix
CVE-2025-13089WP Directory Kit WordPress plugin unauthenticated SQL injection7.5CNA v3.10.4%2025-12-13Fix
CVE-2025-13077Payamito SMS WooCommerce columns parameter SQL injection7.5CNA v3.10.4%2025-12-13
CVE-2025-12512GenerateBlocks WordPress plugin authenticated (Contributor+) information exposure via Metadata4.3CNA v3.10.4%2025-12-13Fix
CVE-2025-12362myCred WordPress plugin missing authorization5.3CNA v3.10.3%2025-12-13Fix
CVE-2025-12109Header Footer Script Adder WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-13Fix
CVE-2025-12077WP to LinkedIn Auto Publish WordPress plugin reflected cross-site scripting via PostMessage6.1CNA v3.10.2%2025-12-13Fix
CVE-2025-12076Social Media Auto Publish WordPress plugin reflected cross-site scripting via PostMessage6.1CNA v3.10.3%2025-12-13Fix
CVE-2025-11970Emplibot WordPress plugin server-side request forgery4.4CNA v3.10.2%2025-12-13Fix
CVE-2025-11707Login Lockdown and Protection WordPress plugin IP block bypass5.3CNA v3.10.5%2025-12-13Fix
CVE-2025-11693Export WP Page to Static HTML and PDF WordPress plugin unauthenticated Cookie exposure via Log file9.8CNA v3.12.1%2025-12-13NucleiFix
CVE-2025-11376Colibri Page Builder WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-12-13Fix
CVE-2025-11164Mavix Education WordPress theme unauthorized access4.3CNA v3.10.2%2025-12-13Fix
CVE-2025-10738URL Shortener Plugin For WordPress unauthenticated SQL injection9.8CNA v3.10.4%2025-12-13
CVE-2025-10289Filter and Grids WordPress plugin unauthenticated SQL injection5.9CNA v3.10.3%2025-12-13Fix
CVE-2025-9873a3 Lazy Load WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-12-13Fix
CVE-2025-9856Popup Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-12-13Fix
CVE-2025-9488Redux Framework WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-12-13Fix
CVE-2025-9218rtMedia for WordPress, BuddyPress and bbPress WordPress plugin information disclosure3.7CNA v3.10.3%2025-12-13Fix
CVE-2025-9207TI WooCommerce Wishlist WordPress plugin unauthenticated HTML injection5.3CNA v3.10.4%2025-12-13Fix
CVE-2025-9116WPS Visitor Counter WordPress plugin reflected XSS via $_SERVER['REQUEST_URI']5.8CISA ADP v3.10.1%2025-12-13
CVE-2025-8780Livemesh SiteOrigin Widgets WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-13Fix
CVE-2025-8779All-in-One Addons for Elementor WidgetKit WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-13Fix
CVE-2025-8687Enter Addons WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-13Fix
CVE-2025-8617YITH WooCommerce Quick View WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-12-13Fix
CVE-2025-8199MarqueeAddons WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-13Fix
CVE-2025-8195JetWidgets For Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-13Fix
CVE-2025-7960King Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-13Fix
CVE-2025-7058Kingcabs WordPress theme stored cross-site scripting6.4CNA v3.10.2%2025-12-13Fix
CVE-2025-0969Brizy Page Builder WordPress plugin sensitive information exposure6.5CNA v3.10.4%2025-12-13Fix
CVE-2025-67819Weaviate OSS has path traversal vulnerability via the Shard Movement API4.9CISA ADP v3.10.5%2025-12-12Fix
CVE-2025-67818Weaviate OSS has a path traversal vulnerability via Backup ZipSlip7.2CISA ADP v3.10.9%2025-12-12Fix
CVE-2025-67779Denial of service vulnerability in React Server components7.5CNA v3.120.0%2025-12-12Fix
CVE-2025-67750Flow-Scanner lightning-flow-scanner Lightning Flow Scanner is vulnerable to code injection8.4CNA v3.10.2%2025-12-12Fix
CVE-2025-67749PCSX2 has an out-of-bounds read due to unchecked offset and size passed to memcpy5.3CNA v4.00.3%2025-12-12Fix
CVE-2025-67737AzuraCast vulnerable to Pre-Auth file deletion and admin RCE3.1CNA v3.10.2%2025-12-12Fix
CVE-2025-67734Frappe Authenticated Users can Execute JavaScript through its Job form5.1CNA v4.00.2%2025-12-12Fix
CVE-2025-67731Aarondoran servify-express servify Express does not enforce rate limiting when parsing JSON8.7CNA v4.00.4%2025-12-12Fix
CVE-2025-67730Frappe authenticated users can execute XSS through form description fields5.1CNA v4.00.2%2025-12-12Fix
CVE-2025-67728Fireshare Public Uploads feature is vulnerable to OS command injection (RCE)9.8CNA v3.10.7%2025-12-12Fix
CVE-2025-67727parse-community parse-server parse Server GitHub CI workflow vulnerable to RCE6.9CNA v4.00.4%2025-12-12Exploit codeFix
CVE-2025-67726Tornado is vulnerable to Quadratic DoS via Crafted Multipart parameters7.5CNA v3.10.5%2025-12-12Fix
CVE-2025-67725Tornado is vulnerable to Quadratic DoS via Repeated Header Coalescing7.5CNA v3.10.6%2025-12-12Fix
CVE-2025-67724Tornado vulnerable to header injection and XSS via reason argument5.4CNA v3.10.2%2025-12-12Fix
CVE-2025-67721Aircompressor Snappy and LZ4 decompressor information disclosure6.3CNA v4.00.5%2025-12-12Fix
CVE-2025-67634Software Acquisition Guide Supplier Response Web Tool XSS6.1NVD v3.10.2%2025-12-12Fix
CVE-2025-67508Gardenctl is vulnerable to command injection when used with non‑POSIX shells8.0CNA v3.00.2%2025-12-12Fix
CVE-2025-67344jishenghua jshERP cross-site scripting4.6CISA ADP v3.10.2%2025-12-12
CVE-2025-67342Adobe RuoYi stored cross-site scripting4.6CISA ADP v3.10.2%2025-12-12
CVE-2025-67341jishenghua jshERP cross-site scripting4.6CISA ADP v3.10.2%2025-12-12
CVE-2025-66492MasaCMS masa CMS vulnerable to cross-site scripting (XSS) through URL parameter8.2CNA v3.10.3%2025-12-12Fix
CVE-2025-66430Plesk improper access control9.1CISA ADP v3.10.6%2025-12-12Fix
CVE-2025-66284Japan Total System GroupSession Free edition stored cross-site scripting4.8CNA v4.00.2%2025-12-12Fix
CVE-2025-65854MineAdmin has an insecure default password9.8CISA ADP v3.10.5%2025-12-12
CVE-2025-65530CloudLinux Ai-bolit malware de-obfuscation routines eval injection8.8CISA ADP v3.10.3%2025-12-12
CVE-2025-65120Japan Total System GroupSession Free edition reflected cross-site scripting5.1CNA v4.00.2%2025-12-12Fix
CVE-2025-64781Japan Total System GroupSession Free edition insecure default initialization5.1CNA v4.00.2%2025-12-12Fix
CVE-2025-64011Nextcloud Server insecure direct object reference4.3CISA ADP v3.10.3%2025-12-12
CVE-2025-62192Japan Total System GroupSession Free edition SQL injection5.3CNA v4.00.2%2025-12-12Fix
CVE-2025-61987Japan Total System GroupSession Free edition missing WebSocket origin validation6.9CNA v4.00.2%2025-12-12Fix
CVE-2025-61950Japan Total System GroupSession Free edition insecure direct object reference5.3CNA v4.00.2%2025-12-12Fix
CVE-2025-58770AMI AptioV TCG2 TPM RT not Locked issue7.2CNA v4.00.1%2025-12-12Fix
CVE-2025-58576Japan Total System GroupSession Free edition cross-site request forgery5.1CNA v4.00.1%2025-12-12Fix
CVE-2025-58137Apache Fineract: IDOR via self-service API8.1CISA ADP v3.10.4%2025-12-12Fix
CVE-2025-58130Apache Fineract: Server Key not masked9.1CISA ADP v3.10.4%2025-12-12Fix
CVE-2025-57883Japan Total System GroupSession Free edition reflected cross-site scripting5.1CNA v4.00.2%2025-12-12Fix
CVE-2025-54981Apache StreamPark: Weak encryption Algorithm in StreamPark7.5NVD v3.10.2%2025-12-12Fix
CVE-2025-54947Apache StreamPark: Use hard-coded key9.8NVD v3.10.5%2025-12-12Fix
CVE-2025-54407Japan Total System GroupSession Free edition stored cross-site scripting5.1CNA v4.00.2%2025-12-12Fix
CVE-2025-53960Apache StreamPark: Uses the user’s password as the secret key5.9CISA ADP v3.10.3%2025-12-12Fix
CVE-2025-53523Japan Total System GroupSession Free edition stored cross-site scripting4.8CNA v4.00.2%2025-12-12Fix
CVE-2025-46289Apple macOS improper authorization5.5NVD v3.10.2%2025-12-12Fix
CVE-2025-46287Apple macOS UI misrepresentation6.5NVD v3.10.5%2025-12-12Fix
CVE-2025-46285Apple macOS integer overflow7.8CISA ADP v3.10.2%2025-12-12Fix
CVE-2025-46276Apple macOS information disclosure5.5NVD v3.10.2%2025-12-12Fix
CVE-2025-43542Apple macOS information disclosure7.5NVD v3.10.9%2025-12-12Fix
CVE-2025-43539Apple macOS out-of-bounds write8.8NVD v3.16.2%2025-12-12Fix
CVE-2025-43538Apple macOS information disclosure5.5NVD v3.13.0%2025-12-12Fix
CVE-2025-43532Apple macOS buffer overflow2.8CISA ADP v3.10.3%2025-12-12Fix
CVE-2025-43530Apple macOS information disclosure5.5NVD v3.10.2%2025-12-12Fix
CVE-2025-43527Apple macOS improper handling of insufficient permissions7.8CISA ADP v3.10.2%2025-12-12Fix
CVE-2025-43523Apple macOS insecure permissions5.5NVD v3.10.2%2025-12-12Fix
CVE-2025-43522Apple macOS improper signature verification3.3CISA ADP v3.10.1%2025-12-12Fix
CVE-2025-43521Apple macOS improper signature verification5.5CISA ADP v3.10.1%2025-12-12Fix
CVE-2025-43520Apple Multiple Products Classic buffer overflow5.5NVD v3.10.4%2025-12-12KEVKCVFix
CVE-2025-43519Apple macOS incorrect default permissions5.5NVD v3.10.3%2025-12-12Fix
CVE-2025-43518Apple macOS logic flaw3.3CISA ADP v3.10.2%2025-12-12Fix
CVE-2025-43517Apple macOS sensitive information in log files3.3NVD v3.10.2%2025-12-12Fix
CVE-2025-43516Apple macOS session fixation3.3CISA ADP v3.10.2%2025-12-12Fix
CVE-2025-43513Apple macOS insecure permissions5.5NVD v3.10.2%2025-12-12Fix
CVE-2025-43512Apple macOS improper privilege management7.8NVD v3.10.2%2025-12-12Fix
CVE-2025-43511Apple Safari use-after-free6.5CISA ADP v3.10.5%2025-12-12Fix
CVE-2025-43510Apple Multiple Products improper locking7.8NVD v3.10.4%2025-12-12KEVKCVFix
CVE-2025-43509Apple macOS information disclosure5.5NVD v3.10.2%2025-12-12Fix
CVE-2025-43506Apple macOS type confusion7.5CISA ADP v3.10.5%2025-12-12Fix
CVE-2025-43497Apple macOS missing authorization5.2CISA ADP v3.10.2%2025-12-12Fix
CVE-2025-43494Apple macOS denial of service7.5CISA ADP v3.10.6%2025-12-12Fix
CVE-2025-43482Apple macOS denial of service5.5CISA ADP v3.10.2%2025-12-12Fix
CVE-2025-43473Apple macOS information disclosure5.5NVD v3.10.2%2025-12-12Fix
CVE-2025-43471Apple macOS system information disclosure5.5NVD v3.10.2%2025-12-12Fix
CVE-2025-43470Apple macOS incorrect permission assignment5.5NVD v3.10.1%2025-12-12Fix
CVE-2025-43467Apple macOS privilege escalation7.8CISA ADP v3.10.2%2025-12-12Fix
CVE-2025-43466Apple macOS eval injection5.5CISA ADP v3.10.2%2025-12-12Fix
CVE-2025-43465Apple macOS path traversal5.5NVD v3.10.2%2025-12-12Fix
CVE-2025-43464Apple macOS denial of service6.5CISA ADP v3.10.4%2025-12-12Fix
CVE-2025-43463Apple macOS path traversal5.5NVD v3.10.2%2025-12-12Fix
CVE-2025-43461Apple macOS link following5.5CISA ADP v3.10.2%2025-12-12Fix
CVE-2025-43437Apple iOS and iPadOS information disclosure3.3CISA ADP v3.10.1%2025-12-12Fix
CVE-2025-43416Apple macOS logic flaw5.5NVD v3.10.4%2025-12-12Fix
CVE-2025-43410Apple macOS sensitive information in cache2.4CISA ADP v3.10.2%2025-12-12Fix
CVE-2025-43406Apple macOS system information disclosure5.5NVD v3.10.2%2025-12-12Fix
CVE-2025-43404Apple macOS insecure permissions3.3NVD v3.10.2%2025-12-12Fix
CVE-2025-43402Apple macOS out-of-bounds write7.8NVD v3.10.2%2025-12-12Fix
CVE-2025-43393Apple macOS insecure permissions5.2NVD v3.10.2%2025-12-12Fix
CVE-2025-43388Apple macOS eval injection5.5NVD v3.10.2%2025-12-12Fix
CVE-2025-43381Apple macOS link following5.5CISA ADP v3.10.2%2025-12-12Fix
CVE-2025-43351Apple macOS insecure permissions5.5NVD v3.10.2%2025-12-12Fix
CVE-2025-43320Apple macOS improper privilege management7.8NVD v3.10.2%2025-12-12Fix
CVE-2025-40829Siemens Simcenter Femap uninitialized resource use7.3CNA v4.00.2%2025-12-12Fix
CVE-2025-40345Linux kernel sddr55 USB storage driver vulnerability–0.2%2025-12-12Fix
CVE-2025-36755CleverDisplay BlueOne unauthorized BIOS access through physical USB keyboard2.4CNA v4.00.2%2025-12-12Fix
CVE-2025-36746SolarEdge Monitoring Platform contains a XSS upon report deletion5.4NVD v3.10.2%2025-12-12Fix
CVE-2025-36745SolarEdge SE3680H contains Linux Kernel vulnerabilities7.8NVD v3.10.2%2025-12-12Fix
CVE-2025-36744SolarEdge SE3680H information exposure during Bootloader Loop2.4NVD v3.10.2%2025-12-12Fix
CVE-2025-36743SolarEdge SE3680H exposed debug interface6.8NVD v3.10.2%2025-12-12Fix
CVE-2025-26866Apache HugeGraph-Server: RAFT and deserialization8.8CISA ADP v3.10.9%2025-12-12Fix
CVE-2025-23408Apache Fineract: Weak password policy8.5CNA v4.00.5%2025-12-12Fix
CVE-2025-14611Gladinet CentreStack and Triofox hard-coded cryptographic key9.8NVD v3.153.3%2025-12-12KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2025-14585itsourcecode COVID Tracking System page SQL injection9.8NVD v3.10.4%2025-12-12
CVE-2025-14584itsourcecode COVID Tracking System Admin Login login.php SQL injection9.8NVD v3.10.4%2025-12-12
CVE-2025-14583Campcodes Online Student Enrollment System register.php unrestricted upload9.8NVD v3.10.5%2025-12-12
CVE-2025-14582Campcodes Online Student Enrollment System index.php unrestricted upload7.2NVD v3.10.4%2025-12-12
CVE-2025-14580Qualitor viewDocumento.php cross-site scripting6.1NVD v3.10.3%2025-12-12
CVE-2025-14578itsourcecode Student Management System update_account.php SQL injection9.8NVD v3.10.4%2025-12-12
CVE-2025-14572UTT 进取 512W formWebAuthGlobalConfig memory corruption8.7CNA v4.03.5%2025-12-12Emerging Threats
CVE-2025-14571Projectworlds Advanced Library Management System borrow_book.php SQL injection9.8NVD v3.10.4%2025-12-12
CVE-2025-14570Projectworlds Advanced Library Management System view_admin.php SQL injection9.8NVD v3.10.4%2025-12-12
CVE-2025-14569ggml-org whisper.cpp common-whisper.cpp read_audio_data use-after-free4.8CNA v4.00.1%2025-12-12
CVE-2025-14568haxxorsid Stock-Management-System User.php SQL injection5.3CNA v4.00.2%2025-12-12
CVE-2025-14567haxxorsid Stock-Management-System employees missing authentication7.5NVD v3.10.8%2025-12-12
CVE-2025-14566kidaze CourseSelectionSystem reg.php SQL injection9.8NVD v3.10.4%2025-12-12
CVE-2025-14565kidaze CourseSelectionSystem login1.php SQL injection9.8NVD v3.10.4%2025-12-12
CVE-2025-14467WP Job Portal WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2025-12-12Fix
CVE-2025-14442Secure Copy Content Protection and Content Locking WordPress plugin information disclosure5.3CNA v3.10.3%2025-12-12Fix
CVE-2025-14393Wpik WordPress Basic Ajax Form plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-12-12
CVE-2025-14392Simple Theme Changer WordPress plugin missing authorization plugin settings update4.3CNA v3.10.2%2025-12-12
CVE-2025-14391Simple Theme Changer WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-12-12
CVE-2025-14373Google Chrome Toolbar inappropriate implementation4.3CISA ADP v3.10.3%2025-12-12Fix
CVE-2025-14372Google Chrome Password Manager use-after-free6.1CISA ADP v3.10.2%2025-12-12Fix
CVE-2025-14356Ultra Addons for Contact Form 7 WordPress plugin unauthorized access4.3CNA v3.10.4%2025-12-12Fix
CVE-2025-14354Resource Library for Logged In Users WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-12-12Fix
CVE-2025-14344Multi Uploader for Gravity Forms WordPress plugin unauthenticated arbitrary file deletion9.8CNA v3.10.5%2025-12-12Fix
CVE-2025-14174Google Chromium out-of-bounds memory access8.8CISA ADP v3.122.3%2025-12-12KEVExploit codeKCVFix
CVE-2025-14170Vimeo SimpleGallery WordPress plugin missing authorization4.3CNA v3.10.2%2025-12-12
CVE-2025-14169FunnelKit Funnel Builder for WooCommerce Checkout WordPress plugin unauthenticated SQL injection7.5CNA v3.10.4%2025-12-12Fix
CVE-2025-14166WPMasterToolKit (WPMTK) WordPress plugin authenticated (Contributor+) code injection5.3CNA v3.10.5%2025-12-12Fix
CVE-2025-14165Kirim.Email WooCommerce Integration WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2025-12-12
CVE-2025-14162BMLT WordPress plugin cross-site request forgery to settings creation and deletion4.3CNA v3.10.2%2025-12-12Fix
CVE-2025-14161Truefy Embed WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-12-12
CVE-2025-14160Upcoming for Calendly WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2025-12-12Fix
CVE-2025-14159Secure Copy Content Protection and Content Locking WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-12-12Fix
CVE-2025-14158Coding Blocks WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2025-12-12
CVE-2025-14143Ayo Shortcodes WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-12
CVE-2025-14138WPLG Default Mail From WordPress plugin reflected cross-site scripting via $_SERVER['PHP_SELF']6.1CNA v3.10.2%2025-12-12
CVE-2025-14137Simple AL Slider WordPress plugin reflected cross-site scripting via $_SERVER['PHP_SELF']6.1CNA v3.10.3%2025-12-12
CVE-2025-14132Category Dropdown List WordPress plugin reflected cross-site scripting via $_SERVER['PHP_SELF']6.1CNA v3.10.2%2025-12-12
CVE-2025-14129Like DisLike Voting WordPress plugin reflected cross-site scripting via $_SERVER['PHP_SELF']6.1CNA v3.10.3%2025-12-12
CVE-2025-14125Complag WordPress plugin reflected cross-site scripting via $_SERVER['PHP_SELF']6.1CNA v3.10.2%2025-12-12
CVE-2025-14119App Landing Template Blocks for WPBakery Page Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-12
CVE-2025-14074PDF for Contact Form 7 + Drag and Drop Template Builder WordPress plugin missing authorization4.3CNA v3.10.2%2025-12-12Fix
CVE-2025-14068WPNakama WordPress plugin unauthenticated SQL injection via order_by parameter7.5CNA v3.10.4%2025-12-12Fix
CVE-2025-14065Simple Bike Rental WordPress plugin unauthorized access4.3CNA v3.10.2%2025-12-12Fix
CVE-2025-14064BuddyTask WordPress plugin unauthorized access5.4CNA v3.10.3%2025-12-12Fix
CVE-2025-14062Animated Pixel Marquee Creator WordPress plugin cross-site request forgery via marquee parameter4.3CNA v3.10.2%2025-12-12
CVE-2025-14049VikRentItems Flexible Rental Management System WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-12-12Fix
CVE-2025-14048SimplyConvert WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2025-12-12
CVE-2025-14045URL Media Uploader WordPress plugin missing authorization authenticated Safe file upload4.3CNA v3.10.2%2025-12-12
CVE-2025-14044Visitor Logic Lite WordPress plugin unauthenticated PHP object injection via lpblocks Cookie8.1CNA v3.10.5%2025-12-12
CVE-2025-14035DebateMaster WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2025-12-12
CVE-2025-14032Bold Timeline Lite WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-12-12Fix
CVE-2025-14030AI Feeds WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-12Fix
CVE-2025-13993MailerLite Signup forms (official) WordPress plugin stored cross-site scripting5.5CNA v3.10.3%2025-12-12Fix
CVE-2025-13989WP Dropzone WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-12-12Fix
CVE-2025-13988评论小秘书 WordPress plugin reflected cross-site scripting via $_SERVER['PHP_SELF']6.1CNA v3.10.2%2025-12-12
CVE-2025-13987Purchase and Expense Manager WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-12-12
CVE-2025-13975Contact Form 7 with ChatWork WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2025-12-12
CVE-2025-13972WatchTowerHQ WordPress plugin arbitrary file read4.9CNA v3.10.5%2025-12-12Fix
CVE-2025-13971TWW Protein Calculator WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2025-12-12
CVE-2025-13969Reviews Sorted WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-12-12Fix
CVE-2025-13966Paypal Payment Shortcode WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-12
CVE-2025-13963FX Currency Converter WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-12Fix
CVE-2025-13962Divelogs Widget WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-12Fix
CVE-2025-13961Data Visualizer WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-12-12
CVE-2025-13960GPXpress WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-12-12
CVE-2025-13906WP Flot WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-12
CVE-2025-13904WPGancio WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-12-12
CVE-2025-13891Image Gallery WordPress plugin path traversal6.5CNA v3.10.4%2025-12-12Fix
CVE-2025-13889Simple Nivo Slider WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-12-12
CVE-2025-13886LT Unleashed WordPress plugin local file inclusion7.5CNA v3.10.6%2025-12-12
CVE-2025-13885Zenost Shortcodes WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-12
CVE-2025-13884Hide Email Address WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-12-12
CVE-2025-13866Flow-Flow Social Feed Stream - missing authorization to Authenticated stored cross-site scripting6.4CNA v3.10.2%2025-12-12Fix
CVE-2025-13850LS Google Map Router WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-12
CVE-2025-13846Easy Map Creator WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-12-12
CVE-2025-13843VigLink SpotLight By ShortCode WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-12
CVE-2025-13840BUKAZU Search widget WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-12-12Fix
CVE-2025-13839LJUsers WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-12
CVE-2025-13747NewStatPress WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-12-12Fix
CVE-2025-13733BuhoNTFS local privilege escalation7.8NVD v3.10.2%2025-12-12Fix
CVE-2025-13670Altera High Level Synthesis Compiler i++ command vulnerability5.4CNA v4.00.1%2025-12-12Fix
CVE-2025-13669Altera High Level Synthesis Compiler uncontrolled search path5.4CNA v4.00.1%2025-12-12Fix
CVE-2025-13665Altera Quartus Prime Standard uncontrolled search path5.4CNA v4.00.1%2025-12-12Fix
CVE-2025-13660Guest Support WordPress plugin information disclosure5.3CNA v3.10.3%2025-12-12Fix
CVE-2025-13506Improper authorization in Nebim Neyir's Nebim V3 ERP8.8CNA v3.10.4%2025-12-12Fix
CVE-2025-13440Premmerce Wishlist for WooCommerce WordPress plugin missing authorization5.3CNA v3.10.3%2025-12-12Fix
CVE-2025-13408Foxtool All-in-One: Contact chat button WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-12-12Fix
CVE-2025-13366Rabbit Hole WordPress plugin cross-site request forgery to settings reset4.3CNA v3.10.2%2025-12-12
CVE-2025-13363IMAQ Core WordPress plugin cross-site request forgery to URL Structure update4.3CNA v3.10.2%2025-12-12
CVE-2025-13334Blaze Demo Importer - missing authorization to Authenticated Database Reset and file deletion8.1CNA v3.10.3%2025-12-12Fix
CVE-2025-13320WP User Manager WordPress plugin arbitrary file deletion6.8CNA v3.10.8%2025-12-12Fix
CVE-2025-13314Product Filtering by Categories WordPress plugin unauthorized access5.3CNA v3.10.3%2025-12-12Fix
CVE-2025-13053A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM3.7NVD v3.10.1%2025-12-12Fix
CVE-2025-13052An improper certificates validation vulnerability was found in the Notification settings of ADM5.9NVD v3.10.2%2025-12-12Fix
CVE-2025-12968Infility Global WordPress plugin authenticated (Subscriber+) arbitrary file upload8.8CNA v3.10.6%2025-12-12Fix
CVE-2025-12965Magical Posts Display WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-12Fix
CVE-2025-12963LazyTasks WordPress plugin privilege escalation9.8CNA v3.10.4%2025-12-12
CVE-2025-12960Simple CSV Table WordPress plugin directory traversal to authenticated arbitrary file read6.5CNA v3.10.7%2025-12-12Fix
CVE-2025-12883Campay Woocommerce Payment Gateway WordPress plugin unauthenticated Payment bypass5.3CNA v3.10.4%2025-12-12Fix
CVE-2025-12843Code injection in Wave Term allowing TCC Bypass5.5NVD v3.10.2%2025-12-12
CVE-2025-12841Bookit Unauthenticated Settings Update5.3CISA ADP v3.10.7%2025-12-12NucleiFix
CVE-2025-12835WooMulti WordPress plugin Subscriber+ arbitrary file deletion7.3CISA ADP v3.10.3%2025-12-12
CVE-2025-12834Accept Stripe Payments Using Contact Form 7 WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2025-12-12Fix
CVE-2025-12830Better Elementor Addons WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-12Fix
CVE-2025-12824Player Leaderboard - Authenticated (Contributor+) local file inclusion8.8CNA v3.10.8%2025-12-12Fix
CVE-2025-12783Premmerce Brands for WooCommerce WordPress plugin unauthorized access4.3CNA v3.10.3%2025-12-12Fix
CVE-2025-12655Hippoo Mobile App for WooCommerce WordPress plugin arbitrary file write5.3CNA v3.10.3%2025-12-12Fix
CVE-2025-12650Simple post listing WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-12
CVE-2025-12570Fancy Product Designer WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.2%2025-12-12Fix
CVE-2025-12408Events Manager WordPress plugin unauthenticated information exposure5.3CNA v3.10.3%2025-12-12Fix
CVE-2025-12407Events Manager WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-12-12Fix
CVE-2025-12348Icegram Express WordPress plugin missing authorization5.3CNA v3.10.4%2025-12-12Fix
CVE-2025-11876Mailgun Subscriptions WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-12-12Fix
CVE-2025-11266Grassroots DICOM (GDCM) out-of-bounds write6.8CNA v4.00.1%2025-12-12Fix
CVE-2025-10684Construction Light WordPress plugin Subscriber+ arbitrary plugin activation4.3CISA ADP v3.10.1%2025-12-12Fix
CVE-2025-10583WP Fastest Cache Premium WordPress plugin server-side request forgery3.5CNA v3.10.3%2025-12-12Fix
CVE-2025-10451Insyde Software InsydeH2O SMM interrupt handler out-of-bounds write8.2CNA v3.10.1%2025-12-12
CVE-2025-8083Vuetify prototype pollution via Preset options8.6CNA v3.10.3%2025-12-12Fix
CVE-2025-8082Vuetify XSS via unsanitized titleDateFormat in VDatePicker6.3CNA v3.10.2%2025-12-12Fix
CVE-2025-4970BSK PDF Manager WordPress plugin stored cross-site scripting5.5CNA v3.10.3%2025-12-12Fix
CVE-2025-67780SpaceX Starlink Dish missing authentication4.2CNA v3.10.2%2025-12-11Exploit codeFix
CVE-2025-67742JetBrains TeamCity path traversal3.8CNA v3.10.8%2025-12-11Fix
CVE-2025-67741JetBrains TeamCity cross-site scripting4.8CNA v3.10.5%2025-12-11Fix
CVE-2025-67740JetBrains TeamCity incorrect authorization2.7CNA v3.10.2%2025-12-11Fix
CVE-2025-67739JetBrains TeamCity information disclosure3.1CNA v3.10.2%2025-12-11Fix
CVE-2025-67738Webmin OS command injection8.5CNA v3.10.4%2025-12-11Fix
CVE-2025-67720Pyrofork has a path traversal in download_media method6.5CNA v3.10.3%2025-12-11Fix
CVE-2025-67719Ibexa User Bundle is missing password change validation8.5CNA v4.00.1%2025-12-11Fix
CVE-2025-67718Formio improperly authorized permission elevation through specially crafted request path8.7CNA v4.00.3%2025-12-11Fix
CVE-2025-67717Zitadel Discloses the Total Number of Instance Users5.3CNA v4.00.2%2025-12-11Fix
CVE-2025-67716Auth0 Next.js SDK has improper validation of Query parameters5.7CNA v3.10.3%2025-12-11Fix
CVE-2025-67713Miniflux 2 has an open redirect via protocol-relative `redirect_url`5.3CNA v4.00.2%2025-12-11Fix
CVE-2025-67648Shopware's inproper input validation can lead to reflected XSS through Storefront Login page7.1CNA v3.10.2%2025-12-11Fix
CVE-2025-67646TableProgressTracking's missing CSRF protection allows unauthorized state changes3.5CNA v3.10.1%2025-12-11Fix
CVE-2025-67644LangGraph SQLite Checkpoint is vulnerable to SQL injection7.3CNA v3.12.3%2025-12-11Exploit codeKCVFix
CVE-2025-67511Cybersecurity AI vulnerable to command injection in run_ssh_command_with_credentials agent tool9.7CNA v3.12.0%2025-12-11Exploit code
CVE-2025-66918Hashenudara eDoc Doctor Appointment System cross-site scripting8.8CISA ADP v3.10.6%2025-12-11
CVE-2025-66590Out-of-bounds write vulnerability in AzeoTech DAQFactory9.8NVD v3.10.4%2025-12-11Fix
CVE-2025-66589Out-of-bounds read vulnerability in AzeoTech DAQFactory9.1NVD v3.10.4%2025-12-11Fix
CVE-2025-66588Access of uninitialized pointer vulnerability in AzeoTech DAQFactory9.8NVD v3.10.3%2025-12-11Fix
CVE-2025-66586Type confusion vulnerability in AzeoTech DAQFactory7.8NVD v3.10.2%2025-12-11Fix
CVE-2025-66585AzeoTech DAQFactory ctl file parser use-after-free7.8NVD v3.10.2%2025-12-11Fix
CVE-2025-66452LibreChat's lack of JSON parsing error handling can lead to XSS5.3CNA v4.00.2%2025-12-11
CVE-2025-66451LibreChat's improper input validation in Prompt Creation API enables Unauthorized Permission Changes5.3CNA v4.00.3%2025-12-11Fix
CVE-2025-66450LibreChat JSON injection in Chat POST allows Remote Resource Inclusion and PXSS via Image upload8.6CNA v4.00.2%2025-12-11Fix
CVE-2025-66446MaxKB has a Python sandbox LD_PRELOAD bypass8.8CNA v3.10.3%2025-12-11Fix
CVE-2025-66429cPanel path traversal8.8CISA ADP v3.10.8%2025-12-11Fix
CVE-2025-66419MaxKB vulnerable to privilege escalation through sandbox bypass8.8CNA v3.10.3%2025-12-11Fix
CVE-2025-66048The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-12-11Fix
CVE-2025-66047The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.5%2025-12-11Fix
CVE-2025-66046The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.5%2025-12-11Fix
CVE-2025-66045The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.5%2025-12-11Fix
CVE-2025-66044The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.5%2025-12-11Fix
CVE-2025-66043The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-12-11Fix
CVE-2025-65474Easyimages2.0 unrestricted file upload9.8NVD v3.10.5%2025-12-11
CVE-2025-65473Easyimages2.0 external control of a file path9.1CISA ADP v3.10.6%2025-12-11
CVE-2025-65472Easyimages2.0 /admin/admin.inc.php component of EasyImages cross-site request forgery8.8NVD v3.10.2%2025-12-11
CVE-2025-65471Easyimages2.0 /admin/manager.php component of EasyImages arbitrary file upload8.8NVD v3.10.5%2025-12-11
CVE-2025-64995TeamViewer DEX privilege escalation6.7NVD v3.10.2%2025-12-11Fix
CVE-2025-64994TeamViewer DEX privilege escalation via uncontrolled search path in 1E-Nomad-SetWorkRate instruction6.7NVD v3.10.2%2025-12-11Fix
CVE-2025-64993TeamViewer DEX command injection in 1E-ConfigMgrConsoleExtensions Instructions7.2NVD v3.10.9%2025-12-11Fix
CVE-2025-64992TeamViewer DEX command injection in 1E-Nomad-PauseNomadJobQueue Instruction7.2NVD v3.10.9%2025-12-11Fix
CVE-2025-64991TeamViewer DEX command injection in 1E-PatchInsights-Deploy Instruction7.2NVD v3.10.9%2025-12-11Fix
CVE-2025-64990TeamViewer DEX command injection in 1E-Explorer-TachyonCore-LogoffUser Instruction7.2NVD v3.10.8%2025-12-11Fix
CVE-2025-64989TeamViewer DEX command injection in 1E-Explorer-TachyonCore-FindFileBySizeAndHash Instruction7.2CNA v3.11.1%2025-12-11Fix
CVE-2025-64988TeamViewer DEX command injection in 1E-Nomad-GetCmContentLocations Instruction7.2CNA v3.11.2%2025-12-11Fix
CVE-2025-64987TeamViewer DEX command injection in 1E-Explorer-TachyonCore-CheckSimpleIoC Instruction7.2CNA v3.11.2%2025-12-11
CVE-2025-64986TeamViewer DEX command injection in 1E-Explorer-TachyonCore-DevicesListeningOnAPort Instruction7.2CNA v3.11.2%2025-12-11Fix
CVE-2025-64721Sandboxie's integer overflow in SbieIniServer::RC4Crypt allows sandbox escape and SYSTEM compromise9.9CNA v4.00.7%2025-12-11Fix
CVE-2025-64702quic-go HTTP/3 QPACK Header Expansion DoS5.3CNA v3.10.4%2025-12-11Fix
CVE-2025-64701QualitySoft QND Premium/Advance/Standard privilege escalation8.5CNA v4.00.1%2025-12-11
CVE-2025-64669Microsoft Windows Admin Center elevation of privilege7.8CNA v3.10.5%2025-12-11Fix
CVE-2025-59803Foxit PDF Editor improper signature verification5.3CISA ADP v3.10.2%2025-12-11Fix
CVE-2025-59802Foxit PDF Editor authentication bypass by spoofing7.5CISA ADP v3.10.3%2025-12-11Fix
CVE-2025-56130Ruijie Rg-s1930 OS command injection8.8CISA ADP v3.12.1%2025-12-11
CVE-2025-56129Ruijie RG-BCR860 OS command injection8.8CISA ADP v3.12.6%2025-12-11
CVE-2025-56127Ruijie Rg-bcr600w OS command injection8.8CISA ADP v3.13.1%2025-12-11
CVE-2025-56124Ruijie Rg-x60 Pro Ruijie X60 PRO X60_10212014 OS command injection7.8CISA ADP v3.11.3%2025-12-11
CVE-2025-56123Ruijie Rg-ew1200g Pro OS command injection8.8CISA ADP v3.12.6%2025-12-11
CVE-2025-56122Ruijie Rg-ew1800gx Pro OS command injection8.8CISA ADP v3.12.6%2025-12-11
CVE-2025-56120Ruijie Rg-x60 Pro Ruijie X60 PRO X60_10212014 OS command injection8.8CISA ADP v3.12.6%2025-12-11
CVE-2025-56118Ruijie Rg-x60 Pro Ruijie X60 PRO X60_10212014 OS command injection8.8CISA ADP v3.12.6%2025-12-11
CVE-2025-56117Ruijie X30 Pro OS command injection8.8CISA ADP v3.13.1%2025-12-11
CVE-2025-56114Ruijie M18-ew OS command injection8.8CISA ADP v3.12.6%2025-12-11
CVE-2025-56113Ruijie Rg-eap602 OS command injection8.8CISA ADP v3.11.7%2025-12-11
CVE-2025-56111Ruijie RG-BCR860 OS command injection8.8CISA ADP v3.13.1%2025-12-11
CVE-2025-56110Ruijie RG-BCR860 OS command injection8.8CISA ADP v3.13.1%2025-12-11
CVE-2025-56109Ruijie RG-BCR860 OS command injection8.8CISA ADP v3.13.1%2025-12-11
CVE-2025-56108Ruijie X30 Pro OS command injection8.8CISA ADP v3.12.7%2025-12-11
CVE-2025-56107Ruijie Rg-bcr600w OS command injection8.8CISA ADP v3.12.3%2025-12-11
CVE-2025-56106Ruijie Rg-ew1800gx OS command injection8.8CISA ADP v3.12.8%2025-12-11
CVE-2025-56102Ruijie Rg-ew1800gx OS command injection8.8CISA ADP v3.12.6%2025-12-11
CVE-2025-56101Ruijie M18-ew OS command injection8.8CISA ADP v3.12.8%2025-12-11
CVE-2025-56099Ruijie Rg-eap602 OS command injection8.8CISA ADP v3.11.7%2025-12-11
CVE-2025-56098Ruijie X30 Pro OS command injection8.8CISA ADP v3.12.6%2025-12-11
CVE-2025-56097Ruijie Rg-ew1800gx Pro OS command injection8.8CISA ADP v3.12.6%2025-12-11
CVE-2025-56096Ruijie Rg-bcr600w OS command injection8.8CISA ADP v3.12.0%2025-12-11
CVE-2025-56095Ruijie Rg-ew1200g Pro OS command injection8.8CISA ADP v3.12.8%2025-12-11
CVE-2025-56094Ruijie X30 Pro OS command injection8.8CISA ADP v3.13.3%2025-12-11
CVE-2025-56093Ruijie X30 Pro OS command injection8.8CISA ADP v3.13.2%2025-12-11
CVE-2025-56092Ruijie X30 Pro OS command injection8.8CISA ADP v3.12.8%2025-12-11
CVE-2025-56091Ruijie Rg-ew1800gx OS command injection8.8CISA ADP v3.12.9%2025-12-11
CVE-2025-56090Ruijie Rg-ew1200g Pro OS command injection8.8CISA ADP v3.12.9%2025-12-11
CVE-2025-56089Ruijie M18-ew OS command injection8.8CISA ADP v3.12.8%2025-12-11
CVE-2025-56088Ruijie RG-BCR860 OS command injection8.8CISA ADP v3.13.5%2025-12-11
CVE-2025-56087Ruijie Rg-bcr600w OS command injection8.8CISA ADP v3.12.4%2025-12-11
CVE-2025-56086Ruijie Rg-ew1200 OS command injection8.8CISA ADP v3.12.9%2025-12-11
CVE-2025-56085Ruijie Rg-ew1200 OS command injection8.8CISA ADP v3.12.9%2025-12-11
CVE-2025-56084Ruijie Rg-eap602 OS command injection8.8CISA ADP v3.12.1%2025-12-11
CVE-2025-56083Ruijie Rg-eap602 OS command injection8.8CISA ADP v3.12.0%2025-12-11
CVE-2025-56082Ruijie Rg-bcr600w OS command injection8.8CISA ADP v3.12.4%2025-12-11
CVE-2025-56079Ruijie Rg-ew1300g OS command injection8.8CISA ADP v3.12.8%2025-12-11
CVE-2025-56077Ruijie Rg-rap2200(e) OS command injection8.8CISA ADP v3.12.8%2025-12-11
CVE-2025-55816digitaldruid HotelDruid cross-site scripting6.1CISA ADP v3.10.3%2025-12-11Exploit codeFix
CVE-2025-55314Foxit PDF Editor null pointer dereference7.8CISA ADP v3.10.2%2025-12-11Fix
CVE-2025-55313Foxit PDF Editor code injection7.8CISA ADP v3.10.2%2025-12-11Fix
CVE-2025-55312Foxit PDF Editor null pointer dereference7.8CISA ADP v3.10.2%2025-12-11Fix
CVE-2025-55311Foxit PDF Editor improper signature verification6.5CISA ADP v3.10.2%2025-12-11Fix
CVE-2025-55310Foxit PDF Editor download without integrity check7.3CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-55309Foxit PDF Editor use-after-free6.7CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-55308Foxit PDF Editor use-after-free6.7CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-55307Foxit PDF Editor out-of-bounds read3.3CISA ADP v3.10.2%2025-12-11Fix
CVE-2025-55184Denial of service vulnerability in React Server components7.5CNA v3.166.9%2025-12-11Reported exploitedNucleiExploit codeFix
CVE-2025-55183Source Code Exposure vulnerability in React Server components5.3CNA v3.164.2%2025-12-11Exploit codeFix
CVE-2025-46266TeamViewer DEX Unauthenticated Transmission of Data in NomadBranch.exe6.5NVD v3.10.2%2025-12-11Fix
CVE-2025-44016TeamViewer DEX File Hash Validation Bypass in NomadBranch.exe8.8CNA v3.10.3%2025-12-11Fix
CVE-2025-36938Google Android append_uint32_le injection6.8CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-36937Google Android audio_decoder.cc out-of-bounds write9.8NVD v3.10.3%2025-12-11Fix
CVE-2025-36936Google Android tachyon_server_common.h out-of-bounds write7.8NVD v3.10.1%2025-12-11Fix
CVE-2025-36935Google Android shared-mem-smcall.c memory corruption7.8NVD v3.10.1%2025-12-11Fix
CVE-2025-36934Google Android bigo.c use-after-free7.4CISA ADP v3.10.1%2025-12-11KCVFix
CVE-2025-36932Google Android tracepoint_ipc.c privilege escalation7.8NVD v3.10.1%2025-12-11Fix
CVE-2025-36931Google Android gxp_buffer.h out-of-bounds write7.8CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-36930Google Android gxp_buffer.h out-of-bounds write7.8CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-36929Google Android gxp_fence_manager.cc information disclosure5.5CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-36928Google Android gxp_buffer.h out-of-bounds write7.8CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-36927Google Android tachyon_server_common.h out-of-bounds write7.8CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-36925Google Android libaoc_waves.c out-of-bounds write7.8CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-36924Google Android ss_LcsManagement.c out-of-bounds write8.0CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-36923Google Android cn_NrmmDecoder.cpp out-of-bounds write8.0CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-36922Google Android bigo_iommu.c information disclosure6.7CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-36921Google Android protocolpsadapter.cpp out-of-bounds read5.5CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-36919Google Android aoc_channel_dev.c double free7.8CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-36918Google Android aoc_ipc_core.c out-of-bounds read7.8CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-36917Google Android up_L2commonPdcpSecurity.cpp denial of service6.5CISA ADP v3.10.3%2025-12-11Fix
CVE-2025-36916Google Android gxp_main_actor.cc privilege escalation7.0CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-36912Google Android cellular modem denial of service6.5CISA ADP v3.10.3%2025-12-11Fix
CVE-2025-36889Google Android CameraActivity.java insecure permissions5.5CISA ADP v3.10.1%2025-12-11Fix
CVE-2025-34506WBCE CMS authenticated remote code execution via module upload8.8NVD v3.10.9%2025-12-11Exploit code
CVE-2025-34504KodExplorer open redirect vulnerability via User Login endpoint6.1NVD v3.10.3%2025-12-11Exploit codeFix
CVE-2025-34499AnyDesk unquoted service path privilege escalation6.9CNA v4.00.4%2025-12-11Exploit code
CVE-2025-14538yangshare warehouseManager 仓库管理系统 CustomerManageHandler.java addCustomer cross-site scripting5.1CNA v4.00.3%2025-12-11
CVE-2025-14537code-projects Class and Exam Timetable Management preview7.php SQL injection9.8NVD v3.10.4%2025-12-11
CVE-2025-14536code-projects Class and Exam Timetable Management Login index.php SQL injection9.8NVD v3.10.6%2025-12-11
CVE-2025-14535UTT 进取 512W formConfigFastDirectionW strcpy buffer overflow9.3CNA v4.05.6%2025-12-11Emerging Threats
CVE-2025-14534UTT 进取 512W endpoint formNatStaticMap strcpy buffer overflow9.3CNA v4.05.7%2025-12-11Emerging Threats
CVE-2025-14531code-projects Rental Management System Log Transaction.java CRLF injection5.3CNA v4.00.3%2025-12-11
CVE-2025-14530SourceCodester Real Estate Property Listing App property.php unrestricted upload7.2NVD v3.10.5%2025-12-11
CVE-2025-14529Campcodes Retro Basketball Shoes Online Store admin_running.php SQL injection9.8NVD v3.10.5%2025-12-11
CVE-2025-14528D-Link DIR-803 Configuration getcfg.php information disclosure7.5NVD v3.14.0%2025-12-11Nuclei
CVE-2025-14527Projectworlds Advanced Library Management System view_book.php SQL injection9.8NVD v3.10.4%2025-12-11
CVE-2025-14526Tenda CH22 L7Im frmL7ImForm buffer overflow8.7CNA v4.00.8%2025-12-11Emerging Threats
CVE-2025-14523libsoup Host header handling HTTP request smuggling8.2CNA v3.10.5%2025-12-11Fix
CVE-2025-14522baowzh hfly upload_json.php unrestricted upload9.8NVD v3.10.3%2025-12-11
CVE-2025-14521baowzh hfly download path traversal7.5NVD v3.10.6%2025-12-11
CVE-2025-14520baowzh hfly delfile path traversal9.1NVD v3.10.6%2025-12-11
CVE-2025-14519baowzh hfly advtext add cross-site scripting5.4NVD v3.10.3%2025-12-11
CVE-2025-14518PowerJob Network Request PingPongUtils.java checkConnectivity server-side request forgery9.8NVD v3.10.3%2025-12-11
CVE-2025-14517Yalantis uCrop AndroidManifest.xml UCropActivity improper export of android application components4.8CNA v4.00.2%2025-12-11
CVE-2025-14516Yalantis uCrop URL handler server-side request forgery8.8NVD v3.10.5%2025-12-11
CVE-2025-14515Campcodes Supplier Management System add_unit.php SQL injection9.8NVD v3.10.4%2025-12-11
CVE-2025-14514Campcodes Supplier Management System add_distributor.php SQL injection9.8NVD v3.10.4%2025-12-11
CVE-2025-14512GLib: Integer overflow in GLib gio attribute escaping causes heap buffer overflow6.5CNA v3.10.6%2025-12-11Fix
CVE-2025-14485EFM ipTIME A3004T Administrator Password timepro.cgi show_debug_screen command injection2.3CNA v4.01.8%2025-12-11
CVE-2025-14293WP Job Portal WordPress plugin authenticated (Subscriber+) arbitrary file read6.5CNA v3.10.4%2025-12-11Fix
CVE-2025-14265Improper server-side validation in ScreenConnect extension framework9.1CNA v3.10.4%2025-12-11Fix
CVE-2025-14157Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.3%2025-12-11Fix
CVE-2025-14046GitHub Enterprise Server cross-site scripting8.6CNA v4.00.4%2025-12-11Fix
CVE-2025-13978Generation of error message containing sensitive information in GitLab4.3CNA v3.10.3%2025-12-11Fix
CVE-2025-13912wolfSSL potential non-constant time compiled code with Clang LLVM1.0CNA v4.00.1%2025-12-11Fix
CVE-2025-13780Remote code execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)9.1CNA v3.10.9%2025-12-11Exploit codeFix
CVE-2025-13764WP CarDealer WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.3%2025-12-11Fix
CVE-2025-13668Quartus Prime Pro Edition Advisory5.4CNA v4.00.1%2025-12-11Fix
CVE-2025-13664Altera Quartus Prime Standard uncontrolled search path5.4CNA v4.00.1%2025-12-11Fix
CVE-2025-13663Quartus Prime Pro Edition Installer Advisory5.4CNA v4.00.1%2025-12-11Fix
CVE-2025-13481IBM Aspera Orchestrator command injection8.8CNA v3.10.5%2025-12-11Fix
CVE-2025-13214IBM Aspera Orchestrator SQL injection7.6CNA v3.10.4%2025-12-11Fix
CVE-2025-13211IBM Aspera Orchestrator denial of service5.3CNA v3.10.4%2025-12-11Fix
CVE-2025-13148IBM Aspera Orchestrator unverified password change8.1CNA v3.10.3%2025-12-11Fix
CVE-2025-13124IDOR in Netiket''s ApplyLogic7.6CNA v3.10.3%2025-12-11
CVE-2025-13003IDOR in Aksis Computer's AxOnboard7.6CNA v3.10.2%2025-12-11Fix
CVE-2025-12734Improper encoding or escaping of output in GitLab3.5CNA v3.10.3%2025-12-11Fix
CVE-2025-12716Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.4%2025-12-11Fix
CVE-2025-12687TeamViewer DEX denial of service vulnerability in NomadBranch.exe6.5NVD v3.10.2%2025-12-11Fix
CVE-2025-12562Allocation of resources without limits or throttling in GitLab7.5CNA v3.10.9%2025-12-11Fix
CVE-2025-12029Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.0CNA v3.10.5%2025-12-11Fix
CVE-2025-11984Authentication bypass using an alternate path or channel in GitLab6.8CNA v3.10.4%2025-12-11Fix
CVE-2025-11467RSS Aggregator by Feedzy WordPress plugin server-side request forgery5.8CNA v3.10.3%2025-12-11Fix
CVE-2025-11247Authorization bypass through user-controlled key in GitLab4.3CNA v3.10.2%2025-12-11Fix
CVE-2025-10163List Category Posts WordPress plugin SQL injection6.5CNA v3.10.3%2025-12-11Fix
CVE-2025-9436Widgets for Google Reviews WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-12-11Fix
CVE-2025-8405Improper encoding or escaping of output in GitLab7.7CNA v3.10.5%2025-12-11Fix
CVE-2025-4097Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.3%2025-12-11Fix
CVE-2025-67643Jenkins Redpen Pipeline Reporter For Jira plugin has a path traversal4.3CISA ADP v3.10.3%2025-12-10Fix
CVE-2025-67642Jenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials4.3CISA ADP v3.10.2%2025-12-10Fix
CVE-2025-67641Jenkins Coverage Plugin has a stored cross-site scripting (XSS)5.4NVD v3.10.3%2025-12-10Fix
CVE-2025-67640Jenkins Git Client Plugin has an OS command injection vulnerability on agents in Git Client Plugin5.0CISA ADP v3.10.2%2025-12-10Fix
CVE-2025-67639Jenkins has a CSRF vulnerability on the login form3.5CISA ADP v3.10.2%2025-12-10Fix
CVE-2025-67638Jenkins's build authorization token is stored and displayed in plain text4.3CISA ADP v3.10.2%2025-12-10Fix
CVE-2025-67637Jenkins's build authorization token is stored and displayed in plain text4.3CISA ADP v3.10.2%2025-12-10Fix
CVE-2025-67636Jenkins is missing a permission check on password fields4.3CISA ADP v3.10.2%2025-12-10Fix
CVE-2025-67635Jenkins has a denial of service vulnerability in HTTP-based CLI7.5CISA ADP v3.10.6%2025-12-10Fix
CVE-2025-67513FreePBX Endpoint Manager REST API vulnerability6.9CNA v4.00.3%2025-12-10Fix
CVE-2025-67510Neuron MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts9.4CNA v3.10.4%2025-12-10Fix
CVE-2025-67509Neuron MySQLSelectTool read-only bypass via `SELECT ... INTO OUTFILE` (file write → potential RCE)8.2CNA v3.10.3%2025-12-10Fix
CVE-2025-67507Filament's multi-factor authentication (app) recovery codes can be used multiple times8.1CNA v3.10.3%2025-12-10Fix
CVE-2025-67506PipesHub vulnerable to path traversal through unauthenticated arbitrary file upload9.8CNA v3.11.8%2025-12-10Fix
CVE-2025-67505Race condition in the Okta Java SDK8.4CNA v3.10.2%2025-12-10Fix
CVE-2025-67502Taguette does not safeguard against open redirect5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-67501WeGIA is vulnerable to SQL injection via editar_categoria endpoint parameter9.4CNA v4.00.5%2025-12-10Fix
CVE-2025-67500Mastodon Error Handling Discrepancy enables Private Status Existence Enumeration3.7CNA v3.10.2%2025-12-10Fix
CVE-2025-67499CNI Plugins Portmap nftables backend intercepts non-local traffic6.6CNA v3.10.1%2025-12-10Fix
CVE-2025-67490Auth0 Next.js SDK has Improper Request Caching Lookup5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-67485HTTP/HTTPS Traffic Interception Bypass in mad-proxy5.3CNA v3.10.2%2025-12-10Fix
CVE-2025-67461Zoom Rooms for macOS external control of file name or path5.0CNA v3.10.1%2025-12-10Fix
CVE-2025-67460Zoom Rooms for Windows Software Downgrade protection mechanism failure7.8CNA v3.10.2%2025-12-10Fix
CVE-2025-66675Apache Struts has a denial of service8.2CISA ADP v3.10.6%2025-12-10Fix
CVE-2025-66628ImageMagick is vulnerable to an integer overflow in TIM decoder leading to out-of-bounds read7.5CNA v3.10.5%2025-12-10Exploit codeFix
CVE-2025-66474XWiki vulnerable to remote code execution8.7CNA v4.01.0%2025-12-10Fix
CVE-2025-66473XWiki's REST APIs don't enforce any limits, leading to unavailability and OOM in large wikis8.7CNA v4.00.4%2025-12-10Fix
CVE-2025-66472XWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplication6.5CNA v4.00.5%2025-12-10NucleiFix
CVE-2025-66033Improper Memory Cleanup in the Okta Java SDK5.3CNA v3.10.3%2025-12-10Fix
CVE-2025-66004Local privilege escalation in usbmuxd from arbitrary local user to usbmux5.1CNA v4.00.2%2025-12-10Fix
CVE-2025-65950WBCE CMS is vulnerable to Time-based blind SQL injection through groups[] parameter9.4CNA v4.00.5%2025-12-10Fix
CVE-2025-65832Meatmeet cleartext storage of sensitive information in memory4.6CISA ADP v3.10.1%2025-12-10
CVE-2025-65831Meatmeet weak cryptographic algorithm7.5CISA ADP v3.10.2%2025-12-10
CVE-2025-65830Meatmeet improper certificate validation9.1CISA ADP v3.10.3%2025-12-10
CVE-2025-65829Meatmeet Pro Wifi & Bluetooth Meat Thermometer code injection6.8CISA ADP v3.10.3%2025-12-10
CVE-2025-65828Meatmeet Pro Wifi & Bluetooth Meat Thermometer missing authentication6.5CISA ADP v3.10.3%2025-12-10
CVE-2025-65827Meatmeet cleartext transmission of sensitive information9.1CISA ADP v3.10.3%2025-12-10
CVE-2025-65826Meatmeet cleartext storage of sensitive information9.8CISA ADP v3.10.3%2025-12-10
CVE-2025-65825Meatmeet Pro Wifi & Bluetooth Meat Thermometer missing encryption4.6CISA ADP v3.10.1%2025-12-10
CVE-2025-65824Meatmeet Pro Wifi & Bluetooth Meat Thermometer missing authentication8.8CISA ADP v3.10.6%2025-12-10
CVE-2025-65823Meatmeet Pro Wifi & Bluetooth Meat Thermometer hard-coded credentials9.8CISA ADP v3.10.4%2025-12-10
CVE-2025-65822Meatmeet Pro Wifi & Bluetooth Meat Thermometer unauthorized access6.8CISA ADP v3.10.2%2025-12-10
CVE-2025-65821As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as details about the current and previous Wi-Fi network from the NVS partition. Additionally, this allows the adversary to refl7.5CISA ADP v3.10.4%2025-12-10
CVE-2025-65820Meatmeet information disclosure9.8CISA ADP v3.10.5%2025-12-10
CVE-2025-65815Uniteddevelopers Document Reader path traversal6.5CISA ADP v3.10.6%2025-12-10
CVE-2025-65814A1APPS Office App-edit Word, PDF File path traversal6.5CISA ADP v3.10.6%2025-12-10
CVE-2025-65807Sd changes the group ownership of the source file8.4CISA ADP v3.10.2%2025-12-10
CVE-2025-65803FreeImage psdParser::ReadImageData function integer overflow6.5CISA ADP v3.10.3%2025-12-10
CVE-2025-65792DataGear path traversal9.1CISA ADP v3.10.5%2025-12-10
CVE-2025-65754Algernon cross-site scripting6.1CISA ADP v3.10.4%2025-12-10Exploit codeFix
CVE-2025-65602ChanCMS /vip/v1/file/save component server-side template injection9.8v3.10.5%2025-12-10
CVE-2025-65512zcaceres Markdownify MCP Server server-side request forgery7.5CISA ADP v3.10.5%2025-12-10
CVE-2025-65297Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 automatically collect and upload unencrypted sensitive information. Note that this occurs without disclosure or consent from the manufacturer.7.5CISA ADP v3.10.2%2025-12-10
CVE-2025-65296Aqara Hub M2 null pointer dereference6.5CISA ADP v3.10.3%2025-12-10
CVE-2025-65295Aqara Camera Hub G3 inadequate encryption strength8.1CISA ADP v3.10.2%2025-12-10
CVE-2025-65294Aqara Camera Hub G3 code injection9.8CISA ADP v3.11.0%2025-12-10
CVE-2025-65293Aqara Camera Hub G3 command injection6.6CISA ADP v3.11.1%2025-12-10
CVE-2025-65292Aqara Camera Hub G3 Aqara Hub devices including command injection7.3CISA ADP v3.10.8%2025-12-10
CVE-2025-65291Aqara Camera Hub G3 improper certificate validation7.4CISA ADP v3.10.2%2025-12-10
CVE-2025-65290Aqara Camera Hub G3 improper certificate validation7.4CISA ADP v3.10.2%2025-12-10
CVE-2025-65199Windscribe for Linux changeMTU local privilege escalation7.3CNA v4.01.3%2025-12-10Fix
CVE-2025-64898Adobe ColdFusion insufficiently protected credentials5.3CNA v3.10.4%2025-12-10Fix
CVE-2025-64897Adobe ColdFusion improper access control5.6CNA v3.10.1%2025-12-10Fix
CVE-2025-64888Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64887Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64881Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64875Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64873Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64872Adobe Experience Manager cross-site scripting (stored XSS)4.8CNA v3.10.2%2025-12-10Fix
CVE-2025-64869Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64863Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64861Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64858Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64857Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64853Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64852Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64850Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64847Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64845Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64841Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64840Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64839Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64833Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64829Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64827Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64826Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64825Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64823Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64822Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64821Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64820Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64817Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64814Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64808Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64804Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64803Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64802Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64801Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64800Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64799Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64797Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64796Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64794Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64793Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64792Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64791Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64790Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64789Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64627Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64626Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64623Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64622Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64620Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64619Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64616Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64615Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64614Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64613Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64612Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64611Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64609Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64607Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64606Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64605Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64604Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64603Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64602Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64601Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64600Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64599Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64598Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64597Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64596Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64594Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64593Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64592Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64591Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64590Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64586Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64585Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64583Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64582Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64581Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64580Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64579Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64578Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64577Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64576Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64575Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64574Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64572Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64569Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64566Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64565Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64564Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64563Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64562Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64560Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64559Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64558Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64557Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64556Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64555Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64554Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64553Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64551Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64550Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64549Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64548Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64547Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64546Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64545Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.2%2025-12-10Fix
CVE-2025-64544Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64543Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64541Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-12-10Fix
CVE-2025-64539Adobe Experience Manager cross-site scripting (DOM-based XSS)9.3CNA v3.10.5%2025-12-10Fix
CVE-2025-64538Adobe Experience Manager cross-site scripting (DOM-based XSS)9.3CNA v3.10.6%2025-12-10Fix
CVE-2025-64537Adobe Experience Manager cross-site scripting (DOM-based XSS)9.3CNA v3.10.7%2025-12-10Fix
CVE-2025-63895Jxlindia Jxl 9 Inch Car Android Double Din Player improper resource release7.5CISA ADP v3.10.3%2025-12-10
CVE-2025-63094Xiangshan observable discrepancy7.5CISA ADP v3.10.6%2025-12-10
CVE-2025-62181Pegasystems Pega Infinity basic authentication vulnerability5.3CNA v3.10.4%2025-12-10Fix
CVE-2025-61823Adobe ColdFusion improper restriction of XML external entity reference (XXE)6.2CNA v3.10.5%2025-12-10Fix
CVE-2025-61822Adobe ColdFusion improper input validation6.2CNA v3.10.7%2025-12-10Fix
CVE-2025-61821Adobe ColdFusion improper restriction of XML external entity reference (XXE)6.8CNA v3.10.5%2025-12-10Fix
CVE-2025-61812Adobe ColdFusion improper input validation8.4CNA v3.14.7%2025-12-10Fix
CVE-2025-61811Adobe ColdFusion improper limitation of a pathname to a restricted directory (path traversal)9.1CNA v3.11.2%2025-12-10Fix
CVE-2025-61810Adobe ColdFusion deserialization of untrusted data8.4CNA v3.19.5%2025-12-10Fix
CVE-2025-61809Adobe ColdFusion improper input validation9.1CNA v3.10.7%2025-12-10Fix
CVE-2025-61808Adobe ColdFusion unrestricted upload of file with dangerous type9.1CNA v3.110.6%2025-12-10Fix
CVE-2025-56431fearlessgeekmedia FearlessCMS path traversal7.5v3.10.8%2025-12-10
CVE-2025-56430fearlessgeekmedia FearlessCMS path traversal7.5v3.10.8%2025-12-10
CVE-2025-56429fearlessgeekmedia FearlessCMS cross-site scripting6.1v3.10.3%2025-12-10
CVE-2025-52493Pagerduty Runbook Automation information disclosure6.5CISA ADP v3.10.4%2025-12-10
CVE-2025-41732WAGO Indsutrial-Managed-Switches stack-based buffer overflow via unsafe sscanf in check_cookie9.8CNA v3.10.4%2025-12-10Fix
CVE-2025-41730WAGO Indsutrial-Managed-Switches stack-based buffer overflow via unsafe sscanf in check_account9.8CNA v3.10.4%2025-12-10Fix
CVE-2025-41358Direct reference to insecure objects (IDOR) in CronosWeb from CronosWeb i2A8.3CNA v4.00.3%2025-12-10
CVE-2025-344301Panel CSRF Panel Name Modification4.3NVD v3.10.2%2025-12-10Fix
CVE-2025-344291Panel CSRF Web Port Configuration Change7.1NVD v3.10.2%2025-12-10Fix
CVE-2025-34428MailEnable Cleartext Credential Storage in AUTH.SAV7.8NVD v3.10.1%2025-12-10Fix
CVE-2025-34427MailEnable Cleartext Credential Storage in AUTH.TAB7.8NVD v3.10.1%2025-12-10Fix
CVE-2025-34424MailEnable DLL hijacking via Unsafe Loading of MEAIDP.DLL7.8NVD v3.10.2%2025-12-10Fix
CVE-2025-34423MailEnable DLL hijacking via Unsafe Loading of MEAIAU.DLL7.8v3.10.2%2025-12-10Fix
CVE-2025-34422MailEnable DLL hijacking via Unsafe Loading of MEAIPC.DLL7.8NVD v3.10.2%2025-12-10Fix
CVE-2025-34421MailEnable DLL hijacking via Unsafe Loading of MEAISP.DLL7.8NVD v3.10.2%2025-12-10Fix
CVE-2025-34420MailEnable DLL hijacking via Unsafe Loading of MEAIAM.DLL7.8NVD v3.10.2%2025-12-10Fix
CVE-2025-34419MailEnable DLL hijacking via Unsafe Loading of MEAISM.DLL7.8NVD v3.10.2%2025-12-10Fix
CVE-2025-34418MailEnable DLL hijacking via Unsafe Loading of MEAIMF.DLL7.8NVD v3.10.2%2025-12-10Fix
CVE-2025-34417MailEnable DLL hijacking via Unsafe Loading of MEAISO.DLL7.8NVD v3.10.2%2025-12-10Fix
CVE-2025-34416MailEnable DLL hijacking via Unsafe Loading of MEAIPO.DLL7.8NVD v3.10.2%2025-12-10Fix
CVE-2025-344101Panel CSRF in Change Username Functionality allows Account Lockout7.1NVD v3.10.2%2025-12-10Fix
CVE-2025-34395Barracuda RMM Service Center .NET Remoting path traversal RCE7.5NVD v3.10.8%2025-12-10Fix
CVE-2025-34394Barracuda RMM Service Center .NET Remoting deserialization RCE9.8NVD v3.10.7%2025-12-10Fix
CVE-2025-34393Barracuda RMM Service Center Insecure Reflection RCE9.8NVD v3.10.7%2025-12-10Fix
CVE-2025-34392Barracuda RMM Service Center absolute path traversal RCE9.8NVD v3.124.7%2025-12-10Emerging ThreatsFix
CVE-2025-24857Qualcomm IPQ4019 improper access control7.6CNA v3.10.3%2025-12-10Fix
CVE-2025-14390Video Merchant WordPress plugin cross-site request forgery to arbitrary file upload8.8CNA v3.10.4%2025-12-10
CVE-2025-14087GLib: GLib: Buffer underflow in gvariant parser leads to heap corruption9.8NVD v3.10.8%2025-12-10Fix
CVE-2025-14082Keycloak Admin REST (Representational State Transfer) API does not properly enforce permissions2.7CNA v3.10.4%2025-12-10Fix
CVE-2025-13955Predictable Default Wi-Fi Password in EZCast Pro II Dongle9.3CNA v4.00.2%2025-12-10Fix
CVE-2025-13954Hard-coded cryptographic keys in EZCast Pro II Dongle9.3CNA v4.00.2%2025-12-10Fix
CVE-2025-13953Bypass in the authentication method of the GTT Sistema de Información Tributario application9.3CNA v4.00.6%2025-12-10
CVE-2025-13677Simple Download Counter WordPress plugin arbitrary file read4.9CNA v3.10.5%2025-12-10Fix
CVE-2025-13613Elated Membership WordPress plugin authentication bypass via Social login9.8CNA v3.10.5%2025-12-10Fix
CVE-2025-13607D-Link CCTV camera model DCS-F5614-L1 missing authentication for critical function9.3CNA v4.00.8%2025-12-10Fix
CVE-2025-13339Hippoo Mobile App for WooCommerce WordPress plugin unauthenticated arbitrary file read7.5CNA v3.12.2%2025-12-10NucleiFix
CVE-2025-13184TOTOLINK X5000R cstecgi.cgi authentication bypass9.8CISA ADP v3.111.3%2025-12-10Emerging ThreatsFix
CVE-2025-13155Lenovo Baiying Client incorrect default permissions8.5CNA v4.00.1%2025-12-10Fix
CVE-2025-13152Lenovo One Client uncontrolled search path8.5CNA v4.00.1%2025-12-10
CVE-2025-13127XSS in TACAS Consulting's GoldenHorn3.5CNA v3.10.2%2025-12-10Fix
CVE-2025-13125IDOR in Im Park's DijiDemi4.3CNA v3.10.2%2025-12-10
CVE-2025-13073HandL UTM Grabber / Tracker WordPress plugin reflected XSS via handl_landing_page7.1CISA ADP v3.10.2%2025-12-10Fix
CVE-2025-13072HandL UTM Grabber / Tracker WordPress plugin reflected XSS via utm_source7.1CISA ADP v3.10.2%2025-12-10Fix
CVE-2025-12952Privilege escalation in Dialogflow CX via Webhook Admin Role8.7CNA v4.00.4%2025-12-10Fix
CVE-2025-12046Lenovo App Store uncontrolled search path8.5CNA v4.00.1%2025-12-10Fix
CVE-2025-9571Arbitrary code execution in Google Cloud Data Fusion via Malicious Artifact upload8.7CNA v4.00.4%2025-12-10Fix
CVE-2025-9315Unauthenticated Device Registration vulnerability in MXsecurity Series6.3CNA v4.00.5%2025-12-10Fix
CVE-2025-9056TECNO com.transsion.audiosmartconnect incorrect authorization5.3CISA ADP v3.10.2%2025-12-10
CVE-2025-8110Gogs path traversal8.8NVD v3.185.2%2025-12-10KEVNucleiExploit codeKCVFix
CVE-2025-7073Local privilege escalation via arbitrary File Operation in Bitdefender Total Security8.8CNA v4.00.2%2025-12-10Fix
CVE-2025-5467Ubuntu Apport insecure file permissions1.9CNA v4.00.2%2025-12-10Fix
CVE-2025-1161Improper authorization in Nomysoft Informatics' Nomysem7.1CNA v3.10.2%2025-12-10
CVE-2025-67599WebToffee eCommerce Marketing Automation WordPress plugin broken access control4.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67598SupportCandy WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-12-09Fix
CVE-2025-67597Fluent Booking WordPress plugin broken access control4.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67596Business Directory WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-12-09Fix
CVE-2025-67595Quiz Maker WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-12-09Fix
CVE-2025-67594Thim Elementor Kit WordPress plugin insecure direct object references (IDOR)4.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67593UsersWP WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-12-09Fix
CVE-2025-67592My Calendar WordPress plugin broken access control4.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67591JNews Paywall WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-12-09Fix
CVE-2025-67590Ultimate FAQ WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-12-09Fix
CVE-2025-67589WooCommerce PDF Invoices and Packing Slips WordPress plugin broken access control4.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67588Elementor Website Builder WordPress plugin broken access control4.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67587WP Gravity Forms FreshDesk WordPress plugin open redirection4.7CNA v3.10.2%2025-12-09Fix
CVE-2025-67586Highlight and Share WordPress plugin broken access control4.7CNA v3.10.4%2025-12-09Exploit codeFix
CVE-2025-67585Flexmls® IDX WordPress plugin open redirection4.7CNA v3.10.2%2025-12-09Fix
CVE-2025-67584GoDAM WordPress plugin broken access control5.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67583IDonate WordPress plugin broken access control5.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67582Wbcom Designs WordPress plugin broken access control5.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67581TrueBooker WordPress plugin broken access control5.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67580Constant Contact + WooCommerce WordPress plugin broken access control5.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67579User Extra Fields WordPress plugin broken access control5.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67578WP Email Capture WordPress plugin broken access control5.3CNA v3.10.3%2025-12-09Fix
CVE-2025-67577Easy Form Builder WordPress plugin broken access control5.3CNA v3.10.3%2025-12-09Fix
CVE-2025-67576Simple Link Directory WordPress plugin broken access control5.3CNA v3.10.3%2025-12-09Fix
CVE-2025-67575Sitewide Notice WP WordPress plugin broken access control5.3CNA v3.10.3%2025-12-09Fix
CVE-2025-67574Booking calendar, Appointment Booking System WordPress plugin broken access control5.3CNA v3.10.3%2025-12-09Fix
CVE-2025-67573Sailing WordPress theme broken access control5.3CNA v3.10.3%2025-12-09Fix
CVE-2025-67572PenNews WordPress theme broken access control5.3CNA v3.10.3%2025-12-09Fix
CVE-2025-67571WPFunnels WordPress plugin broken access control5.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67570WPForms Google Sheet Connector WordPress plugin broken access control5.3CNA v3.10.3%2025-12-09Fix
CVE-2025-67569AdForest WordPress theme broken access control5.3CNA v3.10.3%2025-12-09Fix
CVE-2025-67568Basel WordPress theme broken access control5.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67567Sober WordPress theme sensitive data exposure5.3CNA v3.10.3%2025-12-09Fix
CVE-2025-67566Woffice Core WordPress plugin broken access control5.3CNA v3.10.3%2025-12-09Fix
CVE-2025-67565Rehub WordPress theme sensitive data exposure5.3CNA v3.10.3%2025-12-09Fix
CVE-2025-67564Pixel Manager for WooCommerce WordPress plugin sensitive data exposure5.3CNA v3.10.3%2025-12-09Fix
CVE-2025-67563Post SMTP WordPress plugin broken access control5.3CNA v3.10.3%2025-12-09Fix
CVE-2025-67562Image Caption Hover Pro WordPress plugin broken access control5.4CNA v3.10.3%2025-12-09Fix
CVE-2025-67561Debug Log Viewer WordPress plugin broken access control5.4CNA v3.10.2%2025-12-09Fix
CVE-2025-67560Listdom WordPress plugin broken access control5.4CNA v3.10.3%2025-12-09Fix
CVE-2025-67559Online Booking and Scheduling Calendar for WordPress by vcita plugin broken access control5.4CNA v3.10.2%2025-12-09Fix
CVE-2025-67558Rencontre WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-12-09Fix
CVE-2025-67557WP eBay Product Feeds WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-12-09Fix
CVE-2025-67556Advanced FAQ Manager WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-12-09Fix
CVE-2025-67555UseStrict's Calendly Embedder WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-12-09Fix
CVE-2025-67554Cookie Notice and Compliance for GDPR / CCPA WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-12-09Fix
CVE-2025-67553Advanced FAQ Manager WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-12-09Fix
CVE-2025-67552Walker Core WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-12-09Fix
CVE-2025-67551Wappointment WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-12-09Fix
CVE-2025-67550Donation Thermometer WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-12-09Fix
CVE-2025-67549oik WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-12-09Fix
CVE-2025-67548WP Delicious WordPress plugin broken access control6.5CNA v3.10.3%2025-12-09Fix
CVE-2025-67545FireBox WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-12-09Fix
CVE-2025-67544Shopkeeper Extender WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-12-09Fix
CVE-2025-67543Essential Widgets WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-12-09Fix
CVE-2025-67542Multi-Step Checkout for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-12-09Fix
CVE-2025-67541WP-ShowHide WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-12-09Fix
CVE-2025-67540Animation Addons for Elementor WordPress plugin arbitrary content deletion vulnerability6.5CNA v3.10.3%2025-12-09Fix
CVE-2025-67539Select Core WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-12-09Fix
CVE-2025-67538JNews Gallery WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-12-09Fix
CVE-2025-67537ThirstyAffiliates WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-12-09Fix
CVE-2025-67536LearnPress WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-12-09Fix
CVE-2025-67535WP Maps WordPress plugin PHP object injection6.6CNA v3.10.4%2025-12-09Fix
CVE-2025-67534Rencontre WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-12-09Fix
CVE-2025-67533Themify Portfolio Post WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-12-09Fix
CVE-2025-67532Hara WordPress theme local file inclusion7.5CNA v3.10.4%2025-12-09Fix
CVE-2025-67531Turitor WordPress theme local file inclusion7.5CNA v3.10.4%2025-12-09Fix
CVE-2025-67530Besa WordPress theme local file inclusion7.5CNA v3.10.4%2025-12-09Fix
CVE-2025-67529Fashion WordPress theme local file inclusion7.5CNA v3.10.4%2025-12-09Fix
CVE-2025-67528Urna WordPress theme local file inclusion7.5CNA v3.10.4%2025-12-09Fix
CVE-2025-67527Digiqole WordPress theme local file inclusion7.5CNA v3.10.4%2025-12-09Fix
CVE-2025-67526Sailing WordPress theme local file inclusion7.5CNA v3.10.4%2025-12-09Fix
CVE-2025-67525ekommart WordPress theme local file inclusion7.5CNA v3.10.4%2025-12-09Fix
CVE-2025-67524Jobmonster Elementor Addon WordPress plugin local file inclusion7.5CNA v3.10.4%2025-12-09Fix
CVE-2025-67523Exhibz WordPress theme local file inclusion7.5CNA v3.10.4%2025-12-09Fix
CVE-2025-67522Jobmonster WordPress theme local file inclusion7.5CNA v3.10.4%2025-12-09Fix
CVE-2025-67521Select Core WordPress plugin local file inclusion7.5CNA v3.10.4%2025-12-09Fix
CVE-2025-67520Media Library Tools WordPress plugin SQL injection7.6CNA v3.10.3%2025-12-09Fix
CVE-2025-67519Ninja Tables WordPress plugin SQL injection7.6CNA v3.10.4%2025-12-09Fix
CVE-2025-67518Accordion Slider PRO WordPress plugin SQL injection8.5CNA v3.10.3%2025-12-09Fix
CVE-2025-67517ArtPlacer Widget WordPress plugin SQL injection8.5CNA v3.10.3%2025-12-09Fix
CVE-2025-67516Store Locator WordPress plugin SQL injection8.5CNA v3.10.3%2025-12-09Fix
CVE-2025-67515Wilmër WordPress theme local file inclusion8.8CNA v3.10.4%2025-12-09Fix
CVE-2025-67504WBCE CMS has weak random number generator in Password Generation function9.1CNA v3.10.5%2025-12-09Fix
CVE-2025-67496WeGia is vulnerable to XSS through id_pessoa parameter on Password Configuration page4.3CNA v3.10.2%2025-12-09Fix
CVE-2025-67495ZITADEL vulnerable to account takeover via DOM-based XSS in Zitadel V2 Login8.0CNA v3.10.3%2025-12-09Fix
CVE-2025-67494ZITADEL vulnerable to Unauthenticated Full-read SSRF via V2 Login9.3CNA v3.10.4%2025-12-09Exploit codeFix
CVE-2025-67489@vitejs/plugin-rsc remote code execution9.8CNA v3.10.8%2025-12-09Fix
CVE-2025-67488B3LOG SiYuan ZIP import function path traversal7.8CNA v3.10.4%2025-12-09