CVEs published December 5, 2025
145 CVEs were published on December 5, 2025: 7 critical, 38 high. 2 are now in CISA KEV.
- Published
- 145
- Critical
- 7
- High
- 38
- Medium
- 88
- Low
- 12
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 59
Most affected products
- nextcloud security-advisories
- 19
- Advantech Co. WISE-DeviceOn Server
- 11
- Apache Software Foundation Apache HTTP Server
- 5
- Flexsense DiskBoss
- 4
- Edimax BR-6478AC
- 3
- youlaitech youlai-mall
- 3
- ZSPACE Q2C NAS
- 3
- ContentStudio
- 2
- dripadmin CRM Memberships
- 2
- KDEConnect
- 2
Critical 7
- CVE-2025-34291Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCELangflow
- CVE-2025-66570cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)yhirose cpp-httplib
- CVE-2025-34256Advantech WISE-DeviceOn Server < 5.4 Hard-coded JWT Key Authentication BypassAdvantech Co. WISE-DeviceOn Server
- CVE-2020-36877ReQuest Serious Play F3 Media Server <= 7.0.3 code executionReQuest Serious Play Pro · ReQuest Serious Play
- CVE-2025-12374Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification <= 2.0.44 - Authentication Bypass to Account TakeoverUser Verification by PickPlugins
- CVE-2025-13313CRM Memberships <= 2.6 - Missing Authorization to Privilege Escalation via Unauthenticated Password Reset in 'ntzcrm_changepassword' AJAX Endpointdripadmin CRM Memberships
- CVE-2025-64054A reflected Cross Site Scripting (XSS) vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potenti
High 38
- CVE-2025-14108ZSPACE Q2C NAS HTTP POST Request open zfilev2_api.OpenSafe command injectionZSPACE Q2C NAS
- CVE-2025-14107ZSPACE Q2C NAS HTTP POST Request status zfilev2_api.SafeStatus command injectionZSPACE Q2C NAS
- CVE-2025-14106ZSPACE Q2C NAS HTTP POST Request close zfilev2_api.CloseSafe command injectionZSPACE Q2C NAS
- CVE-2025-13426Improper Sandboxing in Google Apigee's JavaCallout Policy Allows for Remote Code ExecutionGoogle Cloud Apigee hybrid Javacallout policy
- CVE-2025-46603Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction of Excessive Authentication Attempts vulneDell CloudBoost Virtual Appliance
- CVE-2025-66624BACnet-stack MS/TP reply matcher OOB readbacnet-stack
- CVE-2025-66623Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operandsstrimzi-kafka-operator · io.strimzi:strimzi
- CVE-2025-66566yawkat LZ4 Java has a possible information leak in Java safe decompressoryawkat lz4-java · at.yawk.lz4:lz4-java +3
- CVE-2025-66562TUUI vulnerable to Remote Code Execution (RCE) via XSS in Markdown ECharts RenderingAI-QL tuui
- CVE-2020-36882Flexsense DiskBoss Application Crash Denial of ServiceFlexsense DiskBoss
- CVE-2020-36881Flexsense DiskBoss 'Add Input Directory' Buffer OverflowFlexsense DiskBoss
- CVE-2020-36880Flexsense DiskBoss 'Reports and Data Directory' Buffer OverflowFlexsense DiskBoss
- CVE-2020-36879Flexsense DiskBoss Service Unquoted Service Path VulnerabilityFlexsense DiskBoss
- CVE-2020-36878ReQuest Serious Play F3 Media Player <= 3.0.0 Directory Traversal File DisclosureReQuest Serious Play Media Player
- CVE-2020-36876ReQuest Serious Play F3 Media Server <= 7.0.3 Debug Log Disclosure2020ReQuest Serious Play Pro · ReQuest Serious Play
- CVE-2024-9183Time-of-check Time-of-use (TOCTOU) Race Condition in GitLabGitLab
- CVE-2025-65036XWiki Remote Macros vulnerable to remote code execution using the confluence details summary macroxwikisas xwiki-pro-macros
- CVE-2025-66471urllib3 Streaming API improperly handles highly compressed dataurllib3
- CVE-2025-66418urllib3 allows an unbounded number of links in the decompression chainurllib3
- CVE-2025-58098Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...Apache Software Foundation Apache HTTP Server
- CVE-2025-13654CVE-2025-13654Duc
- CVE-2025-59775Apache HTTP Server: NTLM Leakage on Windows through UNC SSRFApache Software Foundation Apache HTTP Server
- CVE-2025-55753Apache HTTP Server: mod_md (ACME), unintended retry intervalsApache Software Foundation Apache HTTP Server
- CVE-2025-13614Cool Tag Cloud <= 2.29 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpkube Cool Tag Cloud
- CVE-2025-12879User Generator and Importer <= 1.2.2 - Cross-Site Request Forgery to Privilege Escalation via Arbitrary Administrator Account Creationvinoth06 User Generator and Importer
- CVE-2025-12851My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controllerwphocus My auctions allegro
- CVE-2025-12850My auctions allegro <= 3.6.32 - Unauthenticated SQL Injection via auction_idwphocus My auctions allegro
- CVE-2025-12154Auto Thumbnailer <= 1.0 - Authenticated (Contributor+) Arbitrary File Uploadmoderntribe Auto Thumbnailer
- CVE-2025-12153Featured Image via URL <= 0.1 - Authenticated (Contributor+) Arbitrary FIle Uploadtsaiid Featured Image via URL
- CVE-2025-12181ContentStudio <= 1.3.7 - Authenticated (Author+) Arbitrary File UploadContentStudio
- CVE-2025-13066Demo Importer Plus <= 2.0.6 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypasskraftplugins Demo Importer Plus
- CVE-2025-64053A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentially execute arbitrar
- CVE-2025-64057Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrar
- CVE-2025-65730Authentication Bypass via Hardcoded Credentials GoAway up to v0.62.18, fixed in 0.62.19, uses a hardcoded secret for signing JWT tokens used
- CVE-2025-65878The warehouse management system version 1.2 contains an arbitrary file read vulnerability.
- CVE-2025-65879Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability.
- CVE-2025-65897zdh_web is a data collection, processing, monitoring, scheduling, and management platform.
- CVE-2025-66644Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.Array Networks ArrayOS AG
Medium, low and unrated 100
- CVE-2025-66629HedgeDoc is missing state parameter in OAuth2 flows could lead to CSRFhedgedoc
- CVE-2025-14116xerrors Yuxi-Know embed.py OtherEmbedding.aencode server-side request forgeryxerrors Yuxi-Know
- CVE-2025-14111Rarlab RAR App com.rarlab.rar path traversalRarlab RAR App
- CVE-2025-14105TOZED ZLT M30S/ZLT M30S PRO Web proc_post denial of serviceTOZED ZLT M30S
- CVE-2025-8148CVE-2025-8148 Improper Access Control in SFTP service of GoAnywhere MFTFortra GoAnywhere MFT
- CVE-2025-66581Frappe LMS is Missing Server-Side Authorization in Business Logicfrappe lms
- CVE-2025-66577cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trustyhirose cpp-httplib
- CVE-2025-66558Nextcloud Twofactor WebAuthn app was updated based on public keynextcloud security-advisories
- CVE-2025-66556Nextcloud talk allows participants to blindly delete poll drafts of other users by IDnextcloud security-advisories
- CVE-2025-66554Nextcloud Contacts vulnerable to Stored XSS in contacts app via organisation and title fieldnextcloud security-advisories
- CVE-2025-66549Nextcloud Desktop discloses information when attempting to lock a file inside a end-to-end encrypted directorynextcloud security-advisories
- CVE-2025-66545Nextcloud Groupfolders users with read-only permissions for team folder can restore deleted files from trash binnextcloud security-advisories
- CVE-2025-66515Nextcloud Approval app allows users to request approval for other users filenextcloud security-advisories
- CVE-2025-66514Nextcloud Mail stored HTML injection in subject textnextcloud security-advisories
- CVE-2025-66557Nextcloud Deck app allowed user with "Can share" permission to modify permissions of other non-ownersnextcloud security-advisories
- CVE-2025-66548Nextcloud Deck app allows to spoof file extensions by using RTLO charactersnextcloud security-advisories
- CVE-2025-34265Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via rule-enginesAdvantech Co. WISE-DeviceOn Server
- CVE-2025-66553Nextcloud Tables app allowed users to view columns metadata information of any tablenextcloud security-advisories
- CVE-2025-34263Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/dashboards/menusAdvantech Co. WISE-DeviceOn Server
- CVE-2025-34266Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/addins/menusAdvantech Co. WISE-DeviceOn Server
- CVE-2025-34264Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via dog/{agentId}Advantech Co. WISE-DeviceOn Server
- CVE-2025-34262Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devices/name/{agent_id}Advantech Co. WISE-DeviceOn Server
- CVE-2025-34258Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/planAdvantech Co. WISE-DeviceOn Server
- CVE-2025-34259Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/buildingAdvantech Co. WISE-DeviceOn Server
- CVE-2025-34261Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicegroups/Advantech Co. WISE-DeviceOn Server
- CVE-2025-34260Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/scheduleAdvantech Co. WISE-DeviceOn Server
- CVE-2025-34257Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/definedAdvantech Co. WISE-DeviceOn Server
- CVE-2025-66551Nextcloud Tables is missing an ownership check which allows moving columns into tables of other usersnextcloud security-advisories
- CVE-2025-66513Nextcloud Tables app share information not limited to relevant usersnextcloud security-advisories
- CVE-2025-14094Edimax BR-6478AC V3 formSysCmd sub_44CCE4 os command injectionEdimax BR-6478AC
- CVE-2025-66550Nextcloud Calendar attachments of local files are offered to downloadednextcloud security-advisories
- CVE-2025-66546Nextcloud Calendar app allowed booking appointments without the generated tokennextcloud security-advisories
- CVE-2025-66511Nextcloud Calendar app used predictable proposal participant tokensnextcloud security-advisories
- CVE-2025-66552Nextcloud Server admin_audit does not log all actions on files in groupfoldersnextcloud security-advisories
- CVE-2025-66547Nextcloud Server users can modify tags on files that do not belong to themnextcloud security-advisories
- CVE-2025-14093Edimax BR-6478AC V3 formTracerouteDiagnosticRun sub_416990 os command injectionEdimax BR-6478AC
- CVE-2025-66512Nextcloud Server vulnerable to XSS in SVG images when opened outside of Nextcloudnextcloud security-advisories
- CVE-2025-14104Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernamesutil-linux · Red Hat Enterprise Linux +6
- CVE-2025-66510Nextcloud Server Contacts Search allowed users to retrieve contact information of other users beyond their contact listnextcloud security-advisories
- CVE-2025-14092Edimax BR-6478AC V3 formDebugDiagnosticRun sub_416898 os command injectionEdimax BR-6478AC
- CVE-2025-14091TrippWasTaken PHP-Guitar-Shop Product Details product.php sql injectionTrippWasTaken PHP-Guitar-Shop
- CVE-2025-14090AMTT Hotel Broadband Operation System cardmake_down.php sql injectionAMTT Hotel Broadband Operation System
- CVE-2025-14089Himool ERP AdminActionViewSet update_account improper authorizationHimool ERP
- CVE-2025-14088ketr JEPaaS load improper authorizationketr JEPaaS
- CVE-2025-14086youlaitech youlai-mall openid access controlyoulaitech youlai-mall
- CVE-2025-14085youlaitech youlai-mall orders improper control of dynamically-identified variablesyoulaitech youlai-mall
- CVE-2025-6966Null-pointer dereference in python-apt TagSection.keys()Canonical python-apt
- CVE-2025-66200Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfoApache Software Foundation Apache HTTP Server
- CVE-2025-13620Wp Social Login and Register Social Counter <= 3.1.3 - Missing Authorization in Cache REST Endpoints to Social Counter Tamperingroxnor Wp Social Login and Register Social Counter
- CVE-2025-65082Apache HTTP Server: CGI environment variable overrideApache Software Foundation Apache HTTP Server
- CVE-2025-13682Trail Manager <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scriptingphegman Trail Manager
- CVE-2025-13678Thai Lottery Widget <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributessiamlottery Thai Lottery Widget
- CVE-2025-12876Projectopia – WordPress Project Management <= 5.1.19 - Missing Authorization to Unauthenticated Arbitrary Attachment DeletionProjectopia – Project Management Tool
- CVE-2025-13739CryptX <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scriptingd3395 CryptX
- CVE-2025-12130WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors <= 2.6.4 - Cross-Site Request Forgery to Vendor Product Deletionwcvendors WC Vendors – WooCommerce Multivendor, WooCommerce…
- CVE-2025-13684ARK Related Posts <= 2.19 - Cross-Site Request Forgery to Settings Updatealexkar ARK Related Posts
- CVE-2025-13515Nouri.sh Newsletter <= 1.0.1.3 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']danrajkumar Nouri.sh Newsletter
- CVE-2025-12093Voidek Employee Portal <= 1.0.7 - Missing AuthorizationVoidek Employee Portal
- CVE-2025-12355Payaza <= 0.3.8 - Missing Authorization to Unauthenticated Order Status Updatebigmaster Payaza
- CVE-2025-12354Live CSS Preview <= 2.1.4 - Missing Authorization to Authenticated (Subscriber+) Settings Updatedojodigital Live CSS Preview
- CVE-2025-12373Torod – The smart shipping and delivery portal for e-shops and retailers <= 1.9 - Cross-Site Request Forgery To Plugin's Settings ModificationTorod – The smart shipping and delivery portal for e-shops…
- CVE-2025-12186Weekly Planner <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scriptingmichael_j_reid Weekly Planner
- CVE-2025-13528Feedback Modal for Website <= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Feedback Data Exfiltration via 'export_data' Parameternedwp Feedback Modal for Website
- CVE-2025-13860Easy Jump Links Menus <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeswebradykal Easy Jump Links Menus
- CVE-2025-12190Image Optimizer by wps.sk <= 1.2.0 - Cross-Site Request Forgery to Bulk Image Optimizationduddi Image Optimizer by wps.sk
- CVE-2025-12191PDF Catalog for WooCommerce <= 1.1.18 - Authenticated (Subscriber+) Stored Cross-Site Scriptingovologics PDF Catalog for WooCommerce
- CVE-2025-12189Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents <= 7.11.1374 - Cross-Site Request Forgery to Arbitrary File Uploadbreadbutter Bread & Butter: AI-Powered Lead Intelligence
- CVE-2025-12128Hide Categories Or Products On Shop Page <= 1.0.7 - Cross-Site Request Forgery to Settings Updatekaushikankrani Hide Categories Or Products On Shop Page
- CVE-2025-12133EPROLO Dropshipping <= 2.3.1 - Missing Authorization to Authenticated (Subscriber+) Tracking Data Modificationpaulepro2019 EPROLO-Dropshipping
- CVE-2025-12370Takeads <= 1.0.13 - Missing Authorization to Plugin Settings DeletionTakeads
- CVE-2025-13623Twitscription <= 0.1.1 - Reflected Cross-Site Scripting via admin.php PATH_INFOnatambu Twitscription
- CVE-2025-13622Jabbernotification <= 0.99-RC2 - Reflected Cross-Site Scripting via admin.php PATH_INFOmissi Jabbernotification
- CVE-2025-10055Time Sheets <= 2.1.3 - Cross-Site Request Forgerymrdenny Time Sheets
- CVE-2025-13625WP-SOS-Donate Donation Sidebar Plugin <= 0.9.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']switch2mac WP-SOS-Donate Donation Sidebar Plugin
- CVE-2025-13360Quantic Social Image Hover <= 1.0.8 - Cross-Site Request Forgery to Settings Updatemonkeyboz Quantic Social Image Hover
- CVE-2025-12368Sermon Manager <= 2.30.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpforchurch Sermon Manager
- CVE-2025-13621dream gallery <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'dreampluginsmain' AJAX Actionteamdream dream gallery
- CVE-2025-12165Webcake – Landing Page Builder <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Settings Updatehuyme Webcake – Landing Page Builder
- CVE-2025-12163Omnipress <= 1.6.5 - Authenticated (Author+) Stored Cross-Site Scriptingomnipressteam Omnipress
- CVE-2025-13512CoSign Single Signon <= 0.3.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']jiangxin CoSign Single Signon
- CVE-2025-12124FitVids for WordPress <= 4.0.1 - Authenticated (Admin+) Stored Cross-Site Scriptingkevindees FitVids for WordPress
- CVE-2025-13144ContentStudio <= 1.3.7 - Cross-Site Request Forgery to Settings UpdateContentStudio
- CVE-2025-13312CRM Memberships <= 2.5 - Missing Authorization to Unauthenticated 'ntzcrm_add_new_tag' AJAX Actiondripadmin CRM Memberships
- CVE-2025-13006SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Unauthenticated Information Exposurewpeka-club SurveyFunnel – Survey Plugin for WordPress
- CVE-2025-13362Norby AI <= 1.0.3 - Cross-Site Request Forgery to Settings Updatejevgenisultanov Norby AI
- CVE-2025-13494SSP Debug <= 1.0.0 - Unauthenticated Sensitive Information Exposurejimmyredline80 SSP Debug
- CVE-2025-12417SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodewpeka-club SurveyFunnel – Survey Plugin for WordPress
- CVE-2025-27389Application Installation Source Verification Flaw May Lead to Risk Detection BypassColorOS
- CVE-2025-12804Booking Calendar <= 10.14.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingcalendar Shortcodewpdevelop Booking Calendar
- CVE-2025-11759Backup, Restore and Migrate your sites with XCloner <= 4.8.2 - Cross-Site Request Forgery in Xcloner_Remote_Storage:save()watchful Backup, Restore and Migrate your sites with XCloner
- CVE-2025-62223Microsoft Edge (Chromium-based) for Mac Spoofing VulnerabilityMicrosoft Edge
- CVE-2025-14052youlaitech youlai-mall members getMemberById access controlyoulaitech youlai-mall
- CVE-2016-20023In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file wCKSource CKFinder
- CVE-2025-32898The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks.KDE Connect verification-code protocol
- CVE-2025-32899In KDE Connect before 1.33.0 on Android, a packet can be crafted that causes two paired devices to unpair.KDEConnect
- CVE-2025-32900In the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to temporarily change the displayed information KDE Connect information-exchange protocol
- CVE-2025-32901In KDE Connect before 1.33.0 on Android, malicious device IDs (sent via broadcast UDP) could cause an application crash.KDEConnect
- CVE-2025-64052An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to execute arbitrary system comman
- CVE-2025-64056File upload vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store arbitrary files on the fi
- CVE-2025-66270The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets.KDE Connect protocol