CVEs published December 3, 2025
94 CVEs were published on December 3, 2025: 11 critical, 33 high. 1 is now in CISA KEV.
- Published
- 94
- Critical
- 11
- High
- 33
- Medium
- 44
- Low
- 6
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 48
Most affected products
- Splunk Enterprise · Splunk Cloud Platform
- 4
- envoyproxy envoy · github.com/envoyproxy/envoy
- 3
- MasaCMS
- 3
- rommapp romm
- 3
- NVIDIA Triton Inference Server
- 2
- OpenVPN
- 2
- Splunk Enterprise
- 2
- Splunk Enterprise · Splunk Cloud Platform +1
- 2
- stevejburge Tag, Category, and Taxonomy Manager – AI Autota…
- 2
- Wireshark Foundation Wireshark
- 2
Critical 11
- CVE-2025-66489Cal.com Authentication Bypass via bad TOTP + password checkscalcom cal.com
- CVE-2025-66222DeepChat Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE)ThinkInAIXYZ deepchat
- CVE-2025-34319TOTOLINK N300RT <= V2.1.8-B20201030.1539 Boa formWsc RCETOTOLINK N300RT
- CVE-2024-32641Masa CMS Vulnerable to Pre-Auth RCE via JSON APIMasaCMS
- CVE-2025-55182A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 incluMeta react-server-dom-webpack · Meta react-server-dom-tu… +4
- CVE-2025-13390WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeoverlistingthemes WP Directory Kit
- CVE-2025-13342Frontend Admin by DynamiApps <= 3.28.20 - Unauthenticated Arbitrary Options Updateshabti Frontend Admin by DynamiApps
- CVE-2025-13486Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - Unauthenticated Remote Code Execution in prepare_formhwk-fr Advanced Custom Fields: Extended
- CVE-2025-64055An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions
- CVE-2025-65267In ERPNext v15.83.2 and Frappe Framework v15.86.0, improper validation of uploaded SVG avatar images allows attackers to embed malicious Jav
- CVE-2025-65868XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST reques
High 33
- CVE-2025-62173Authenticated SQL Injection in Endpoint Module Rest APIFreePBX restapps
- CVE-2025-66293LIBPNG has an out-of-bounds read in png_image_read_compositepnggroup libpng
- CVE-2025-65097Insecure Direct Object Reference (IDOR) Allows Unauthorized Deletion of User Collectionsrommapp romm
- CVE-2025-12385Improper validation of <img> tag size in Text component parserQt
- CVE-2025-65027RomM Chained XSS and CSRF Vulnerabilities Enable Admin Account Takeoverrommapp romm
- CVE-2025-66411Coder logged sensitive objects unsanitizedcoder · github.com/coder/coder/v2 +1
- CVE-2025-12819Untrusted search path in auth_query connection in PgBouncerPgBouncer
- CVE-2024-3884Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencodedRed Hat JBoss Enterprise Application Platform 7.1 EUS f… +19
- CVE-2025-66208Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxyCollaboraOnline online
- CVE-2025-33208NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an uncontrolled search path.NVIDIA TAO
- CVE-2025-66032Claude Code Command Validation Bypass Allows Arbitrary Code Executionanthropics claude-code · @anthropic-ai/claude-code
- CVE-2025-33211NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified quantity in input.NVIDIA Triton Inference Server
- CVE-2025-33201NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for unusual or exceptional conditions NVIDIA Triton Inference Server
- CVE-2025-64443DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming modedocker mcp-gateway · github.com/docker/mcp-gateway
- CVE-2025-54065GZDoom engine allows arbitrary code execution via ZScript actor statesgzdoom
- CVE-2025-20387Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgradeSplunk Enterprise
- CVE-2025-20386Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgradeSplunk Enterprise
- CVE-2024-32643Masa CMS vulnerable to authentication bypass with /tag/MasaCMS
- CVE-2024-32642Host header poisoning allows account takeover via password reset emailMasaCMS
- CVE-2025-7044Privilege Escalation in MAAS via Websocket Request ManipulationUbuntu MAAS
- CVE-2025-13947Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-dropThe WebKitGTK Team webkitgtk · Red Hat Enterprise Linux… +1
- CVE-2025-12744Abrt: command-injection in abrt leading to local privilege escalationabrt · Red Hat Enterprise Linux
- CVE-2025-13646Modula 2.13.1 - 2.13.2 - Authenticated (Author+) Arbitrary File Upload via Race Conditionwpchill Image Gallery – Photo Grid & Video Gallery
- CVE-2025-13645Modula 2.13.1 - 2.13.2 - Authenticated (Author+) Arbitrary File Deletionwpchill Image Gallery – Photo Grid & Video Gallery
- CVE-2025-50360A heap buffer overflow in compiler.c and compiler.h in Pepper language 0.1.1commit 961a5d9988c5986d563310275adad3fd181b2bb7.
- CVE-2025-53841The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.Akamai Guardicore Platform Agent
- CVE-2025-54326An issue was discovered in Camera in Samsung Mobile Processor Exynos 1280 and 2200.
- CVE-2025-57198AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability i
- CVE-2025-57199AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability i
- CVE-2025-57201AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability i
- CVE-2025-65320Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory.
- CVE-2025-65843Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its support data archive generation feature.
- CVE-2025-66431WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated users to execute arbitrary code as root viaPlesk
Medium, low and unrated 50
- CVE-2025-66404mcp-server-kubernetes potential security issue in exec_in_pod toolFlux159 mcp-server-kubernetes · mcp-server-kubernetes
- CVE-2025-13086Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to openOpenVPN
- CVE-2025-65096RomM Insecure Direct Object Reference (IDOR) Allows Unauthorized Access to Private Collectionsrommapp romm
- CVE-2025-61727Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509Go standard library crypto/x509 · stdlib
- CVE-2025-66453Rhino vulnerable high CPU usage and potential DoS when passing specific numbers to toFixed() functionmozilla rhino · org.mozilla:rhino
- CVE-2025-66406Improper Authorization Check for SSH Certificate Revocationsmallstep certificates · github.com/smallstep/certificates
- CVE-2025-13992Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to bypass site Google Chrome
- CVE-2025-12084Quadratic complexity in node ID cache clearingPython Software Foundation CPython
- CVE-2025-66220Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byteenvoyproxy envoy · github.com/envoyproxy/envoy
- CVE-2025-64763Envoy forwards early CONNECT data in TCP proxy modeenvoyproxy envoy · github.com/envoyproxy/envoy
- CVE-2025-64527Envoy crashes when JWT authentication is configured with the remote JWKS fetchingenvoyproxy envoy · github.com/envoyproxy/envoy
- CVE-2025-20388Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2025-20389Improper Input Validation in "label" column field in Splunk Secure Gateway AppSplunk Enterprise · Splunk Cloud Platform +1
- CVE-2025-20383Improper access control through push notifications for reports and alerts in Splunk Secure Gateway appSplunk Enterprise · Splunk Cloud Platform +1
- CVE-2025-20384Unauthenticated Log Injection in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2025-20385Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2025-20381SPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP toolSplunk MCP Server
- CVE-2025-20382URL validation bypass through Views Dashboard in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2025-13492HP Image Assistant - Potential Escalation of PrivilegeHP Image Assistant
- CVE-2025-13751Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on Windows allows a local authenticated useOpenVPN
- CVE-2025-13949ProudMuBai GoFilm FileController.go SingleUpload unrestricted uploadProudMuBai GoFilm
- CVE-2025-13948opsre go-ldap-admin JWT docker-compose.yaml hard-coded keyopsre go-ldap-admin
- CVE-2025-13359Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injectionstevejburge Tag, Category, and Taxonomy Manager – AI Autota…
- CVE-2025-13756Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution <= 1.9.11 - Authenticated (Subscriber+) Missing Authorization to Calendar Import and Managementtechjewel Fluent Booking – The Ultimate Appointments Schedu…
- CVE-2025-13401Autoptimize <= 3.1.13 - Authenticated (Contributor+) Stored Cross-Site Scriptingoptimizingmatters Autoptimize
- CVE-2025-13354Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Taxonomy Term Manipulationstevejburge Tag, Category, and Taxonomy Manager – AI Autota…
- CVE-2025-13109HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query'realmag777 HUSKY – Products Filter Professional for WooComm…
- CVE-2025-12358ShopEngine <= 4.8.5 - Cross-Site Request Forgery to Wishlist Manipulationroxnor ShopEngine Elementor WooCommerce Builder Addon – All…
- CVE-2025-12887Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.1 - Missing Authorization to Authenticated (Subscriber+) OAuth Token Updatesaadiqbal Post SMTP – Complete Email Deliverability and SMT…
- CVE-2025-39665Livestatus Injection in dynmapsNagvis
- CVE-2025-13472Missing authorization in BlazeMeter Jenkins PluginPerforce BlazeMeter · com.blazemeter.plugins:BlazeMeterJenk…
- CVE-2025-29864Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 beforeESTsoft ALZip
- CVE-2025-13946Loop with Unreachable Exit Condition ('Infinite Loop') in WiresharkWireshark Foundation Wireshark
- CVE-2025-13945Improperly Controlled Sequential Memory Allocation in WiresharkWireshark Foundation Wireshark
- CVE-2025-12954Timetable and Event Schedule by MotoPress < 2.4.16 - Contributor+ Event Disclosure via IDORTimetable and Event Schedule by MotoPress
- CVE-2025-10304Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.8 - Missing Authorization to Unauthenticated Backup Failureeverestthemes Everest Backup – WordPress Cloud Backup, Migr…
- CVE-2025-12585MxChat – AI Chatbot for WordPress <= 2.5.5 - Unauthenticated Information ExposureMxChat – AI Chatbot & Content Generation for WordPress
- CVE-2025-13495FluentCart A New Era of eCommerce <= 1.3.1 - Authenticated (Administrator+) SQL Injection via 'groupKey' Parameterwpmanageninja FluentCart A New Era of eCommerce – Faster, L…
- CVE-2025-13448CSSIgniter Shortcodes <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'element' Shortcode Attributeanastis CSSIgniter Shortcodes
- CVE-2025-50361Buffer Overflow was found in SmallBASIC community SmallBASIC with SDL Before v12_28, and commit sha:298a1d495355959db36451e90a0ac74bcc5593fe
- CVE-2025-53965An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480,
- CVE-2025-55076A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.
- CVE-2025-57200AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability i
- CVE-2025-57202A stored cross-site scripting (XSS) vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1
- CVE-2025-62686A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installati
- CVE-2025-63401Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0 allows a remote attacker to execute arbitrary c
- CVE-2025-63402An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via APIs do not enforc
- CVE-2025-65345alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal.alexusmai/laravel-file-manager
- CVE-2025-65841Aquarius Desktop 3.0.069 for macOS stores user authentication credentials in the local file ~/Library/Application Support/Aquarius/aquarius.
- CVE-2025-65842The Aquarius HelperTool (1.0.003) privileged XPC service on macOS contains multiple flaws that allow local privilege escalation.