CVEs published December 4, 2025
169 CVEs were published on December 4, 2025: 13 critical, 73 high.
- Published
- 169
- Critical
- 13
- High
- 73
- Medium
- 48
- Low
- 3
- Unrated
- 32
- Now in CISA KEV
- 0
- Fix available
- 55
Most affected products
- Linux
- 53
- WatchGuard Fireware OS
- 12
- dayrui XunRuiCMS
- 5
- Medtronic CareLink Network
- 4
- Synology BeeDrive for desktop
- 4
- Synology Router Manager
- 4
- JIZHICMS
- 3
- open-webui
- 3
- Synology DiskStation Manager · Synology Unified Controller
- 3
- Seafile
- 2
Critical 13
- CVE-2025-66571UNA CMS 9.0.0-RC1 - 14.0.0-RC4 PHP Object InjectionUNA CMS
- CVE-2025-40261nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()Linux
- CVE-2025-40258mptcp: fix race condition in mptcp_schedule_work()Linux
- CVE-2025-40257mptcp: fix a race in mptcp_pm_del_add_timer()Linux
- CVE-2025-40252net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()Linux
- CVE-2024-45538Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-728Synology DiskStation Manager · Synology Unified Controller
- CVE-2025-29268ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.
- CVE-2025-29269ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoin
- CVE-2025-53963An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices.
- CVE-2025-54303The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API.
- CVE-2025-54304An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices.
- CVE-2025-63362Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows att
- CVE-2025-65346alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal.alexusmai/laravel-file-manager
High 73
- CVE-2025-13373Advantech iView SQL InjectionAdvantech iView
- CVE-2025-66564Sigstore Timestamp Authority allocates excessive memory during request parsingsigstore timestamp-authority · github.com/sigstore/times… +1
- CVE-2025-66563Monkeytype vulnerable to stored XSS in approve quotes pagemonkeytypegame monkeytype
- CVE-2025-66561SysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS)Syslifters sysreptor
- CVE-2025-66559Taiko Alethia Pacaya inbox verification pointer corruptiontaikoxyz taiko-mono
- CVE-2025-1547WatchGuard Firebox Authenticated Stack Overflow in Certificate Request CommandWatchGuard Fireware OS
- CVE-2025-66509LaraDashboard: 1-Click Pre-Auth RCE via Host Header + Module Installation Chainlaradashboard
- CVE-2025-66506Fulcio allocates excessive memory during token parsingsigstore fulcio · github.com/sigstore/fulcio
- CVE-2025-1545WatchGuard Firebox XPath Injection Vulnerability in Web CGIWatchGuard Fireware OS
- CVE-2025-11838WatchGuard Firebox iked Memory Corruption VulnerabilityWatchGuard Fireware OS
- CVE-2025-12196WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping CommandWatchGuard Fireware OS
- CVE-2025-53704MAXHUB Pivot Weak Password Recovery Mechanism for Forgotten PasswordMAXHUB Pivot client application
- CVE-2025-12195WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec ConfigurationWatchGuard Fireware OS
- CVE-2025-12026WatchGuard Firebox Authenticated Out of Bounds Write in certdWatchGuard Fireware OS
- CVE-2025-10285Simplcity Device Manager exposes NTLMv2 hashsilabs.com Simplicity Studio
- CVE-2025-13932The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference (IDOR), where any auSolisCloud Monitoring Platform
- CVE-2025-66238Sunbird DCIM dcTrack and Power IQ Authentication Bypass Using an Alternate Path or ChannelSunbird DCIM dcTrack · Sunbird IQ
- CVE-2025-66237Sunbird DCIM dcTrack and Power IQ Use of Hard-coded CredentialsSunbird DCIM dcTrack · Sunbird Power IQ
- CVE-2025-65959Open WebUI vulnerable to Stored DOM XSS via Note 'Download PDF'open-webui
- CVE-2025-66576Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE)Remotecontrolio Remote Keyboard Desktop
- CVE-2025-66575VeeVPN 1.6.1 - Unquoted Service Path Remote Code ExecutionVeePN VeeVPN
- CVE-2025-66555AirKeyboard iOS App 1.0.5 - Remote Input Injectionairkeyboardapp AirKeyboard iOS App
- CVE-2024-58278IndigoSTAR Software - perl2exe <= V30.10C - Arbitrary Code ExecutionIndigoSTAR Software perl2exe
- CVE-2024-58277R Radio Network FM Transmitter 1.07 System Settings DisclosureR Radio Network Radio Network FM Transmitter
- CVE-2024-58276Obi08-Enrollment System 1.0 get_subject.php SQL InjectionObi08/Enrollment System
- CVE-2024-58275Easywall 0.3.1 - Authenticated Command Injection in /ports-save Endpointjpylypiw Easywall
- CVE-2023-53734dawa-pharma-1.0 - SQL Injection via Email Parametermayurik dawa-pharma
- CVE-2025-27935Authentication Bypass in OTP (One-time Passcode) IdP Adapter Integration KitPing Identity One-Time Passcode Integration Kit for PingFed…
- CVE-2025-13543PostGallery <= 1.12.5 - Authenticated (Subscriber+) Arbitrary File Uploadrtowebsites PostGallery
- CVE-2025-12995Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint that could be used tMedtronic CareLink Network
- CVE-2025-65958Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/webopen-webui
- CVE-2025-12097Relative Path Traversal Vulnerability in NI System Web ServerNI LabVIEW
- CVE-2025-65945auth0/node-jws improper HMAC signature verification vulnerabilityauth0 node-jws · jws
- CVE-2025-14015H3C Magic B0 aspForm EditWlanMacList buffer overflowH3C Magic B0
- CVE-2025-9127PX Enterprise Improper Sanitization VulnerabilityPure Storage PX Enterprise
- CVE-2025-66287Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crashThe WebKitGTK Team WebKitGTK · Red Hat Enterprise Linux… +1
- CVE-2025-66516Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affectedApache Software Foundation Apache Tika core · Apache Sof… +4
- CVE-2025-40266KVM: arm64: Check the untrusted offset in FF-A memory shareLinux
- CVE-2025-40262Input: imx_sc_key - fix memory corruption on unloadLinux
- CVE-2025-40253s390/ctcm: Fix double-kfreeLinux
- CVE-2025-40251devlink: rate: Unset parent pointer in devl_rate_nodes_destroyLinux
- CVE-2025-40250net/mlx5: Clean up only new IRQ glue on request_irq() failureLinux
- CVE-2025-40249gpio: cdev: make sure the cdev fd is still active before emitting eventsLinux
- CVE-2025-40248vsock: Ignore signal/timeout on connect() if already establishedLinux
- CVE-2025-40245nios2: ensure that memblock.current_limit is set when setting pfn limitsLinux
- CVE-2025-40244hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()Linux
- CVE-2025-40243hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()Linux
- CVE-2025-40242gfs2: Fix unlikely race in gdlm_put_lockLinux
- CVE-2025-40241erofs: fix crafted invalid cases for encoded extentsLinux
- CVE-2025-40240sctp: avoid NULL dereference when chunk data buffer is missingLinux
- CVE-2025-40233ocfs2: clear extent cache after moving/defragmenting extentsLinux
- CVE-2025-54160Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology BeeDrive for desktop beSynology BeeDrive for desktop
- CVE-2025-54159Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attackers to delete arbitrSynology BeeDrive for desktop
- CVE-2025-54158Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local userSynology BeeDrive for desktop
- CVE-2025-29846A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.Synology Router Manager
- CVE-2024-45539Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Synology DiskStation Manager · Synology Unified Controller
- CVE-2025-40216io_uring/rsrc: don't rely on user vaddr alignmentLinux
- CVE-2025-40215xfrm: delete x->tunnel as we delete xLinux
- CVE-2025-40214af_unix: Initialise scc_index in unix_add_edge().Linux
- CVE-2025-11727Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration - Powered by Codisto <= 1.3.65 - Unauthenticated Stored Cross-Site ScriptingOmnichannel for WooCommerce: Google, Amazon, eBay & Walmart…
- CVE-2025-54305An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1.
- CVE-2025-54306An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1.
- CVE-2025-54307An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1.
- CVE-2025-55948This vulnerability fundamentally arises from yzcheng90 X-SpringBoot 6.0's implementation of role-based access control (RBAC) through dual de
- CVE-2025-56427Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the _download_file_or_composio
- CVE-2025-57210Incorrect access control in the component ApiPayController.java of platform v1.0.0 allows attackers to access sensitive information via unsp
- CVE-2025-57212Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive information via a cra
- CVE-2025-57213Incorrect access control in the component orderService.queryObject of platform v1.0.0 allows attackers to access sensitive information via a
- CVE-2025-63363A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1:
- CVE-2025-63364Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discov
- CVE-2025-63896An issue in the Bluetooth Human Interface Device (HID) of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to inject
- CVE-2025-65637A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64github.com/sirupsen/logrus
- CVE-2025-65883A vulnerability has been identified in Genexis Platinum P4410 router (Firmware P4410-V2–1.41) that allows a local network attacker to achiev
Medium, low and unrated 83
- CVE-2025-14051youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variablesyoulaitech youlai-mall
- CVE-2025-1910WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update PackageWatchGuard Mobile VPN with SSL Client
- CVE-2025-12986Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devicessilabs.com Gecko SDK
- CVE-2025-6946WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS ConfigurationWatchGuard Fireware OS
- CVE-2025-13940WatchGuard Firebox Boot Time System Integrity Check BypassWatchGuard Fireware OS
- CVE-2025-13939WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless ControllerWatchGuard Fireware OS
- CVE-2025-13938WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration ConfigurationWatchGuard Fireware OS
- CVE-2025-13937WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration ConfigurationWatchGuard Fireware OS
- CVE-2025-13936WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration ConfigurationWatchGuard Fireware OS
- CVE-2025-66479Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxinganthropic-experimental sandbox-runtime · @anthropic-ai/sand…
- CVE-2025-66574TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS)Compass Plustechologies TranzAxis
- CVE-2025-66573Solstice Pod API Session Key Extraction via API Endpointmersive Solstice Pod API
- CVE-2025-66572Loaded Commerce 6.6 Client-Side Template Injection (CSTI)loadedcommerce Loaded Commerce
- CVE-2023-53735WEBIGniter 28.7.23 Cross-Site Scripting (XSS) in User Creation ProcessWEBIGniter
- CVE-2025-12997Insecure Direct Object Reference vulnerability in Medtronic CareLink Network which allows an authenticated attacker with access to specific Medtronic CareLink Network
- CVE-2025-12996Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from errorMedtronic CareLink Network
- CVE-2025-12994Medtronic CareLink Network allows an unauthenticated remote attacker to initiate a request for security questions to an API endpoint that coMedtronic CareLink Network
- CVE-2025-14016macrozheng mall-swarm delete improper authorizationmacrozheng mall-swarm
- CVE-2025-13488Nexus Repository 3 - Stored Cross-Site Scripting (XSS)Sonatype Nexus Repository
- CVE-2025-14013JIZHICMS Comment addcomment.html cross site scriptingJIZHICMS
- CVE-2025-14012JIZHICMS Batch Delete Comments deleteAll.html delete sql injectionJIZHICMS
- CVE-2025-14011JIZHICMS Add Display Name Field addcomment.html commentlist sql injectionJIZHICMS
- CVE-2025-40265vfat: fix missing sb_min_blocksize() return value checksLinux
- CVE-2025-40264be2net: pass wrb_params in case of OS2BMCLinux
- CVE-2025-40263Input: cros_ec_keyb - fix an invalid memory accessLinux
- CVE-2025-40260sched_ext: Fix scx_enable() crash on helper kthread creation failureLinux
- CVE-2025-40259scsi: sg: Do not sleep in atomic contextLinux
- CVE-2025-40256xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never addedLinux
- CVE-2025-40255net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()Linux
- CVE-2025-40254net: openvswitch: remove never-working support for setting nsh fieldsLinux
- CVE-2025-40247drm/msm: Fix pgtable prealloc error pathLinux
- CVE-2025-40246xfs: fix out of bounds memory read error in symlink repairLinux
- CVE-2025-40239net: phy: micrel: always set shared->phydev for LAN8814Linux
- CVE-2025-40238net/mlx5: Fix IPsec cleanup over MPV deviceLinux
- CVE-2025-40237fs/notify: call exportfs_encode_fid with s_umountLinux
- CVE-2025-40236virtio-net: zero unused hash fieldsLinux
- CVE-2025-40235btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots()Linux
- CVE-2025-40234platform/x86: alienware-wmi-wmax: Fix NULL pointer dereference in sleep handlersLinux
- CVE-2025-40232rv: Fully convert enabled_monitors to use list_head as iteratorLinux
- CVE-2025-40231vsock: fix lock inversion in vsock_assign_transport()Linux
- CVE-2025-40230mm: prevent poison consumption when splitting THPLinux
- CVE-2025-40229mm/damon/core: fix potential memory leak by cleaning ops_filter in damon_destroy_schemeLinux
- CVE-2025-40228mm/damon/sysfs: catch commit test ctx alloc failureLinux
- CVE-2025-40227mm/damon/sysfs: dealloc commit test ctx alwaysLinux
- CVE-2025-40226firmware: arm_scmi: Account for failed debug initializationLinux
- CVE-2025-40225drm/panthor: Fix kernel panic on partial unmap of a GPU VA regionLinux
- CVE-2025-40224hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc()Linux
- CVE-2025-40223most: usb: Fix use-after-free in hdm_disconnectLinux
- CVE-2025-40222tty: serial: sh-sci: fix RSCI FIFO overrun handlingLinux
- CVE-2025-8074Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary Synology BeeDrive for desktop
- CVE-2025-2848A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings, and disable some nonSynology Mail Server
- CVE-2025-14008dayrui XunRuiCMS Project Domain Change Test admin79f2ec220c7e.php server-side request forgerydayrui XunRuiCMS
- CVE-2025-29845A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.Synology Router Manager
- CVE-2025-29844A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information.Synology Router Manager
- CVE-2025-29843A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files.Synology Router Manager
- CVE-2025-40221media: pci: mg4b: fix uninitialized iio scan dataLinux
- CVE-2025-40220fuse: fix livelock in synchronous file put from fuseblk workersLinux
- CVE-2025-40219PCI/IOV: Fix race between SR-IOV enable/disable and hotplugLinux
- CVE-2025-40218mm/damon/vaddr: do not repeat pte_offset_map_lock() until successLinux
- CVE-2025-40217pidfs: validate extensible ioctlsLinux
- CVE-2025-14007dayrui XunRuiCMS Domain Name Binding admin79f2ec220c7e.php cross site scriptingdayrui XunRuiCMS
- CVE-2025-14006dayrui XunRuiCMS Add Data Validation admind45f74adbd95.php cross site scriptingdayrui XunRuiCMS
- CVE-2024-5401Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manager (DSM) before 7.1.1-Synology DiskStation Manager · Synology Unified Controller
- CVE-2025-14005dayrui XunRuiCMS Add Display Name Field admind45f74adbd95.php cross site scriptingdayrui XunRuiCMS
- CVE-2025-14004dayrui XunRuiCMS Email Setting admind45f74adbd95.php server-side request forgerydayrui XunRuiCMS
- CVE-2025-11222Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via sLINE Central Dogma · com.linecorp.centraldogma:centraldogma…
- CVE-2025-41080Multiple vulnerabilities in SeafileSeafile
- CVE-2025-41079Multiple vulnerabilities in SeafileSeafile
- CVE-2025-14010Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose outputansible-collections Ansible Community General Collection… +2
- CVE-2025-12826Custom Post Type UI <= 1.18.0 - Missing Authorization to Unauthenticated (Previously Administrator+) Custom Post Type Modificationwebdevstudios Custom Post Type UI
- CVE-2025-12782Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Builder Status Tamperingbeaverbuilder Beaver Builder Page Builder – Drag and Drop W…
- CVE-2025-13513Clik stats <= 0.8 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']codejunkie Clik stats
- CVE-2025-11379WebP Express <= 0.25.9 - Unauthenticated Information Exposureroselldk WebP Express
- CVE-2025-59788Cross-site scripting (XSS) vulnerability in a reachable files_pdfviewer example directory in Nextcloud with versions before 22.2.10.33, 23.0Nextcloud
- CVE-2025-61148An Insecure Direct Object Reference (IDOR) vulnerability in the EduplusCampus 3.0.1 Student Payment API allows authenticated users to access
- CVE-2025-63361Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discov
- CVE-2025-63499Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.
- CVE-2025-63681open-webui v0.6.33 is vulnerable to Incorrect Access Control.open-webui
- CVE-2025-65516A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12.
- CVE-2025-65806The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive files.
- CVE-2025-65899Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism.
- CVE-2025-65900Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-api/auth/users API endpoint.
- CVE-2025-66373Akamai Ghost on Akamai CDN edge servers before 2025-11-17 has a chunked request body processing error that can result in HTTP request smuggl