# CVEs published 2025-12-04

169 CVEs were published on December 4, 2025: 13 critical, 73 high. Days are UTC.

- [CVE-2025-13373](https://cve.now/CVE-2025-13373.md): Advantech iView SQL Injection (CVSS 8.7, Advantech iView)
- [CVE-2025-66564](https://cve.now/CVE-2025-66564.md): Sigstore Timestamp Authority allocates excessive memory during request parsing (CVSS 7.5, sigstore timestamp-authority · github.com/sigstore/times… +1)
- [CVE-2025-66563](https://cve.now/CVE-2025-66563.md): Monkeytype vulnerable to stored XSS in approve quotes page (CVSS 7.1, monkeytypegame monkeytype)
- [CVE-2025-14051](https://cve.now/CVE-2025-14051.md): youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables (CVSS 5.3, youlaitech youlai-mall)
- [CVE-2025-66561](https://cve.now/CVE-2025-66561.md): SysReptor Vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) (CVSS 7.3, Syslifters sysreptor)
- [CVE-2025-66559](https://cve.now/CVE-2025-66559.md): Taiko Alethia Pacaya inbox verification pointer corruption (CVSS 8.0, taikoxyz taiko-mono)
- [CVE-2025-1547](https://cve.now/CVE-2025-1547.md): WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command (CVSS 7.5, WatchGuard Fireware OS)
- [CVE-2025-66509](https://cve.now/CVE-2025-66509.md): LaraDashboard: 1-Click Pre-Auth RCE via Host Header + Module Installation Chain (CVSS 8.9, laradashboard)
- [CVE-2025-66506](https://cve.now/CVE-2025-66506.md): Fulcio allocates excessive memory during token parsing (CVSS 7.5, sigstore fulcio · github.com/sigstore/fulcio)
- [CVE-2025-1910](https://cve.now/CVE-2025-1910.md): WatchGuard Mobile VPN with SSL Local Privilege Escalation via Update Package (CVSS 6.3, WatchGuard Mobile VPN with SSL Client)
- [CVE-2025-12986](https://cve.now/CVE-2025-12986.md): Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices (CVSS 6.0, silabs.com Gecko SDK)
- [CVE-2025-6946](https://cve.now/CVE-2025-6946.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration (CVSS 4.8, WatchGuard Fireware OS)
- [CVE-2025-1545](https://cve.now/CVE-2025-1545.md): WatchGuard Firebox XPath Injection Vulnerability in Web CGI (CVSS 8.2, WatchGuard Fireware OS)
- [CVE-2025-11838](https://cve.now/CVE-2025-11838.md): WatchGuard Firebox iked Memory Corruption Vulnerability (CVSS 8.7, WatchGuard Fireware OS)
- [CVE-2025-13940](https://cve.now/CVE-2025-13940.md): WatchGuard Firebox Boot Time System Integrity Check Bypass (CVSS 6.7, WatchGuard Fireware OS)
- [CVE-2025-13939](https://cve.now/CVE-2025-13939.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Gateway Wireless Controller (CVSS 4.8, WatchGuard Fireware OS)
- [CVE-2025-13938](https://cve.now/CVE-2025-13938.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration (CVSS 4.8, WatchGuard Fireware OS)
- [CVE-2025-13937](https://cve.now/CVE-2025-13937.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration (CVSS 4.8, WatchGuard Fireware OS)
- [CVE-2025-13936](https://cve.now/CVE-2025-13936.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration (CVSS 4.8, WatchGuard Fireware OS)
- [CVE-2025-12196](https://cve.now/CVE-2025-12196.md): WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command (CVSS 8.6, WatchGuard Fireware OS)
- [CVE-2025-53704](https://cve.now/CVE-2025-53704.md): MAXHUB Pivot Weak Password Recovery Mechanism for Forgotten Password (CVSS 7.5, MAXHUB Pivot client application)
- [CVE-2025-12195](https://cve.now/CVE-2025-12195.md): WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec Configuration (CVSS 8.6, WatchGuard Fireware OS)
- [CVE-2025-12026](https://cve.now/CVE-2025-12026.md): WatchGuard Firebox Authenticated Out of Bounds Write in certd (CVSS 8.6, WatchGuard Fireware OS)
- [CVE-2025-10285](https://cve.now/CVE-2025-10285.md): Simplcity Device Manager exposes NTLMv2 hash (CVSS 7.4, silabs.com Simplicity Studio)
- [CVE-2025-13932](https://cve.now/CVE-2025-13932.md): The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference (IDOR), where any au (CVSS 8.3, SolisCloud Monitoring Platform)
- [CVE-2025-66238](https://cve.now/CVE-2025-66238.md): Sunbird DCIM dcTrack and Power IQ Authentication Bypass Using an Alternate Path or Channel (CVSS 7.4, Sunbird DCIM dcTrack · Sunbird IQ)
- [CVE-2025-66237](https://cve.now/CVE-2025-66237.md): Sunbird DCIM dcTrack and Power IQ Use of Hard-coded Credentials (CVSS 8.4, Sunbird DCIM dcTrack · Sunbird Power IQ)
- [CVE-2025-66479](https://cve.now/CVE-2025-66479.md): Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing (CVSS 1.8, anthropic-experimental sandbox-runtime · @anthropic-ai/sand…)
- [CVE-2025-65959](https://cve.now/CVE-2025-65959.md): Open WebUI vulnerable to Stored DOM XSS via Note 'Download PDF' (CVSS 8.7, open-webui)
- [CVE-2025-66576](https://cve.now/CVE-2025-66576.md): Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE) (CVSS 8.9, Remotecontrolio Remote Keyboard Desktop)
- [CVE-2025-66575](https://cve.now/CVE-2025-66575.md): VeeVPN 1.6.1 - Unquoted Service Path Remote Code Execution (CVSS 8.5, VeePN VeeVPN)
- [CVE-2025-66574](https://cve.now/CVE-2025-66574.md): TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS) (CVSS 5.3, Compass Plustechologies TranzAxis)
- [CVE-2025-66573](https://cve.now/CVE-2025-66573.md): Solstice Pod API Session Key Extraction via API Endpoint (CVSS 6.9, mersive Solstice Pod API)
- [CVE-2025-66572](https://cve.now/CVE-2025-66572.md): Loaded Commerce 6.6 Client-Side Template Injection (CSTI) (CVSS 6.9, loadedcommerce Loaded Commerce)
- [CVE-2025-66571](https://cve.now/CVE-2025-66571.md): UNA CMS 9.0.0-RC1 - 14.0.0-RC4 PHP Object Injection (CVSS 9.3, UNA CMS)
- [CVE-2025-66555](https://cve.now/CVE-2025-66555.md): AirKeyboard iOS App 1.0.5 - Remote Input Injection (CVSS 8.8, airkeyboardapp AirKeyboard iOS App)
- [CVE-2024-58278](https://cve.now/CVE-2024-58278.md): IndigoSTAR Software - perl2exe \<= V30.10C - Arbitrary Code Execution (CVSS 8.5, IndigoSTAR Software perl2exe)
- [CVE-2024-58277](https://cve.now/CVE-2024-58277.md): R Radio Network FM Transmitter 1.07 System Settings Disclosure (CVSS 8.7, R Radio Network Radio Network FM Transmitter)
- [CVE-2024-58276](https://cve.now/CVE-2024-58276.md): Obi08-Enrollment System 1.0 get\_subject.php SQL Injection (CVSS 8.7, Obi08/Enrollment System)
- [CVE-2024-58275](https://cve.now/CVE-2024-58275.md): Easywall 0.3.1 - Authenticated Command Injection in /ports-save Endpoint (CVSS 8.7, jpylypiw Easywall)
- [CVE-2023-53735](https://cve.now/CVE-2023-53735.md): WEBIGniter 28.7.23 Cross-Site Scripting (XSS) in User Creation Process (CVSS 5.3, WEBIGniter)
- [CVE-2023-53734](https://cve.now/CVE-2023-53734.md): dawa-pharma-1.0 - SQL Injection via Email Parameter (CVSS 8.7, mayurik dawa-pharma)
- [CVE-2025-27935](https://cve.now/CVE-2025-27935.md): Authentication Bypass in OTP (One-time Passcode) IdP Adapter Integration Kit (CVSS 8.6, Ping Identity One-Time Passcode Integration Kit for PingFed…)
- [CVE-2025-13543](https://cve.now/CVE-2025-13543.md): PostGallery \<= 1.12.5 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8, rtowebsites PostGallery)
- [CVE-2025-12997](https://cve.now/CVE-2025-12997.md): Insecure Direct Object Reference vulnerability in Medtronic CareLink Network which allows an authenticated attacker with access to specific (CVSS 2.2, Medtronic CareLink Network)
- [CVE-2025-12996](https://cve.now/CVE-2025-12996.md): Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from error (CVSS 4.1, Medtronic CareLink Network)
- [CVE-2025-12995](https://cve.now/CVE-2025-12995.md): Medtronic CareLink Network allows an unauthenticated remote attacker to perform a brute force attack on an API endpoint that could be used t (CVSS 8.1, Medtronic CareLink Network)
- [CVE-2025-12994](https://cve.now/CVE-2025-12994.md): Medtronic CareLink Network allows an unauthenticated remote attacker to initiate a request for security questions to an API endpoint that co (CVSS 5.3, Medtronic CareLink Network)
- [CVE-2025-65958](https://cve.now/CVE-2025-65958.md): Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/web (CVSS 8.5, open-webui)
- [CVE-2025-12097](https://cve.now/CVE-2025-12097.md): Relative Path Traversal Vulnerability in NI System Web Server (CVSS 7.5, NI LabVIEW)
- [CVE-2025-65945](https://cve.now/CVE-2025-65945.md): auth0/node-jws improper HMAC signature verification vulnerability (CVSS 7.5, auth0 node-jws · jws)
- [CVE-2025-14016](https://cve.now/CVE-2025-14016.md): macrozheng mall-swarm delete improper authorization (CVSS 5.3, macrozheng mall-swarm)
- [CVE-2025-14015](https://cve.now/CVE-2025-14015.md): H3C Magic B0 aspForm EditWlanMacList buffer overflow (CVSS 8.7, H3C Magic B0)
- [CVE-2025-13488](https://cve.now/CVE-2025-13488.md): Nexus Repository 3 - Stored Cross-Site Scripting (XSS) (CVSS 5.1, Sonatype Nexus Repository)
- [CVE-2025-14013](https://cve.now/CVE-2025-14013.md): JIZHICMS Comment addcomment.html cross site scripting (CVSS 4.8, JIZHICMS)
- [CVE-2025-9127](https://cve.now/CVE-2025-9127.md): PX Enterprise Improper Sanitization Vulnerability (CVSS 8.4, Pure Storage PX Enterprise)
- [CVE-2025-14012](https://cve.now/CVE-2025-14012.md): JIZHICMS Batch Delete Comments deleteAll.html delete sql injection (CVSS 5.1, JIZHICMS)
- [CVE-2025-14011](https://cve.now/CVE-2025-14011.md): JIZHICMS Add Display Name Field addcomment.html commentlist sql injection (CVSS 5.1, JIZHICMS)
- [CVE-2025-66287](https://cve.now/CVE-2025-66287.md): Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash (CVSS 8.8, The WebKitGTK Team WebKitGTK · Red Hat Enterprise Linux… +1)
- [CVE-2025-66516](https://cve.now/CVE-2025-66516.md): Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected (CVSS 8.4, Apache Software Foundation Apache Tika core · Apache Sof… +4)
- [CVE-2025-40266](https://cve.now/CVE-2025-40266.md): KVM: arm64: Check the untrusted offset in FF-A memory share (CVSS 8.2, Linux)
- [CVE-2025-40265](https://cve.now/CVE-2025-40265.md): vfat: fix missing sb\_min\_blocksize() return value checks (no CVSS, Linux)
- [CVE-2025-40264](https://cve.now/CVE-2025-40264.md): be2net: pass wrb\_params in case of OS2BMC (no CVSS, Linux)
- [CVE-2025-40263](https://cve.now/CVE-2025-40263.md): Input: cros\_ec\_keyb - fix an invalid memory access (no CVSS, Linux)
- [CVE-2025-40262](https://cve.now/CVE-2025-40262.md): Input: imx\_sc\_key - fix memory corruption on unload (CVSS 7.8, Linux)
- [CVE-2025-40261](https://cve.now/CVE-2025-40261.md): nvme: nvme-fc: Ensure -\>ioerr\_work is cancelled in nvme\_fc\_delete\_ctrl() (CVSS 9.8, Linux)
- [CVE-2025-40260](https://cve.now/CVE-2025-40260.md): sched\_ext: Fix scx\_enable() crash on helper kthread creation failure (no CVSS, Linux)
- [CVE-2025-40259](https://cve.now/CVE-2025-40259.md): scsi: sg: Do not sleep in atomic context (no CVSS, Linux)
- [CVE-2025-40258](https://cve.now/CVE-2025-40258.md): mptcp: fix race condition in mptcp\_schedule\_work() (CVSS 9.8, Linux)
- [CVE-2025-40257](https://cve.now/CVE-2025-40257.md): mptcp: fix a race in mptcp\_pm\_del\_add\_timer() (CVSS 9.8, Linux)
- [CVE-2025-40256](https://cve.now/CVE-2025-40256.md): xfrm: also call xfrm\_state\_delete\_tunnel at destroy time for states that were never added (no CVSS, Linux)
- [CVE-2025-40255](https://cve.now/CVE-2025-40255.md): net: core: prevent NULL deref in generic\_hwtstamp\_ioctl\_lower() (no CVSS, Linux)
- [CVE-2025-40254](https://cve.now/CVE-2025-40254.md): net: openvswitch: remove never-working support for setting nsh fields (no CVSS, Linux)
- [CVE-2025-40253](https://cve.now/CVE-2025-40253.md): s390/ctcm: Fix double-kfree (CVSS 8.8, Linux)
- [CVE-2025-40252](https://cve.now/CVE-2025-40252.md): net: qlogic/qede: fix potential out-of-bounds read in qede\_tpa\_cont() and qede\_tpa\_end() (CVSS 9.8, Linux)
- [CVE-2025-40251](https://cve.now/CVE-2025-40251.md): devlink: rate: Unset parent pointer in devl\_rate\_nodes\_destroy (CVSS 7.8, Linux)
- [CVE-2025-40250](https://cve.now/CVE-2025-40250.md): net/mlx5: Clean up only new IRQ glue on request\_irq() failure (CVSS 7.8, Linux)
- [CVE-2025-40249](https://cve.now/CVE-2025-40249.md): gpio: cdev: make sure the cdev fd is still active before emitting events (CVSS 7.8, Linux)
- [CVE-2025-40248](https://cve.now/CVE-2025-40248.md): vsock: Ignore signal/timeout on connect() if already established (CVSS 7.8, Linux)
- [CVE-2025-40247](https://cve.now/CVE-2025-40247.md): drm/msm: Fix pgtable prealloc error path (no CVSS, Linux)
- [CVE-2025-40246](https://cve.now/CVE-2025-40246.md): xfs: fix out of bounds memory read error in symlink repair (no CVSS, Linux)
- [CVE-2025-40245](https://cve.now/CVE-2025-40245.md): nios2: ensure that memblock.current\_limit is set when setting pfn limits (CVSS 7.8, Linux)
- [CVE-2025-40244](https://cve.now/CVE-2025-40244.md): hfsplus: fix KMSAN uninit-value issue in \_\_hfsplus\_ext\_cache\_extent() (CVSS 7.8, Linux)
- [CVE-2025-40243](https://cve.now/CVE-2025-40243.md): hfs: fix KMSAN uninit-value issue in hfs\_find\_set\_zero\_bits() (CVSS 7.8, Linux)
- [CVE-2025-40242](https://cve.now/CVE-2025-40242.md): gfs2: Fix unlikely race in gdlm\_put\_lock (CVSS 7.0, Linux)
- [CVE-2025-40241](https://cve.now/CVE-2025-40241.md): erofs: fix crafted invalid cases for encoded extents (CVSS 7.8, Linux)
- [CVE-2025-40240](https://cve.now/CVE-2025-40240.md): sctp: avoid NULL dereference when chunk data buffer is missing (CVSS 7.5, Linux)
- [CVE-2025-40239](https://cve.now/CVE-2025-40239.md): net: phy: micrel: always set shared-\>phydev for LAN8814 (no CVSS, Linux)
- [CVE-2025-40238](https://cve.now/CVE-2025-40238.md): net/mlx5: Fix IPsec cleanup over MPV device (no CVSS, Linux)
- [CVE-2025-40237](https://cve.now/CVE-2025-40237.md): fs/notify: call exportfs\_encode\_fid with s\_umount (no CVSS, Linux)
- [CVE-2025-40236](https://cve.now/CVE-2025-40236.md): virtio-net: zero unused hash fields (no CVSS, Linux)
- [CVE-2025-40235](https://cve.now/CVE-2025-40235.md): btrfs: directly free partially initialized fs\_info in btrfs\_check\_leaked\_roots() (no CVSS, Linux)
- [CVE-2025-40234](https://cve.now/CVE-2025-40234.md): platform/x86: alienware-wmi-wmax: Fix NULL pointer dereference in sleep handlers (no CVSS, Linux)
- [CVE-2025-40233](https://cve.now/CVE-2025-40233.md): ocfs2: clear extent cache after moving/defragmenting extents (CVSS 7.8, Linux)
- [CVE-2025-40232](https://cve.now/CVE-2025-40232.md): rv: Fully convert enabled\_monitors to use list\_head as iterator (no CVSS, Linux)
- [CVE-2025-40231](https://cve.now/CVE-2025-40231.md): vsock: fix lock inversion in vsock\_assign\_transport() (no CVSS, Linux)
- [CVE-2025-40230](https://cve.now/CVE-2025-40230.md): mm: prevent poison consumption when splitting THP (no CVSS, Linux)
- [CVE-2025-40229](https://cve.now/CVE-2025-40229.md): mm/damon/core: fix potential memory leak by cleaning ops\_filter in damon\_destroy\_scheme (no CVSS, Linux)
- [CVE-2025-40228](https://cve.now/CVE-2025-40228.md): mm/damon/sysfs: catch commit test ctx alloc failure (no CVSS, Linux)
- [CVE-2025-40227](https://cve.now/CVE-2025-40227.md): mm/damon/sysfs: dealloc commit test ctx always (no CVSS, Linux)
- [CVE-2025-40226](https://cve.now/CVE-2025-40226.md): firmware: arm\_scmi: Account for failed debug initialization (no CVSS, Linux)
- [CVE-2025-40225](https://cve.now/CVE-2025-40225.md): drm/panthor: Fix kernel panic on partial unmap of a GPU VA region (no CVSS, Linux)
- [CVE-2025-40224](https://cve.now/CVE-2025-40224.md): hwmon: (cgbc-hwmon) Add missing NULL check after devm\_kzalloc() (no CVSS, Linux)
- [CVE-2025-40223](https://cve.now/CVE-2025-40223.md): most: usb: Fix use-after-free in hdm\_disconnect (no CVSS, Linux)
- [CVE-2025-40222](https://cve.now/CVE-2025-40222.md): tty: serial: sh-sci: fix RSCI FIFO overrun handling (no CVSS, Linux)
- [CVE-2025-8074](https://cve.now/CVE-2025-8074.md): Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary (CVSS 5.6, Synology BeeDrive for desktop)
- [CVE-2025-54160](https://cve.now/CVE-2025-54160.md): Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology BeeDrive for desktop be (CVSS 7.8, Synology BeeDrive for desktop)
- [CVE-2025-54159](https://cve.now/CVE-2025-54159.md): Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attackers to delete arbitr (CVSS 7.5, Synology BeeDrive for desktop)
- [CVE-2025-54158](https://cve.now/CVE-2025-54158.md): Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local user (CVSS 7.8, Synology BeeDrive for desktop)
- [CVE-2025-2848](https://cve.now/CVE-2025-2848.md): A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings, and disable some non (CVSS 6.3, Synology Mail Server)
- [CVE-2025-14008](https://cve.now/CVE-2025-14008.md): dayrui XunRuiCMS Project Domain Change Test admin79f2ec220c7e.php server-side request forgery (CVSS 5.1, dayrui XunRuiCMS)
- [CVE-2025-29846](https://cve.now/CVE-2025-29846.md): A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages. (CVSS 7.2, Synology Router Manager)
- [CVE-2025-29845](https://cve.now/CVE-2025-29845.md): A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files. (CVSS 4.3, Synology Router Manager)
- [CVE-2025-29844](https://cve.now/CVE-2025-29844.md): A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information. (CVSS 4.3, Synology Router Manager)
- [CVE-2025-29843](https://cve.now/CVE-2025-29843.md): A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files. (CVSS 5.4, Synology Router Manager)
- [CVE-2025-40221](https://cve.now/CVE-2025-40221.md): media: pci: mg4b: fix uninitialized iio scan data (no CVSS, Linux)
- [CVE-2025-40220](https://cve.now/CVE-2025-40220.md): fuse: fix livelock in synchronous file put from fuseblk workers (no CVSS, Linux)
- [CVE-2025-40219](https://cve.now/CVE-2025-40219.md): PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (no CVSS, Linux)
- [CVE-2025-40218](https://cve.now/CVE-2025-40218.md): mm/damon/vaddr: do not repeat pte\_offset\_map\_lock() until success (no CVSS, Linux)
- [CVE-2025-40217](https://cve.now/CVE-2025-40217.md): pidfs: validate extensible ioctls (no CVSS, Linux)
- [CVE-2025-14007](https://cve.now/CVE-2025-14007.md): dayrui XunRuiCMS Domain Name Binding admin79f2ec220c7e.php cross site scripting (CVSS 2.0, dayrui XunRuiCMS)
- [CVE-2025-14006](https://cve.now/CVE-2025-14006.md): dayrui XunRuiCMS Add Data Validation admind45f74adbd95.php cross site scripting (CVSS 5.1, dayrui XunRuiCMS)
- [CVE-2024-5401](https://cve.now/CVE-2024-5401.md): Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manager (DSM) before 7.1.1- (CVSS 4.3, Synology DiskStation Manager · Synology Unified Controller)
- [CVE-2024-45539](https://cve.now/CVE-2024-45539.md): Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology (CVSS 7.5, Synology DiskStation Manager · Synology Unified Controller)
- [CVE-2024-45538](https://cve.now/CVE-2024-45538.md): Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-728 (CVSS 9.6, Synology DiskStation Manager · Synology Unified Controller)
- [CVE-2025-40216](https://cve.now/CVE-2025-40216.md): io\_uring/rsrc: don't rely on user vaddr alignment (CVSS 7.8, Linux)
- [CVE-2025-14005](https://cve.now/CVE-2025-14005.md): dayrui XunRuiCMS Add Display Name Field admind45f74adbd95.php cross site scripting (CVSS 4.8, dayrui XunRuiCMS)
- [CVE-2025-14004](https://cve.now/CVE-2025-14004.md): dayrui XunRuiCMS Email Setting admind45f74adbd95.php server-side request forgery (CVSS 5.1, dayrui XunRuiCMS)
- [CVE-2025-40215](https://cve.now/CVE-2025-40215.md): xfrm: delete x-\>tunnel as we delete x (CVSS 7.8, Linux)
- [CVE-2025-40214](https://cve.now/CVE-2025-40214.md): af\_unix: Initialise scc\_index in unix\_add\_edge(). (CVSS 7.8, Linux)
- [CVE-2025-11222](https://cve.now/CVE-2025-11222.md): Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via s (CVSS 6.1, LINE Central Dogma · com.linecorp.centraldogma:centraldogma…)
- [CVE-2025-41080](https://cve.now/CVE-2025-41080.md): Multiple vulnerabilities in Seafile (CVSS 5.1, Seafile)
- [CVE-2025-41079](https://cve.now/CVE-2025-41079.md): Multiple vulnerabilities in Seafile (CVSS 5.1, Seafile)
- [CVE-2025-14010](https://cve.now/CVE-2025-14010.md): Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output (CVSS 5.5, ansible-collections Ansible Community General Collection… +2)
- [CVE-2025-12826](https://cve.now/CVE-2025-12826.md): Custom Post Type UI \<= 1.18.0 - Missing Authorization to Unauthenticated (Previously Administrator+) Custom Post Type Modification (CVSS 4.8, webdevstudios Custom Post Type UI)
- [CVE-2025-12782](https://cve.now/CVE-2025-12782.md): Beaver Builder – WordPress Page Builder \<= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Builder Status Tampering (CVSS 4.3, beaverbuilder Beaver Builder Page Builder – Drag and Drop W…)
- [CVE-2025-13513](https://cve.now/CVE-2025-13513.md): Clik stats \<= 0.8 - Reflected Cross-Site Scripting via $\_SERVER\['PHP\_SELF'\] (CVSS 6.1, codejunkie Clik stats)
- [CVE-2025-11727](https://cve.now/CVE-2025-11727.md): Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration - Powered by Codisto \<= 1.3.65 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart…)
- [CVE-2025-11379](https://cve.now/CVE-2025-11379.md): WebP Express \<= 0.25.9 - Unauthenticated Information Exposure (CVSS 5.3, roselldk WebP Express)
- [CVE-2025-29268](https://cve.now/CVE-2025-29268.md): ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library. (CVSS 9.8)
- [CVE-2025-29269](https://cve.now/CVE-2025-29269.md): ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoin (CVSS 9.8)
- [CVE-2025-53963](https://cve.now/CVE-2025-53963.md): An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. (CVSS 9.8)
- [CVE-2025-54303](https://cve.now/CVE-2025-54303.md): The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API. (CVSS 9.8)
- [CVE-2025-54304](https://cve.now/CVE-2025-54304.md): An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. (CVSS 9.8)
- [CVE-2025-54305](https://cve.now/CVE-2025-54305.md): An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. (CVSS 7.8)
- [CVE-2025-54306](https://cve.now/CVE-2025-54306.md): An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. (CVSS 7.2)
- [CVE-2025-54307](https://cve.now/CVE-2025-54307.md): An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. (CVSS 8.8)
- [CVE-2025-55948](https://cve.now/CVE-2025-55948.md): This vulnerability fundamentally arises from yzcheng90 X-SpringBoot 6.0's implementation of role-based access control (RBAC) through dual de (CVSS 7.3)
- [CVE-2025-56427](https://cve.now/CVE-2025-56427.md): Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the \_download\_file\_or\_ (CVSS 7.5, composio)
- [CVE-2025-57210](https://cve.now/CVE-2025-57210.md): Incorrect access control in the component ApiPayController.java of platform v1.0.0 allows attackers to access sensitive information via unsp (CVSS 7.5)
- [CVE-2025-57212](https://cve.now/CVE-2025-57212.md): Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive information via a cra (CVSS 7.5)
- [CVE-2025-57213](https://cve.now/CVE-2025-57213.md): Incorrect access control in the component orderService.queryObject of platform v1.0.0 allows attackers to access sensitive information via a (CVSS 7.5)
- [CVE-2025-59788](https://cve.now/CVE-2025-59788.md): Cross-site scripting (XSS) vulnerability in a reachable files\_pdfviewer example directory in Nextcloud with versions before 22.2.10.33, 23.0 (CVSS 6.4, Nextcloud)
- [CVE-2025-61148](https://cve.now/CVE-2025-61148.md): An Insecure Direct Object Reference (IDOR) vulnerability in the EduplusCampus 3.0.1 Student Payment API allows authenticated users to access (CVSS 6.5)
- [CVE-2025-63361](https://cve.now/CVE-2025-63361.md): Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discov (CVSS 5.7)
- [CVE-2025-63362](https://cve.now/CVE-2025-63362.md): Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows att (CVSS 9.8)
- [CVE-2025-63363](https://cve.now/CVE-2025-63363.md): A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: (CVSS 7.5)
- [CVE-2025-63364](https://cve.now/CVE-2025-63364.md): Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discov (CVSS 7.5)
- [CVE-2025-63499](https://cve.now/CVE-2025-63499.md): Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter. (CVSS 6.1)
- [CVE-2025-63681](https://cve.now/CVE-2025-63681.md): open-webui v0.6.33 is vulnerable to Incorrect Access Control. (CVSS 4.3, open-webui)
- [CVE-2025-63896](https://cve.now/CVE-2025-63896.md): An issue in the Bluetooth Human Interface Device (HID) of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to inject (CVSS 7.6)
- [CVE-2025-65346](https://cve.now/CVE-2025-65346.md): alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. (CVSS 9.1, alexusmai/laravel-file-manager)
- [CVE-2025-65516](https://cve.now/CVE-2025-65516.md): A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. (CVSS 6.1)
- [CVE-2025-65637](https://cve.now/CVE-2025-65637.md): A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64 (CVSS 7.5, github.com/sirupsen/logrus)
- [CVE-2025-65806](https://cve.now/CVE-2025-65806.md): The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive files. (CVSS 4.3)
- [CVE-2025-65883](https://cve.now/CVE-2025-65883.md): A vulnerability has been identified in Genexis Platinum P4410 router (Firmware P4410-V2–1.41) that allows a local network attacker to achiev (CVSS 8.4)
- [CVE-2025-65899](https://cve.now/CVE-2025-65899.md): Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism. (CVSS 5.3)
- [CVE-2025-65900](https://cve.now/CVE-2025-65900.md): Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-api/auth/users API endpoint. (CVSS 6.5)
- [CVE-2025-66373](https://cve.now/CVE-2025-66373.md): Akamai Ghost on Akamai CDN edge servers before 2025-11-17 has a chunked request body processing error that can result in HTTP request smuggl (CVSS 4.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-12-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.