# CVEs published 2025-12-02

177 CVEs were published on December 2, 2025: 17 critical, 55 high. Days are UTC.

- [CVE-2025-65955](https://cve.now/CVE-2025-65955.md): ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family (CVSS 4.9, ImageMagick)
- [CVE-2025-55181](https://cve.now/CVE-2025-55181.md): Sending an HTTP request/response body with greater than 2^31 bytes triggers an infinite loop in proxygen::coro::HTTPQuicCoroSession which bl (CVSS 5.3, Facebook proxygen)
- [CVE-2025-66476](https://cve.now/CVE-2025-66476.md): Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability (CVSS 7.8, vim)
- [CVE-2025-62575](https://cve.now/CVE-2025-62575.md): Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource (CVSS 8.7, Mirion Medical EC2 Software NMIS BioDose)
- [CVE-2025-64778](https://cve.now/CVE-2025-64778.md): Mirion Medical EC2 Software NMIS BioDose Use of Hard-coded Credentials (CVSS 8.4, Mirion Medical EC2 Software NMIS BioDose)
- [CVE-2025-61940](https://cve.now/CVE-2025-61940.md): Mirion Medical EC2 Software NMIS BioDose Use of Client-Side Authentication (CVSS 8.7, Mirion Medical EC2 Software NMIS BioDose)
- [CVE-2025-64298](https://cve.now/CVE-2025-64298.md): Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource (CVSS 8.6, Mirion Medical EC2 Software NMIS BioDose)
- [CVE-2025-64642](https://cve.now/CVE-2025-64642.md): Mirion Medical EC2 Software NMIS BioDose Incorrect Permission Assignment for Critical Resource (CVSS 7.1, Mirion Medical EC2 Software NMIS BioDose)
- [CVE-2025-13658](https://cve.now/CVE-2025-13658.md): Industrial Video & Control Longwatch has a Code Injection vulnerability (CVSS 9.3, Industrial Video & Control Longwatch)
- [CVE-2025-13510](https://cve.now/CVE-2025-13510.md): Iskra iHUB and iHUB Lite has a Missing Authentication for Critical Function vulnerabilitiy (CVSS 9.3, Iskra iHUB and iHUB Lite)
- [CVE-2025-13542](https://cve.now/CVE-2025-13542.md): DesignThemes LMS \<= 1.0.4 - Unauthenticated Privilege Escalation (CVSS 9.8, DesignThemes LMS)
- [CVE-2025-13633](https://cve.now/CVE-2025-13633.md): Use after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer pro (CVSS 8.8, Google Chrome)
- [CVE-2025-13721](https://cve.now/CVE-2025-13721.md): Race in v8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVSS 7.5, Google Chrome)
- [CVE-2025-13720](https://cve.now/CVE-2025-13720.md): Bad cast in Loader in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially (CVSS 8.8, Google Chrome)
- [CVE-2025-13640](https://cve.now/CVE-2025-13640.md): Inappropriate implementation in Passwords in Google Chrome prior to 143.0.7499.41 allowed a local attacker to bypass authentication via phys (CVSS 3.5, Google Chrome)
- [CVE-2025-13639](https://cve.now/CVE-2025-13639.md): Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform arbitrary read/write via (CVSS 8.1, Google Chrome)
- [CVE-2025-13638](https://cve.now/CVE-2025-13638.md): Use after free in Media Stream in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via (CVSS 8.8, Google Chrome)
- [CVE-2025-13637](https://cve.now/CVE-2025-13637.md): Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage i (CVSS 4.3, Google Chrome)
- [CVE-2025-13636](https://cve.now/CVE-2025-13636.md): Inappropriate implementation in Split View in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage (CVSS 4.3, Google Chrome)
- [CVE-2025-13635](https://cve.now/CVE-2025-13635.md): Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a local attacker to perform UI spoofing via a craf (CVSS 4.4, Google Chrome)
- [CVE-2025-13634](https://cve.now/CVE-2025-13634.md): Inappropriate implementation in Downloads in Google Chrome on Windows prior to 143.0.7499.41 allowed a local attacker to bypass mark of the (CVSS 4.4, Google Chrome)
- [CVE-2025-13632](https://cve.now/CVE-2025-13632.md): Inappropriate implementation in DevTools in Google Chrome prior to 143.0.7499.41 allowed an attacker who convinced a user to install a malic (CVSS 5.4, Google Chrome)
- [CVE-2025-13631](https://cve.now/CVE-2025-13631.md): Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege (CVSS 8.8, Google Chrome)
- [CVE-2025-13630](https://cve.now/CVE-2025-13630.md): Type Confusion in V8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted (CVSS 8.8, Google Chrome)
- [CVE-2025-61729](https://cve.now/CVE-2025-61729.md): Excessive resource consumption when printing error string for host certificate validation in crypto/x509 (CVSS 7.5, Go standard library crypto/x509 · stdlib)
- [CVE-2025-57850](https://cve.now/CVE-2025-57850.md): Codeready-ws: privilege escalation via excessive /etc/passwd permissions (CVSS 6.4, Red Hat OpenShift Dev Spaces)
- [CVE-2025-66468](https://cve.now/CVE-2025-66468.md): Aimeos GrapesJS CMS extension possible stores XSS exploitable by authenticated editors (CVSS 7.7, aimeos ai-cms-grapesjs · aimeos/ai-cms-grapesjs)
- [CVE-2025-34352](https://cve.now/CVE-2025-34352.md): JumpCloud Remote Assist \< 0.317.0 Arbitrary File Write/Delete via Insecure Temp Directory (CVSS 8.5, JumpCloud Remote Assist)
- [CVE-2025-66460](https://cve.now/CVE-2025-66460.md): Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables (CVSS 5.3, lookyloo)
- [CVE-2025-66459](https://cve.now/CVE-2025-66459.md): Lookyloo vulnerable to XSS due to unescaped error message passed to innerHTML (CVSS 5.3, lookyloo)
- [CVE-2025-66458](https://cve.now/CVE-2025-66458.md): Lookyloo has multiple XSS due to unsafe use of f-strings in Markup (CVSS 5.3, lookyloo)
- [CVE-2025-66454](https://cve.now/CVE-2025-66454.md): Arcade MCP Default Hardcoded Worker Secret Allows Full Unauthorized Access to All HTTP MCP Worker Endpoints (CVSS 6.5, ArcadeAI arcade-mcp · arcade-mcp-server)
- [CVE-2025-66416](https://cve.now/CVE-2025-66416.md): DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost (CVSS 7.6, modelcontextprotocol python-sdk · mcp)
- [CVE-2025-66414](https://cve.now/CVE-2025-66414.md): DNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on Localhost (CVSS 7.6, modelcontextprotocol typescript-sdk · @modelcontextprotocol…)
- [CVE-2025-66409](https://cve.now/CVE-2025-66409.md): ESF-IDF has an Out-of-Bounds Read in ESP32 Bluetooth AVRCP Command Handling (CVSS 2.7, espressif esp-idf)
- [CVE-2025-52622](https://cve.now/CVE-2025-52622.md): HCL BigFix SaaS Remediate is affected by a security vulnerability (CVSS 5.4, HCL Software BigFix SaaS Remediate)
- [CVE-2025-66399](https://cve.now/CVE-2025-66399.md): SNMP Command Injection leads to RCE in Cacti (CVSS 7.4, cacti)
- [CVE-2025-65105](https://cve.now/CVE-2025-65105.md): Apptainer ineffective application of selinux and apparmor --security options (CVSS 4.5, apptainer · github.com/apptainer/apptainer)
- [CVE-2025-64750](https://cve.now/CVE-2025-64750.md): Singluarity ineffectively applies of selinux / apparmor LSM process labels (CVSS 4.5, sylabs singularity · github.com/sylabs/singularity +1)
- [CVE-2025-13828](https://cve.now/CVE-2025-13828.md): Mautic user without privileged access to the Marketplace can install and uninstall composer packages (CVSS 9.0, Mautic · mautic/core)
- [CVE-2025-13827](https://cve.now/CVE-2025-13827.md): GrapesJsBuilder File Upload allows all file uploads (CVSS 8.8, Mautic · mautic/grapes-js-builder-bundle)
- [CVE-2025-13877](https://cve.now/CVE-2025-13877.md): nocobase JWT Service jwt-service.ts hard-coded key (CVSS 6.3, nocobase · @nocobase/auth)
- [CVE-2025-12630](https://cve.now/CVE-2025-12630.md): Upload.am File Hosting VPN \< 1.0.1 - Contributor+ Arbitrary Option Disclosure (CVSS 4.9, Upload.am)
- [CVE-2025-58113](https://cve.now/CVE-2025-58113.md): An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co. (CVSS 6.5, PDF-XChange Co. PDF-XChange Editor)
- [CVE-2025-64460](https://cve.now/CVE-2025-64460.md): Potential denial-of-service vulnerability in XML serializer text extraction (CVSS 7.5, djangoproject Django · django)
- [CVE-2025-13372](https://cve.now/CVE-2025-13372.md): Potential SQL injection in FilteredRelation column aliases on PostgreSQL (CVSS 4.3, djangoproject Django · django)
- [CVE-2025-13876](https://cve.now/CVE-2025-13876.md): Rareprob HD Video Player All Formats App com.rocks.music.videoplayer path traversal (CVSS 4.8, Rareprob HD Video Player All Formats App)
- [CVE-2025-13875](https://cve.now/CVE-2025-13875.md): Yohann0617 oci-helper OCI Configuration Upload OciServiceImpl.java addCfg path traversal (CVSS 5.3, Yohann0617 oci-helper)
- [CVE-2025-13505](https://cve.now/CVE-2025-13505.md): Stored XSS in Datateam's Datactive (CVSS 4.8, Datateam Information Technologies Datactive)
- [CVE-2025-41066](https://cve.now/CVE-2025-41066.md): Disclosure of sensitive information in Horde Groupware (CVSS 6.9, Horde Groupware)
- [CVE-2025-13731](https://cve.now/CVE-2025-13731.md): Nexter Extension \<= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, posimyththemes Nexter Extension – Security, Performance, Co…)
- [CVE-2025-13295](https://cve.now/CVE-2025-13295.md): Sensitive Data Exposure in ArgusTech's BILGER (CVSS 7.5, Argus Technology BILGER)
- [CVE-2025-41086](https://cve.now/CVE-2025-41086.md): Authorization bypass in GAMS from GAMS Development Corp. (CVSS 6.9, AMS Development GAMS)
- [CVE-2025-41015](https://cve.now/CVE-2025-41015.md): User Enumeration vulnerability in TCMAN GIM (CVSS 6.9, TCMAN GIM)
- [CVE-2025-41014](https://cve.now/CVE-2025-41014.md): User Enumeration vulnerability in TCMAN GIM (CVSS 6.9, TCMAN GIM)
- [CVE-2025-41013](https://cve.now/CVE-2025-41013.md): SQL injection vulnerability in TCMAN GIM (CVSS 8.7, TCMAN GIM)
- [CVE-2025-41012](https://cve.now/CVE-2025-41012.md): Unauthorized access vulnerability in TCMAN GIM (CVSS 8.7, TCMAN GIM)
- [CVE-2025-40700](https://cve.now/CVE-2025-40700.md): Reflected Cross-Site Scripting (XSS) in Governalia by IDI Eikon (CVSS 5.1, IDI Eikon Governalia)
- [CVE-2025-11789](https://cve.now/CVE-2025-11789.md): Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 (CVSS 7.1, SGE-PLC1000 SGE-PLC50 Circutor)
- [CVE-2025-11788](https://cve.now/CVE-2025-11788.md): Heap-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 (CVSS 8.5, SGE-PLC1000 SGE-PLC50 Circutor)
- [CVE-2025-11787](https://cve.now/CVE-2025-11787.md): Command injection vulnerability in Circutor SGE-PLC1000/SGE-PLC50 (CVSS 8.5, SGE-PLC1000 SGE-PLC50 Circutor)
- [CVE-2025-11786](https://cve.now/CVE-2025-11786.md): Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 (CVSS 8.5, SGE-PLC1000 SGE-PLC50 Circutor)
- [CVE-2025-11785](https://cve.now/CVE-2025-11785.md): Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 (CVSS 8.5, SGE-PLC1000 SGE-PLC50 Circutor)
- [CVE-2025-11784](https://cve.now/CVE-2025-11784.md): Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 (CVSS 8.5, SGE-PLC1000 SGE-PLC50 Circutor)
- [CVE-2025-11783](https://cve.now/CVE-2025-11783.md): Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 (CVSS 8.5, SGE-PLC1000 SGE-PLC50 Circutor)
- [CVE-2025-11782](https://cve.now/CVE-2025-11782.md): Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 (CVSS 8.5, SGE-PLC1000 SGE-PLC50 Circutor)
- [CVE-2025-11781](https://cve.now/CVE-2025-11781.md): Use of hardcoded cryptographic keys in Circutor SGE-PLC1000/SGE-PLC50 (CVSS 8.6, SGE-PLC1000 SGE-PLC50 Circutor)
- [CVE-2025-11780](https://cve.now/CVE-2025-11780.md): Stack-based buffer overflow vulnreability in Circutor SGE-PLC1000/SGE-PLC50 (CVSS 8.7, SGE-PLC1000 SGE-PLC50 Circutor)
- [CVE-2025-11779](https://cve.now/CVE-2025-11779.md): Stack-based buffer overflow vulnreability in Circutor SGE-PLC1000/SGE-PLC50 (CVSS 9.4, SGE-PLC1000 SGE-PLC50 Circutor)
- [CVE-2025-11778](https://cve.now/CVE-2025-11778.md): Stack-based buffer overflow vulnreability in Circutor SGE-PLC1000/SGE-PLC50 (CVSS 10.0, SGE-PLC1000 SGE-PLC50 Circutor)
- [CVE-2025-13879](https://cve.now/CVE-2025-13879.md): Directory traversal vulnerability in EfficientIP's SOLIDserver IPAM (CVSS 5.1, SOLIDserver IPAM)
- [CVE-2025-12465](https://cve.now/CVE-2025-12465.md): Blind SQL Injection in QuickCMS (CVSS 8.6, OpenSolution QuickCMS)
- [CVE-2025-13090](https://cve.now/CVE-2025-13090.md): WP Directory Kit \<= 1.4.6 - Authenticated (Admin+) SQL Injection (CVSS 4.9, wpdirectorykit WP Directory Kit)
- [CVE-2025-13353](https://cve.now/CVE-2025-13353.md): gokey allows secret recovery from a seed file without the master password (CVSS 7.1, Cloudflare gokey · github.com/cloudflare/gokey)
- [CVE-2025-41742](https://cve.now/CVE-2025-41742.md): Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system components (CVSS 9.8, Sprecher Automation SPRECON-E-C · Sprecher Automation SP… +1)
- [CVE-2025-41743](https://cve.now/CVE-2025-41743.md): Sprecher Automation: SPRECON-E series prone to weak encryption of update files (CVSS 4.0, Sprecher Automation SPRECON-E-C · Sprecher Automation SP… +1)
- [CVE-2025-41744](https://cve.now/CVE-2025-41744.md): Sprecher Automation: SPRECON-E series has static default key material for TLS connections (CVSS 9.1, Sprecher Automation SPRECON-E-C · Sprecher Automation SP… +1)
- [CVE-2025-13873](https://cve.now/CVE-2025-13873.md): The feature to import a survey is prone to stored Cross-Site Script attacks (CVSS 4.8, ObjectPlanet Opinio)
- [CVE-2025-13872](https://cve.now/CVE-2025-13872.md): Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio (CVSS 2.1, ObjectPlanet Opinio)
- [CVE-2025-13871](https://cve.now/CVE-2025-13871.md): The feature to manage resources is prone to Cross-Site Request Forgery attacks (CVSS 2.3, ObjectPlanet Opinio)
- [CVE-2025-13870](https://cve.now/CVE-2025-13870.md): Unauthorized access and subscription vulnerability in Boards (CVSS 3.1, Mattermost · github.com/mattermost/mattermost +4)
- [CVE-2025-13516](https://cve.now/CVE-2025-13516.md): SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers \<= 1.9.0 - Unauthenticated Arbitrary File Upload (CVSS 8.1, brainstormforce SureMail – SMTP and Email Logs Plugin with…)
- [CVE-2025-13724](https://cve.now/CVE-2025-13724.md): VikRentCar Car Rental Management System \<= 1.4.4 - Authenticated (Author+) SQL Injection via 'month' Parameter (CVSS 7.5, e4jvikwp VikRentCar Car Rental Management System)
- [CVE-2025-13534](https://cve.now/CVE-2025-13534.md): ELEX WordPress HelpDesk & Customer Ticketing System \<= 3.3.2 - Authenticated (Contributor+) Privilege Escalation via eh\_crm\_edit\_agent AJAX Action (CVSS 6.3, elextensions ELEX WordPress HelpDesk & Customer Ticketing S…)
- [CVE-2025-10543](https://cve.now/CVE-2025-10543.md): In Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions \<=1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly (CVSS 6.3, Eclipse Foundation paho.mqtt.golang · github.com/eclipse/pa…)
- [CVE-2025-10971](https://cve.now/CVE-2025-10971.md): Insecure Storage of Sensitive Information (CVSS 8.8, FERMAX ELECTRÓNICA S.A.U MeetMe)
- [CVE-2025-11726](https://cve.now/CVE-2025-11726.md): Beaver Builder – WordPress Page Builder \<= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Global Preset Modification (CVSS 4.3, beaverbuilder Beaver Builder Page Builder – Drag and Drop W…)
- [CVE-2025-13696](https://cve.now/CVE-2025-13696.md): Zigaform \<= 7.6.5 - Unauthenticated Form Submission Data Disclosure in rocket\_front\_payment\_seesummary AJAX Endpoint (CVSS 5.3, softdiscover Zigaform – Price Calculator & Cost Estimation…)
- [CVE-2025-12483](https://cve.now/CVE-2025-12483.md): Visualizer: Tables and Charts Manager for WordPress \<= 3.11.12 - Authenticated (Contributor+) SQL Injection (CVSS 6.5, themeisle Visualizer: Tables and Charts Manager for WordPre…)
- [CVE-2025-13140](https://cve.now/CVE-2025-13140.md): SurveyJS: Drag & Drop WordPress Form Builder \<= 1.12.20 - Cross-Site Request Forgery to Survey Deletion (CVSS 4.3, devsoftbaltic SurveyJS: Drag & Drop Form Builder)
- [CVE-2025-13685](https://cve.now/CVE-2025-13685.md): Photo Gallery by Ays \<= 6.4.8 - Cross-Site Request Forgery to Bulk Actions (CVSS 4.3, ays-pro Photo Gallery by Ays – Responsive Image Gallery)
- [CVE-2025-13007](https://cve.now/CVE-2025-13007.md): WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets (Google Reviews, YouTube Feed, Photo Feeds, and More) \<= 3.20.3 - Unauthenticated Stored Cross-Site Scripting via External Content Import (CVSS 6.1, adreastrian WP Social Ninja – Embed Social Feeds, User Revi…)
- [CVE-2025-13001](https://cve.now/CVE-2025-13001.md): Donation \<= 1.0 - Admin+ SQLi (CVSS 4.1, donation)
- [CVE-2025-13000](https://cve.now/CVE-2025-13000.md): DB Access \<= 0.8.7 - Subscriber+ SQLi (CVSS 7.7, db-access)
- [CVE-2025-13606](https://cve.now/CVE-2025-13606.md): Export All Posts, Products, Orders, Refunds & Users \<= 2.19 - Cross-Site Request Forgery to Sensitive Information Exposure (CVSS 6.5, smackcoders Export All Posts, Products, Orders, Refunds & U…)
- [CVE-2025-13387](https://cve.now/CVE-2025-13387.md): Kadence WooCommerce Email Designer \<= 1.5.17 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, stellarwp Kadence WooCommerce Email Designer)
- [CVE-2025-20789](https://cve.now/CVE-2025-20789.md): In GPU pdma, there is a possible information disclosure due to a missing bounds check. (CVSS 4.4, MediaTek MT6781, MT6833, MT6853, MT6877, MT6893, MT8196)
- [CVE-2025-20788](https://cve.now/CVE-2025-20788.md): In GPU pdma, there is a possible memory corruption due to a missing permission check. (CVSS 4.4, MediaTek MT6991, MT8196)
- [CVE-2025-20777](https://cve.now/CVE-2025-20777.md): In display, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT…)
- [CVE-2025-20776](https://cve.now/CVE-2025-20776.md): In display, there is a possible out of bounds read due to a missing bounds check. (CVSS 6.7, MediaTek MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT…)
- [CVE-2025-20775](https://cve.now/CVE-2025-20775.md): In display, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT…)
- [CVE-2025-20774](https://cve.now/CVE-2025-20774.md): In display, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT…)
- [CVE-2025-20773](https://cve.now/CVE-2025-20773.md): In display, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT…)
- [CVE-2025-20772](https://cve.now/CVE-2025-20772.md): In display, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT…)
- [CVE-2025-20771](https://cve.now/CVE-2025-20771.md): In display, there is a possible escalation of privilege due to improper input validation. (CVSS 6.7, MediaTek MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT…)
- [CVE-2025-20770](https://cve.now/CVE-2025-20770.md): In display, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT…)
- [CVE-2025-20769](https://cve.now/CVE-2025-20769.md): In display, there is a possible out of bounds write due to a missing bounds check. (CVSS 3.4, MediaTek MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT…)
- [CVE-2025-20768](https://cve.now/CVE-2025-20768.md): In display, there is a possible out of bounds read due to a missing bounds check. (CVSS 7.8, MediaTek MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT…)
- [CVE-2025-20767](https://cve.now/CVE-2025-20767.md): In display, there is a possible out of bounds write due to an integer overflow. (CVSS 7.8, MediaTek MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT…)
- [CVE-2025-20766](https://cve.now/CVE-2025-20766.md): In display, there is a possible memory corruption due to improper input validation. (CVSS 7.8, MediaTek MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT…)
- [CVE-2025-20765](https://cve.now/CVE-2025-20765.md): In aee daemon, there is a possible system crash due to a race condition. (CVSS 4.7, MediaTek MT2718, MT2737, MT6739, MT6761, MT6765, MT6768, MT…)
- [CVE-2025-20764](https://cve.now/CVE-2025-20764.md): In smi, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, MediaTek MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT…)
- [CVE-2025-20763](https://cve.now/CVE-2025-20763.md): In mmdvfs, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, MediaTek MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT…)
- [CVE-2025-20750](https://cve.now/CVE-2025-20750.md): In Modem, there is a possible system crash due to improper input validation. (CVSS 6.5, MediaTek MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855,…)
- [CVE-2025-20751](https://cve.now/CVE-2025-20751.md): In Modem, there is a possible system crash due to a missing bounds check. (CVSS 6.5, MediaTek MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855,…)
- [CVE-2025-20791](https://cve.now/CVE-2025-20791.md): In Modem, there is a possible system crash due to incorrect error handling. (CVSS 6.5, MediaTek MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855,…)
- [CVE-2025-20752](https://cve.now/CVE-2025-20752.md): In Modem, there is a possible system crash due to a missing bounds check. (CVSS 6.5, MediaTek MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, M…)
- [CVE-2025-20756](https://cve.now/CVE-2025-20756.md): In Modem, there is a possible system crash due to a logic error. (CVSS 6.5, MediaTek MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855,…)
- [CVE-2025-20757](https://cve.now/CVE-2025-20757.md): In Modem, there is a possible system crash due to improper input validation. (CVSS 6.5, MediaTek MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855,…)
- [CVE-2025-20758](https://cve.now/CVE-2025-20758.md): In Modem, there is a possible system crash due to an uncaught exception. (CVSS 4.9, MediaTek MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, M…)
- [CVE-2025-20759](https://cve.now/CVE-2025-20759.md): In Modem, there is a possible out of bounds read due to a missing bounds check. (CVSS 6.5, MediaTek MT2735, MT2737, MT6833, MT6833P, MT6853, MT6853T,…)
- [CVE-2025-20790](https://cve.now/CVE-2025-20790.md): In Modem, there is a possible system crash due to improper input validation. (CVSS 5.3, MediaTek MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855,…)
- [CVE-2025-20755](https://cve.now/CVE-2025-20755.md): In Modem, there is a possible application crash due to improper input validation. (CVSS 5.3, MediaTek MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855,…)
- [CVE-2025-20754](https://cve.now/CVE-2025-20754.md): In Modem, there is a possible system crash due to an incorrect bounds check. (CVSS 5.3, MediaTek MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, M…)
- [CVE-2025-20753](https://cve.now/CVE-2025-20753.md): In Modem, there is a possible system crash due to an uncaught exception. (CVSS 5.3, MediaTek MT2735, MT2737, MT6833, MT6833P, MT6853, MT6853T,…)
- [CVE-2025-20792](https://cve.now/CVE-2025-20792.md): In Modem, there is a possible system crash due to improper input validation. (CVSS 5.3, MediaTek MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855,…)
- [CVE-2024-45675](https://cve.now/CVE-2024-45675.md): IBM Informix Dynamic Server Authentication Bypass (CVSS 8.4, IBM Informix Dynamic Server)
- [CVE-2025-13697](https://cve.now/CVE-2025-13697.md): BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library \<= 2.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via \`timestamp\` Attribute (CVSS 6.4, wpblockart BlockArt Blocks – Gutenberg Blocks, Page Builder…)
- [CVE-2025-12529](https://cve.now/CVE-2025-12529.md): Cost Calculator Builder \<= 3.6.3 - Unauthenticated Arbitrary File Deletion (CVSS 8.8, stylemix Cost Calculator Builder)
- [CVE-2025-55129](https://cve.now/CVE-2025-55129.md): HackerOne community member Kassem S.(kassem\_s94) has reported that username handling in Revive Adserver was still vulnerable to impersonatio (CVSS 5.4, Revive Adserver)
- [CVE-2025-58488](https://cve.now/CVE-2025-58488.md): Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sens (CVSS 4.5, Samsung Mobile SmartTouchCall)
- [CVE-2025-58487](https://cve.now/CVE-2025-58487.md): Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account (CVSS 4.0, Samsung Mobile Samsung Account)
- [CVE-2025-58486](https://cve.now/CVE-2025-58486.md): Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script. (CVSS 4.0, Samsung Mobile Samsung Account)
- [CVE-2025-58485](https://cve.now/CVE-2025-58485.md): Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script. (CVSS 5.5, Samsung Mobile Samsung Internet)
- [CVE-2025-58484](https://cve.now/CVE-2025-58484.md): Incorrect default permissions in Samsung Cloud Assistant prior to version 8.0.03.8 allows local attacker to access partial data in sandbox. (CVSS 4.0, Samsung Mobile Samsung Cloud Assistant)
- [CVE-2025-58483](https://cve.now/CVE-2025-58483.md): Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to insta (CVSS 5.9, Samsung Mobile Galaxy Store for Galaxy Watch)
- [CVE-2025-58482](https://cve.now/CVE-2025-58482.md): Improper access control in MPLocalService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service. (CVSS 7.3, Samsung Mobile MotionPhoto)
- [CVE-2025-58481](https://cve.now/CVE-2025-58481.md): Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service. (CVSS 7.3, Samsung Mobile MotionPhoto)
- [CVE-2025-58480](https://cve.now/CVE-2025-58480.md): Heap-based buffer overflow in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory. (CVSS 4.3, Samsung Mobile Devices)
- [CVE-2025-58479](https://cve.now/CVE-2025-58479.md): Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory. (CVSS 4.3, Samsung Mobile Devices)
- [CVE-2025-58478](https://cve.now/CVE-2025-58478.md): Out-of-bounds write in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory. (CVSS 4.3, Samsung Mobile Devices)
- [CVE-2025-58477](https://cve.now/CVE-2025-58477.md): Out-of-bounds write in parsing IFD tag in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bo (CVSS 4.3, Samsung Mobile Devices)
- [CVE-2025-58476](https://cve.now/CVE-2025-58476.md): Out-of-bounds read vulnerability in bootloader prior to SMR Dec-2025 Release 1 allows physical attackers to access out-of-bounds memory. (CVSS 4.2, Samsung Mobile Devices)
- [CVE-2025-58475](https://cve.now/CVE-2025-58475.md): Improper input validation in libsec-ril.so prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. (CVSS 5.6, Samsung Mobile Devices)
- [CVE-2025-21080](https://cve.now/CVE-2025-21080.md): Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Release 1 allows local attackers to access fil (CVSS 6.2, Samsung Mobile Devices)
- [CVE-2025-21072](https://cve.now/CVE-2025-21072.md): Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write (CVSS 5.7, Samsung Mobile Devices)
- [CVE-2025-58386](https://cve.now/CVE-2025-58386.md): In Terminalfour 8 through 8.4.1.1, the userLevel parameter in the user management function is not subject to proper server-side authorizatio (CVSS 9.8)
- [CVE-2025-59693](https://cve.now/CVE-2025-59693.md): The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) (CVSS 9.8)
- [CVE-2025-59694](https://cve.now/CVE-2025-59694.md): The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) (CVSS 6.8)
- [CVE-2025-59695](https://cve.now/CVE-2025-59695.md): Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a user (CVSS 9.8)
- [CVE-2025-59696](https://cve.now/CVE-2025-59696.md): Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi (CVSS 3.2)
- [CVE-2025-59697](https://cve.now/CVE-2025-59697.md): Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi (CVSS 7.2)
- [CVE-2025-59698](https://cve.now/CVE-2025-59698.md): Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow a (CVSS 6.8)
- [CVE-2025-59699](https://cve.now/CVE-2025-59699.md): Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi (CVSS 6.8)
- [CVE-2025-59700](https://cve.now/CVE-2025-59700.md): Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi (CVSS 5.8)
- [CVE-2025-59701](https://cve.now/CVE-2025-59701.md): Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi (CVSS 4.1)
- [CVE-2025-59702](https://cve.now/CVE-2025-59702.md): Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physi (CVSS 7.2)
- [CVE-2025-59703](https://cve.now/CVE-2025-59703.md): Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physi (CVSS 9.1)
- [CVE-2025-59704](https://cve.now/CVE-2025-59704.md): Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an atta (CVSS 7.8)
- [CVE-2025-59705](https://cve.now/CVE-2025-59705.md): Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physi (CVSS 6.8)
- [CVE-2025-60736](https://cve.now/CVE-2025-60736.md): code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter. (CVSS 9.8)
- [CVE-2025-60854](https://cve.now/CVE-2025-60854.md): A vulnerability has been found in D-Link R15 (AX1500) 1.20.01 and below. (CVSS 9.8)
- [CVE-2025-63872](https://cve.now/CVE-2025-63872.md): DeepSeek V3.2 has a Cross Site Scripting (XSS) vulnerability, which allows JavaScript execution through model-generated SVG content. (CVSS 6.1)
- [CVE-2025-64070](https://cve.now/CVE-2025-64070.md): Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the Add New Subject Description field. (CVSS 5.4)
- [CVE-2025-65186](https://cve.now/CVE-2025-65186.md): Grav CMS 1.7.49 is vulnerable to Cross Site Scripting (XSS). (CVSS 6.1, getgrav/grav)
- [CVE-2025-65187](https://cve.now/CVE-2025-65187.md): A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. (CVSS 6.1)
- [CVE-2025-65215](https://cve.now/CVE-2025-65215.md): Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /product\_expiry/add-supplier (CVSS 6.1)
- [CVE-2025-65358](https://cve.now/CVE-2025-65358.md): Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointment. (CVSS 9.8)
- [CVE-2025-65379](https://cve.now/CVE-2025-65379.md): PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recovery.php endpoint. (CVSS 6.5)
- [CVE-2025-65380](https://cve.now/CVE-2025-65380.md): PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. (CVSS 6.5)
- [CVE-2025-65656](https://cve.now/CVE-2025-65656.md): dcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/Extend/VersionManager.php. (CVSS 9.8)
- [CVE-2025-65657](https://cve.now/CVE-2025-65657.md): FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Management. (CVSS 6.5, feehi/cms)
- [CVE-2025-65844](https://cve.now/CVE-2025-65844.md): EverShop 2.0.1 allows a remote unauthenticated attacker to upload arbitrary files and create directories via the /api/images endpoint. (CVSS 7.5)
- [CVE-2025-65858](https://cve.now/CVE-2025-65858.md): A Stored Cross-Site Scripting (XSS) vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username' (CVSS 3.5, calibreweb)
- [CVE-2025-65877](https://cve.now/CVE-2025-65877.md): Lvzhou CMS before commit c4ea0eb9cab5f6739b2c87e77d9ef304017ed615 (2025-09-22) is vulnerable to SQL injection via the 'title' parameter in c (CVSS 7.5)
- [CVE-2025-65881](https://cve.now/CVE-2025-65881.md): Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /classes/Login.php. (CVSS 6.1)
- [CVE-2025-65896](https://cve.now/CVE-2025-65896.md): SQL injection vulnerability in long2ice assyncmy thru 0.2.10 allows attackers to execute arbitrary SQL commands via crafted dict keys. (CVSS 9.8, asyncmy)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-12-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.