# CVEs published 2025-12-08

245 CVEs were published on December 8, 2025: 10 critical, 81 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2022-50632](https://cve.now/CVE-2022-50632.md): drivers: perf: marvell\_cn10k: Fix hotplug callback leak in tad\_pmu\_init() (no CVSS, Linux)
- [CVE-2022-50631](https://cve.now/CVE-2022-50631.md): RISC-V: kexec: Fix memory leak of fdt buffer (no CVSS, Linux)
- [CVE-2025-66469](https://cve.now/CVE-2025-66469.md): NiceGUI Reflected XSS in ui.add\_css, ui.add\_scss, and ui.add\_sass via Style Injection (CVSS 6.1, zauberzeug nicegui · nicegui)
- [CVE-2025-66204](https://cve.now/CVE-2025-66204.md): WBCE CMS allows brute-force protection bypass using X-Forwarded-For header (CVSS 6.3, WBCE\_CMS)
- [CVE-2025-66202](https://cve.now/CVE-2025-66202.md): Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765 (CVSS 6.5, withastro astro · astro)
- [CVE-2025-65964](https://cve.now/CVE-2025-65964.md): n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook (CVSS 9.4, n8n-io n8n · n8n)
- [CVE-2025-65962](https://cve.now/CVE-2025-65962.md): Tuleap has missing CSRF protections its in tracker field dependencies (CVSS 4.6, Enalean tuleap)
- [CVE-2025-64760](https://cve.now/CVE-2025-64760.md): Tuleap has missing CSRF protections in its tracker trigger management system (CVSS 4.6, Enalean tuleap)
- [CVE-2025-64499](https://cve.now/CVE-2025-64499.md): Tuleap is missing CSRF protections for its planning management API (CVSS 4.6, Enalean tuleap)
- [CVE-2025-64498](https://cve.now/CVE-2025-64498.md): Tuleap has a Cross-Site Request Forgery (CSRF) vulnerability (CVSS 4.6, Enalean tuleap)
- [CVE-2025-64497](https://cve.now/CVE-2025-64497.md): Tuleap exposes releases for all projects to File Release System project administrators (CVSS 6.5, Enalean tuleap)
- [CVE-2025-36140](https://cve.now/CVE-2025-36140.md): IBM watsonx.data Denial of Service (CVSS 6.5, IBM watsonx.data)
- [CVE-2025-62408](https://cve.now/CVE-2025-62408.md): c-ares has a Use After Free vulnerability when connection is cleaned up after error (CVSS 5.9, c-ares)
- [CVE-2025-12635](https://cve.now/CVE-2025-12635.md): IBM WebSphere Application Server and WebSphere Application Server Liberty Cross-Site Scripting (CVSS 5.4, IBM WebSphere Application Server)
- [CVE-2025-64650](https://cve.now/CVE-2025-64650.md): IBM Storage Defender - Resiliency Service Information Disclosure (CVSS 6.5, IBM Storage Defender - Resiliency Service)
- [CVE-2025-12832](https://cve.now/CVE-2025-12832.md): IBM InfoSphere Information Server Server-Side Request Forgery (CVSS 4.6, IBM InfoSphere Information Server)
- [CVE-2025-36017](https://cve.now/CVE-2025-36017.md): IBM Controller Information Disclosure (CVSS 6.5, IBM Controller)
- [CVE-2025-14276](https://cve.now/CVE-2025-14276.md): Ilevia EVE X1 Server leaf\_search.php command injection (CVSS 6.3, Ilevia EVE X1 Server)
- [CVE-2025-36102](https://cve.now/CVE-2025-36102.md): IBM Controller Validation Bypass (CVSS 2.7, IBM Controller · IBM Cognos Controller)
- [CVE-2025-33111](https://cve.now/CVE-2025-33111.md): IBM Controller Information Disclosure (CVSS 4.3, IBM Controller · IBM Cognos Controller)
- [CVE-2025-36015](https://cve.now/CVE-2025-36015.md): IBM Controller Denial of Service (CVSS 6.5, IBM Controller · IBM Cognos Controller)
- [CVE-2025-14261](https://cve.now/CVE-2025-14261.md): Lack of entropy allows registered low-privileged users of Litmus to crack valid JWT tokens and gain admin privileges (CVSS 7.1, Litmuschaos litmus)
- [CVE-2025-14259](https://cve.now/CVE-2025-14259.md): Jihai Jshop MiniProgram Mall System api.html sql injection (CVSS 5.3, Jihai Jshop MiniProgram Mall System)
- [CVE-2025-14258](https://cve.now/CVE-2025-14258.md): itsourcecode Student Management System newsubject.php sql injection (CVSS 6.9, itsourcecode Student Management System)
- [CVE-2025-48625](https://cve.now/CVE-2025-48625.md): In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race (CVSS 7.0, Google Android)
- [CVE-2025-48608](https://cve.now/CVE-2025-48608.md): In isValidMediaUri of SettingsProvider.java, there is a possible cross user media read due to a missing permission check. (CVSS 5.5, Google Android)
- [CVE-2025-48606](https://cve.now/CVE-2025-48606.md): In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation without a mechanism to (CVSS 7.8, Google Android)
- [CVE-2025-48569](https://cve.now/CVE-2025-48569.md): In multiple locations, there is a possible permanent denial of service due to resource exhaustion. (CVSS 5.5, Google Android)
- [CVE-2025-14257](https://cve.now/CVE-2025-14257.md): itsourcecode Student Management System newrecord.php sql injection (CVSS 6.9, itsourcecode Student Management System)
- [CVE-2025-48639](https://cve.now/CVE-2025-48639.md): In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack. (CVSS 7.3, Google Android)
- [CVE-2025-48638](https://cve.now/CVE-2025-48638.md): In \_\_pkvm\_load\_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. (CVSS 7.8, Google Android)
- [CVE-2025-48637](https://cve.now/CVE-2025-48637.md): In multiple functions of mem\_protect.c, there is a possible out of bounds write due to an integer overflow. (CVSS 7.8, Google Android)
- [CVE-2025-48633](https://cve.now/CVE-2025-48633.md): In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic (CVSS 5.5, KEV, Google Android)
- [CVE-2025-48632](https://cve.now/CVE-2025-48632.md): In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated (CVSS 7.8, Google Android)
- [CVE-2025-48631](https://cve.now/CVE-2025-48631.md): In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. (CVSS 6.5, Google Android)
- [CVE-2025-48629](https://cve.now/CVE-2025-48629.md): In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an (CVSS 7.8, Google Android)
- [CVE-2025-48628](https://cve.now/CVE-2025-48628.md): In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy. (CVSS 7.8, Google Android)
- [CVE-2025-48627](https://cve.now/CVE-2025-48627.md): In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the background due to a (CVSS 7.8, Google Android)
- [CVE-2025-48626](https://cve.now/CVE-2025-48626.md): In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. (CVSS 8.8, Google Android)
- [CVE-2025-48624](https://cve.now/CVE-2025-48624.md): In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. (CVSS 7.8, Google Android)
- [CVE-2025-48623](https://cve.now/CVE-2025-48623.md): In init\_pkvm\_hyp\_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. (CVSS 7.8, Google Android)
- [CVE-2025-48622](https://cve.now/CVE-2025-48622.md): In ProcessArea of dng\_misc\_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. (CVSS 5.5, Google Android)
- [CVE-2025-48621](https://cve.now/CVE-2025-48621.md): In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default. (CVSS 7.3, Google Android)
- [CVE-2025-48620](https://cve.now/CVE-2025-48620.md): In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application's component name to p (CVSS 7.8, Google Android)
- [CVE-2025-48618](https://cve.now/CVE-2025-48618.md): In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. (CVSS 6.6, Google Android)
- [CVE-2025-48615](https://cve.now/CVE-2025-48615.md): In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaustion. (CVSS 7.8, Google Android)
- [CVE-2025-48614](https://cve.now/CVE-2025-48614.md): In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due to a missing permiss (CVSS 4.3, Google Android)
- [CVE-2025-48612](https://cve.now/CVE-2025-48612.md): In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's default NFC payment setti (CVSS 7.8, Google Android)
- [CVE-2025-48610](https://cve.now/CVE-2025-48610.md): In \_\_pkvm\_guest\_relinquish\_to\_host of mem\_protect.c, there is a possible configuration data leak due to a logic error in the code. (CVSS 5.5, Google Android)
- [CVE-2025-48607](https://cve.now/CVE-2025-48607.md): In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code. (CVSS 5.5, Google Android)
- [CVE-2025-48604](https://cve.now/CVE-2025-48604.md): In multiple locations, there is a possible way to read files from another user due to a missing permission check. (CVSS 5.5, Google Android)
- [CVE-2025-48603](https://cve.now/CVE-2025-48603.md): In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion. (CVSS 5.5, Google Android)
- [CVE-2025-48601](https://cve.now/CVE-2025-48601.md): In multiple locations, there is a possible permanent denial of service due to improper input validation. (CVSS 5.5, Google Android)
- [CVE-2025-48600](https://cve.now/CVE-2025-48600.md): In multiple files, there is a possible way to reveal information across users due to a missing permission check. (CVSS 5.5, Google Android)
- [CVE-2025-48599](https://cve.now/CVE-2025-48599.md): In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due to a missing permissio (CVSS 7.8, Google Android)
- [CVE-2025-48598](https://cve.now/CVE-2025-48598.md): In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. (CVSS 6.6, Google Android)
- [CVE-2025-48597](https://cve.now/CVE-2025-48597.md): In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. (CVSS 7.8, Google Android)
- [CVE-2025-48596](https://cve.now/CVE-2025-48596.md): In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 7.8, Google Android)
- [CVE-2025-48594](https://cve.now/CVE-2025-48594.md): In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges after disassociation (CVSS 7.8, Google Android)
- [CVE-2025-48592](https://cve.now/CVE-2025-48592.md): In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. (CVSS 6.5, Google Android)
- [CVE-2025-48591](https://cve.now/CVE-2025-48591.md): In multiple locations, there is a possible way to read files from another user due to a missing permission check. (CVSS 5.5, Google Android)
- [CVE-2025-48590](https://cve.now/CVE-2025-48590.md): In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limi (CVSS 5.5, Google Android)
- [CVE-2025-48589](https://cve.now/CVE-2025-48589.md): In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due to a logic error in (CVSS 7.8, Google Android)
- [CVE-2025-48588](https://cve.now/CVE-2025-48588.md): In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code. (CVSS 7.8, Google Android)
- [CVE-2025-48586](https://cve.now/CVE-2025-48586.md): In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy. (CVSS 7.8, Google Android)
- [CVE-2025-48584](https://cve.now/CVE-2025-48584.md): In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource (CVSS 5.5, Google Android)
- [CVE-2025-48583](https://cve.now/CVE-2025-48583.md): In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the code. (CVSS 7.8, Google Android)
- [CVE-2025-48580](https://cve.now/CVE-2025-48580.md): In connectInternal of MediaBrowser.java, there is a possible way to access while in use permission while the app is in background due to a l (CVSS 7.8, Google Android)
- [CVE-2025-48576](https://cve.now/CVE-2025-48576.md): In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanent denial of service (CVSS 5.5, Google Android)
- [CVE-2025-48575](https://cve.now/CVE-2025-48575.md): In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypass. (CVSS 7.8, Google Android)
- [CVE-2025-48573](https://cve.now/CVE-2025-48573.md): In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due t (CVSS 7.8, Google Android)
- [CVE-2025-48572](https://cve.now/CVE-2025-48572.md): In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. (CVSS 7.8, KEV, Google Android)
- [CVE-2025-48566](https://cve.now/CVE-2025-48566.md): In multiple locations, there is a possible permission bypass due to a confused deputy. (CVSS 7.8, Google Android)
- [CVE-2025-48565](https://cve.now/CVE-2025-48565.md): In multiple locations, there is a possible way to bypass the cross profile intent filter due to a logic error in the code. (CVSS 7.8, Google Android)
- [CVE-2025-48564](https://cve.now/CVE-2025-48564.md): In multiple locations, there is a possible intent filter bypass due to a race condition. (CVSS 7.0, Google Android)
- [CVE-2025-48555](https://cve.now/CVE-2025-48555.md): In multiple functions of NotificationStation.java, there is a possible cross-profile information disclosure due to a confused deputy. (CVSS 7.8, Google Android)
- [CVE-2025-48536](https://cve.now/CVE-2025-48536.md): In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to modify secure settings (CVSS 7.8, Google Android)
- [CVE-2025-48525](https://cve.now/CVE-2025-48525.md): In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to (CVSS 7.8, Google Android)
- [CVE-2025-32329](https://cve.now/CVE-2025-32329.md): In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic err (CVSS 7.8, Google Android)
- [CVE-2025-32328](https://cve.now/CVE-2025-32328.md): In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic err (CVSS 7.8, Google Android)
- [CVE-2025-32319](https://cve.now/CVE-2025-32319.md): In ensureBound of RemotePrintService.java, there is a possible way for a background app to keep foreground permissions due to a permissions (CVSS 6.7, Google Android)
- [CVE-2025-22432](https://cve.now/CVE-2025-22432.md): In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input validation. (CVSS 6.7, Google Android)
- [CVE-2025-22420](https://cve.now/CVE-2025-22420.md): In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. (CVSS 7.8, Google Android)
- [CVE-2025-14256](https://cve.now/CVE-2025-14256.md): itsourcecode Student Management System newcurriculm.php sql injection (CVSS 6.9, itsourcecode Student Management System)
- [CVE-2025-14251](https://cve.now/CVE-2025-14251.md): code-projects Online Ordering System Admin Login admin sql injection (CVSS 6.9, code-projects Online Ordering System)
- [CVE-2025-14250](https://cve.now/CVE-2025-14250.md): code-projects Online Ordering System user\_contact.php sql injection (CVSS 6.9, code-projects Online Ordering System)
- [CVE-2025-14249](https://cve.now/CVE-2025-14249.md): code-projects Online Ordering System user\_school.php sql injection (CVSS 6.9, code-projects Online Ordering System)
- [CVE-2025-14248](https://cve.now/CVE-2025-14248.md): code-projects Simple Shopping Cart adminlogin.php sql injection (CVSS 6.9, code-projects Simple Shopping Cart)
- [CVE-2025-14247](https://cve.now/CVE-2025-14247.md): code-projects Simple Shopping Cart additems.php sql injection (CVSS 5.3, code-projects Simple Shopping Cart)
- [CVE-2025-14246](https://cve.now/CVE-2025-14246.md): code-projects Simple Shopping Cart settings.php sql injection (CVSS 5.3, code-projects Simple Shopping Cart)
- [CVE-2025-14245](https://cve.now/CVE-2025-14245.md): IdeaCMS Coupon.php whereRaw sql injection (CVSS 6.9, IdeaCMS)
- [CVE-2025-42620](https://cve.now/CVE-2025-42620.md): CSRF vulnerability in CIRCL Vulnerability-Lookup (CVSS 8.3, CIRCL Vulnerability-Lookup)
- [CVE-2025-42616](https://cve.now/CVE-2025-42616.md): CSRF vulnerability in CIRCL Vulnerability-Lookup (CVSS 7.0, CIRCL Vulnerability-Lookup)
- [CVE-2025-14244](https://cve.now/CVE-2025-14244.md): GreenCMS Menu Management CustomController.class.php cross site scripting (CVSS 4.8, GreenCMS)
- [CVE-2025-42615](https://cve.now/CVE-2025-42615.md): Improper Restriction of Excessive Authentication Attempts vulnerability in CIRCL Vulnerability-Lookup (CVSS 8.1, CIRCL Vulnerability-Lookup)
- [CVE-2025-14230](https://cve.now/CVE-2025-14230.md): code-projects Daily Time Recording System add\_payroll.php sql injection (CVSS 5.3, code-projects Daily Time Recording System)
- [CVE-2025-14229](https://cve.now/CVE-2025-14229.md): SourceCodester Inventory Management System SVC Report Export csv injection (CVSS 5.1, SourceCodester Inventory Management System)
- [CVE-2025-14228](https://cve.now/CVE-2025-14228.md): Yealink SIP-T21P E2 Local Directory cross site scripting (CVSS 5.1, Yealink SIP-T21P E2)
- [CVE-2025-14227](https://cve.now/CVE-2025-14227.md): Philipinho Simple-PHP-Blog edit.php sql injection (CVSS 5.3, Philipinho Simple-PHP-Blog)
- [CVE-2025-14262](https://cve.now/CVE-2025-14262.md): Jobs can be saved as workflows with wrong permissions on KNIME Business Hub (CVSS 5.3, KNIME Business Hub)
- [CVE-2025-14226](https://cve.now/CVE-2025-14226.md): itsourcecode Student Management System edit\_user.php sql injection (CVSS 6.9, itsourcecode Student Management System)
- [CVE-2025-66461](https://cve.now/CVE-2025-66461.md): FULLBACK Manager Pro provided by GS Yuasa International Ltd. (CVSS 6.7, GS Yuasa International FULLBACK Manager Pro)
- [CVE-2025-27020](https://cve.now/CVE-2025-27020.md): Improper configuration of SSH service in Infinera MTC-9 (CVSS 9.8, Infinera MTC-9)
- [CVE-2025-27019](https://cve.now/CVE-2025-27019.md): Remote shell service (RSH) in Infinera MTC-9 (CVSS 9.8, Infinera MTC-9)
- [CVE-2025-14225](https://cve.now/CVE-2025-14225.md): D-Link DCS-930L alphapd setSystemAdmin command injection (CVSS 5.3, D-Link DCS-930L)
- [CVE-2025-26489](https://cve.now/CVE-2025-26489.md): Improper input validation in Netconf service in Infinera MTC-9 (CVSS 6.5, Infinera MTC-9)
- [CVE-2025-26488](https://cve.now/CVE-2025-26488.md): Improper input validation in XML Management service in Infinera MTC-9 (CVSS 7.5, Infinera MTC-9)
- [CVE-2025-26487](https://cve.now/CVE-2025-26487.md): Server Side Request Forgery (SSRF) in the web server of Infinera MTC-9 (CVSS 8.6, Infinera MTC-9)
- [CVE-2025-12956](https://cve.now/CVE-2025-12956.md): Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x (CVSS 8.7, Dassault Systèmes ENOVIA Collaborative Industry Innovator)
- [CVE-2025-66330](https://cve.now/CVE-2025-66330.md): App lock verification bypass vulnerability in the file management app. (CVSS 4.9, Huawei HarmonyOS)
- [CVE-2025-66329](https://cve.now/CVE-2025-66329.md): Permission control vulnerability in the window management module. (CVSS 4.0, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2025-14224](https://cve.now/CVE-2025-14224.md): Yottamaster DM2/DM3/DM200 File Upload path traversal (CVSS 5.3, Yottamaster DM2 · Yottamaster DM3 +1)
- [CVE-2025-66325](https://cve.now/CVE-2025-66325.md): Permission control vulnerability in the package management module. (CVSS 6.2, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2025-58279](https://cve.now/CVE-2025-58279.md): Permission control vulnerability in the media library module. (CVSS 4.4, Huawei HarmonyOS)
- [CVE-2025-66334](https://cve.now/CVE-2025-66334.md): Denial of service (DoS) vulnerability in the office service. (CVSS 3.3, Huawei HarmonyOS)
- [CVE-2025-66333](https://cve.now/CVE-2025-66333.md): Denial of service (DoS) vulnerability in the office service. (CVSS 3.3, Huawei HarmonyOS)
- [CVE-2025-66332](https://cve.now/CVE-2025-66332.md): Denial of service (DoS) vulnerability in the office service. (CVSS 3.3, Huawei HarmonyOS)
- [CVE-2025-66331](https://cve.now/CVE-2025-66331.md): Denial of service (DoS) vulnerability in the office service. (CVSS 3.3, Huawei HarmonyOS)
- [CVE-2025-66328](https://cve.now/CVE-2025-66328.md): Multi-thread race condition vulnerability in the network management module. (CVSS 8.4, Huawei HarmonyOS)
- [CVE-2025-66327](https://cve.now/CVE-2025-66327.md): Race condition vulnerability in the network module. (CVSS 7.1, Huawei HarmonyOS)
- [CVE-2025-66326](https://cve.now/CVE-2025-66326.md): Race condition vulnerability in the audio module. (CVSS 6.7, Huawei HarmonyOS)
- [CVE-2025-66324](https://cve.now/CVE-2025-66324.md): Input verification vulnerability in the compression and decompression module. (CVSS 8.4, Huawei HarmonyOS)
- [CVE-2025-66323](https://cve.now/CVE-2025-66323.md): Vulnerability of improper criterion security check in the card module. (CVSS 5.3, Huawei HarmonyOS)
- [CVE-2025-14223](https://cve.now/CVE-2025-14223.md): code-projects Simple Leave Manager request.php sql injection (CVSS 6.9, code-projects Simple Leave Manager)
- [CVE-2025-66322](https://cve.now/CVE-2025-66322.md): Multi-thread race condition vulnerability in the camera framework module. (CVSS 5.1, Huawei HarmonyOS)
- [CVE-2025-66321](https://cve.now/CVE-2025-66321.md): Multi-thread race condition vulnerability in the camera framework module. (CVSS 5.1, Huawei HarmonyOS)
- [CVE-2025-66320](https://cve.now/CVE-2025-66320.md): Multi-thread race condition vulnerability in the camera framework module. (CVSS 5.1, Huawei HarmonyOS)
- [CVE-2025-14255](https://cve.now/CVE-2025-14255.md): Galaxy Software Services｜Vitals ESP - SQL Injection (CVSS 7.1, Galaxy Software Services Vitals ESP)
- [CVE-2025-14254](https://cve.now/CVE-2025-14254.md): Galaxy Software Services｜Vitals ESP - SQL Injection (CVSS 7.1, Galaxy Software Services Vitals ESP)
- [CVE-2025-14253](https://cve.now/CVE-2025-14253.md): Galaxy Software Services｜Vitals ESP - Arbitrary File Read (CVSS 6.9, Galaxy Software Services Vitals ESP)
- [CVE-2025-14222](https://cve.now/CVE-2025-14222.md): code-projects Employee Profile Management System print\_personnel\_report.php sql injection (CVSS 5.3, code-projects Employee Profile Management System)
- [CVE-2025-14221](https://cve.now/CVE-2025-14221.md): SourceCodester Online Banking System page cross site scripting (CVSS 5.1, SourceCodester Online Banking System)
- [CVE-2025-14220](https://cve.now/CVE-2025-14220.md): ORICO CD3510 File Upload path traversal (CVSS 5.3, ORICO CD3510)
- [CVE-2025-14219](https://cve.now/CVE-2025-14219.md): Campcodes Retro Basketball Shoes Online Store admin\_running.php unrestricted upload (CVSS 5.1, Campcodes Retro Basketball Shoes Online Store)
- [CVE-2025-14218](https://cve.now/CVE-2025-14218.md): code-projects Currency Exchange System editotheraccount.php sql injection (CVSS 6.9, code-projects Currency Exchange System)
- [CVE-2025-14217](https://cve.now/CVE-2025-14217.md): code-projects Currency Exchange System edittrns.php sql injection (CVSS 6.9, code-projects Currency Exchange System)
- [CVE-2025-14216](https://cve.now/CVE-2025-14216.md): code-projects Currency Exchange System viewserial.php sql injection (CVSS 6.9, code-projects Currency Exchange System)
- [CVE-2025-14215](https://cve.now/CVE-2025-14215.md): code-projects Currency Exchange System edit.php sql injection (CVSS 6.9, code-projects Currency Exchange System)
- [CVE-2025-14214](https://cve.now/CVE-2025-14214.md): itsourcecode Student Information System section\_edit1.php sql injection (CVSS 5.3, itsourcecode Student Information System)
- [CVE-2025-14212](https://cve.now/CVE-2025-14212.md): projectworlds Advanced Library Management System member\_search.php sql injection (CVSS 6.9, projectworlds Advanced Library Management System)
- [CVE-2025-14211](https://cve.now/CVE-2025-14211.md): projectworlds Advanced Library Management System delete\_book.php sql injection (CVSS 6.9, projectworlds Advanced Library Management System)
- [CVE-2025-14210](https://cve.now/CVE-2025-14210.md): projectworlds Advanced Library Management System delete\_member.php sql injection (CVSS 6.9, projectworlds Advanced Library Management System)
- [CVE-2025-14209](https://cve.now/CVE-2025-14209.md): Campcodes School File Management System update\_query.php sql injection (CVSS 6.9, Campcodes School File Management System)
- [CVE-2023-53769](https://cve.now/CVE-2023-53769.md): virt/coco/sev-guest: Double-buffer messages (CVSS 9.3, Linux)
- [CVE-2023-53768](https://cve.now/CVE-2023-53768.md): regmap-irq: Fix out-of-bounds access when allocating config buffers (CVSS 7.8, Linux)
- [CVE-2023-53767](https://cve.now/CVE-2023-53767.md): wifi: ath12k: fix memory leak in ath12k\_qmi\_driver\_event\_work() (no CVSS, Linux)
- [CVE-2023-53766](https://cve.now/CVE-2023-53766.md): FS: JFS: Check for read-only mounted filesystem in txBegin (no CVSS, Linux)
- [CVE-2023-53765](https://cve.now/CVE-2023-53765.md): dm cache: free background tracker's queued work in btracker\_destroy (no CVSS, Linux)
- [CVE-2023-53764](https://cve.now/CVE-2023-53764.md): wifi: ath12k: Handle lock during peer\_id find (CVSS 8.8, Linux)
- [CVE-2023-53763](https://cve.now/CVE-2023-53763.md): Revert "f2fs: fix to do sanity check on extent cache correctly" (CVSS 7.8, Linux)
- [CVE-2023-53762](https://cve.now/CVE-2023-53762.md): Bluetooth: hci\_sync: Fix UAF in hci\_disconnect\_all\_sync (CVSS 8.8, Linux)
- [CVE-2023-53761](https://cve.now/CVE-2023-53761.md): USB: usbtmc: Fix direction for 0-length ioctl control messages (no CVSS, Linux)
- [CVE-2023-53760](https://cve.now/CVE-2023-53760.md): scsi: ufs: core: mcq: Fix &hwq-\>cq\_lock deadlock issue (no CVSS, Linux)
- [CVE-2023-53759](https://cve.now/CVE-2023-53759.md): HID: hidraw: fix data race on device refcount (CVSS 7.8, Linux)
- [CVE-2023-53758](https://cve.now/CVE-2023-53758.md): spi: atmel-quadspi: Free resources even if runtime resume failed in .remove() (no CVSS, Linux)
- [CVE-2023-53757](https://cve.now/CVE-2023-53757.md): irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu\_gicp\_probe (no CVSS, Linux)
- [CVE-2023-53756](https://cve.now/CVE-2023-53756.md): KVM: VMX: Fix crash due to uninitialized current\_vmcs (no CVSS, Linux)
- [CVE-2023-53755](https://cve.now/CVE-2023-53755.md): dmaengine: ptdma: check for null desc before calling pt\_cmd\_callback (no CVSS, Linux)
- [CVE-2023-53754](https://cve.now/CVE-2023-53754.md): scsi: lpfc: Fix ioremap issues in lpfc\_sli4\_pci\_mem\_setup() (no CVSS, Linux)
- [CVE-2023-53753](https://cve.now/CVE-2023-53753.md): drm/amd/display: fix mapping to non-allocated address (CVSS 7.8, Linux)
- [CVE-2023-53752](https://cve.now/CVE-2023-53752.md): net: deal with integer overflows in kmalloc\_reserve() (CVSS 7.8, Linux)
- [CVE-2023-53751](https://cve.now/CVE-2023-53751.md): cifs: fix potential use-after-free bugs in TCP\_Server\_Info::hostname (CVSS 9.8, Linux)
- [CVE-2023-53750](https://cve.now/CVE-2023-53750.md): pinctrl: freescale: Fix a memory out of bounds when num\_configs is 1 (no CVSS, Linux)
- [CVE-2023-53748](https://cve.now/CVE-2023-53748.md): media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue\_setup (CVSS 7.1, Linux)
- [CVE-2023-53747](https://cve.now/CVE-2023-53747.md): vc\_screen: reload load of struct vc\_data pointer in vcs\_write() to avoid UAF (CVSS 7.8, Linux)
- [CVE-2023-53746](https://cve.now/CVE-2023-53746.md): s390/vfio-ap: fix memory leak in vfio\_ap device driver (no CVSS, Linux)
- [CVE-2023-53745](https://cve.now/CVE-2023-53745.md): um: vector: Fix memory leak in vector\_config (no CVSS, Linux)
- [CVE-2023-53744](https://cve.now/CVE-2023-53744.md): soc: ti: pm33xx: Fix refcount leak in am33xx\_pm\_probe (no CVSS, Linux)
- [CVE-2023-53743](https://cve.now/CVE-2023-53743.md): PCI: Free released resource after coalescing (no CVSS, Linux)
- [CVE-2023-53742](https://cve.now/CVE-2023-53742.md): kcsan: Avoid READ\_ONCE() in read\_instrumented\_memory() (no CVSS, Linux)
- [CVE-2022-50630](https://cve.now/CVE-2022-50630.md): mm: hugetlb: fix UAF in hugetlb\_handle\_userfault (CVSS 7.8, Linux)
- [CVE-2022-50629](https://cve.now/CVE-2022-50629.md): wifi: rsi: Fix memory leak in rsi\_coex\_attach() (no CVSS, Linux)
- [CVE-2022-50628](https://cve.now/CVE-2022-50628.md): drm/gud: Fix UBSAN warning (no CVSS, Linux)
- [CVE-2022-50627](https://cve.now/CVE-2022-50627.md): wifi: ath11k: fix monitor mode bringup crash (no CVSS, Linux)
- [CVE-2022-50626](https://cve.now/CVE-2022-50626.md): media: dvb-usb: fix memory leak in dvb\_usb\_adapter\_init() (no CVSS, Linux)
- [CVE-2022-50625](https://cve.now/CVE-2022-50625.md): serial: amba-pl011: avoid SBSA UART accessing DMACR register (no CVSS, Linux)
- [CVE-2022-50624](https://cve.now/CVE-2022-50624.md): net: netsec: fix error handling in netsec\_register\_mdio() (no CVSS, Linux)
- [CVE-2022-50623](https://cve.now/CVE-2022-50623.md): fpga: prevent integer overflow in dfl\_feature\_ioctl\_set\_irq() (CVSS 7.8, Linux)
- [CVE-2022-50622](https://cve.now/CVE-2022-50622.md): ext4: fix potential memory leak in ext4\_fc\_record\_modified\_inode() (no CVSS, Linux)
- [CVE-2022-50621](https://cve.now/CVE-2022-50621.md): dm: verity-loadpin: Only trust verity targets with enforcement (no CVSS, Linux)
- [CVE-2022-50620](https://cve.now/CVE-2022-50620.md): f2fs: fix to invalidate dcc-\>f2fs\_issue\_discard in error path (no CVSS, Linux)
- [CVE-2022-50619](https://cve.now/CVE-2022-50619.md): drm/amdkfd: Fix memory leak in kfd\_mem\_dmamap\_userptr() (no CVSS, Linux)
- [CVE-2022-50618](https://cve.now/CVE-2022-50618.md): mmc: meson-gx: fix return value check of mmc\_add\_host() (no CVSS, Linux)
- [CVE-2022-50617](https://cve.now/CVE-2022-50617.md): drm/amdgpu/powerplay/psm: Fix memory leak in power state init (no CVSS, Linux)
- [CVE-2022-50616](https://cve.now/CVE-2022-50616.md): regulator: core: Use different devices for resource allocation and DT lookup (no CVSS, Linux)
- [CVE-2022-50615](https://cve.now/CVE-2022-50615.md): perf/x86/intel/uncore: Fix reference count leak in snr\_uncore\_mmio\_map() (no CVSS, Linux)
- [CVE-2022-50614](https://cve.now/CVE-2022-50614.md): misc: pci\_endpoint\_test: Fix pci\_endpoint\_test\_{copy,write,read}() panic (no CVSS, Linux)
- [CVE-2022-50583](https://cve.now/CVE-2022-50583.md): md/raid0, raid10: Don't set discard sectors for request queue (no CVSS, Linux)
- [CVE-2025-14208](https://cve.now/CVE-2025-14208.md): D-Link DIR-823X set\_wan\_settings sub\_415028 command injection (CVSS 5.3, D-Link DIR-823X)
- [CVE-2025-40326](https://cve.now/CVE-2025-40326.md): NFSD: Define actions for the new time\_deleg FATTR4 attributes (CVSS 7.5, Linux)
- [CVE-2025-40324](https://cve.now/CVE-2025-40324.md): NFSD: Fix crash in nfsd4\_read\_release() (CVSS 7.5, Linux)
- [CVE-2025-40323](https://cve.now/CVE-2025-40323.md): fbcon: Set fb\_display\[i\]-\>mode to NULL when the mode is released (CVSS 7.8, Linux)
- [CVE-2025-40322](https://cve.now/CVE-2025-40322.md): fbdev: bitblit: bound-check glyph index in bit\_putcs\* (CVSS 7.1, Linux)
- [CVE-2025-40321](https://cve.now/CVE-2025-40321.md): wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (no CVSS, Linux)
- [CVE-2025-40320](https://cve.now/CVE-2025-40320.md): smb: client: fix potential cfid UAF in smb2\_query\_info\_compound (CVSS 9.8, Linux)
- [CVE-2025-40319](https://cve.now/CVE-2025-40319.md): bpf: Sync pending IRQ work before freeing ring buffer (CVSS 7.8, Linux)
- [CVE-2025-40318](https://cve.now/CVE-2025-40318.md): Bluetooth: hci\_sync: fix race in hci\_cmd\_sync\_dequeue\_once (CVSS 8.8, Linux)
- [CVE-2025-40317](https://cve.now/CVE-2025-40317.md): regmap: slimbus: fix bus\_context pointer in regmap init calls (CVSS 7.8, Linux)
- [CVE-2025-40316](https://cve.now/CVE-2025-40316.md): drm/mediatek: Fix device use-after-free on unbind (no CVSS, Linux)
- [CVE-2025-40315](https://cve.now/CVE-2025-40315.md): usb: gadget: f\_fs: Fix epfile null pointer access after ep enable. (no CVSS, Linux)
- [CVE-2025-40314](https://cve.now/CVE-2025-40314.md): usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget (no CVSS, Linux)
- [CVE-2025-40313](https://cve.now/CVE-2025-40313.md): ntfs3: pretend $Extend records as regular files (no CVSS, Linux)
- [CVE-2025-40312](https://cve.now/CVE-2025-40312.md): jfs: Verify inode mode when loading from disk (no CVSS, Linux)
- [CVE-2025-40311](https://cve.now/CVE-2025-40311.md): accel/habanalabs: support mapping cb with vmalloc-backed coherent memory (no CVSS, Linux)
- [CVE-2025-40310](https://cve.now/CVE-2025-40310.md): amd/amdkfd: resolve a race in amdgpu\_amdkfd\_device\_fini\_sw (no CVSS, Linux)
- [CVE-2025-40309](https://cve.now/CVE-2025-40309.md): Bluetooth: SCO: Fix UAF on sco\_conn\_free (CVSS 8.0, Linux)
- [CVE-2025-40308](https://cve.now/CVE-2025-40308.md): Bluetooth: bcsp: receive data only if registered (no CVSS, Linux)
- [CVE-2025-40307](https://cve.now/CVE-2025-40307.md): exfat: validate cluster allocation bits of the allocation bitmap (CVSS 7.8, Linux)
- [CVE-2025-40306](https://cve.now/CVE-2025-40306.md): orangefs: fix xattr related buffer overflow... (CVSS 7.8, Linux)
- [CVE-2025-40305](https://cve.now/CVE-2025-40305.md): 9p/trans\_fd: p9\_fd\_request: kick rx thread if EPOLLIN (no CVSS, Linux)
- [CVE-2025-40304](https://cve.now/CVE-2025-40304.md): fbdev: Add bounds checking in bit\_putcs to fix vmalloc-out-of-bounds (CVSS 7.8, Linux)
- [CVE-2025-40303](https://cve.now/CVE-2025-40303.md): btrfs: ensure no dirty metadata is written back for an fs with errors (CVSS 7.8, Linux)
- [CVE-2025-40302](https://cve.now/CVE-2025-40302.md): media: videobuf2: forbid remove\_bufs when legacy fileio is active (CVSS 7.8, Linux)
- [CVE-2025-40301](https://cve.now/CVE-2025-40301.md): Bluetooth: hci\_event: validate skb length for unknown CC opcode (CVSS 7.6, Linux)
- [CVE-2025-40299](https://cve.now/CVE-2025-40299.md): gve: Implement gettimex64 with -EOPNOTSUPP (no CVSS, Linux)
- [CVE-2025-40298](https://cve.now/CVE-2025-40298.md): gve: Implement settime64 with -EOPNOTSUPP (no CVSS, Linux)
- [CVE-2025-40297](https://cve.now/CVE-2025-40297.md): net: bridge: fix use-after-free due to MST port state bypass (CVSS 7.8, Linux)
- [CVE-2025-40296](https://cve.now/CVE-2025-40296.md): platform/x86: int3472: Fix double free of GPIO device during unregister (no CVSS, Linux)
- [CVE-2025-40295](https://cve.now/CVE-2025-40295.md): fscrypt: fix left shift underflow when inode-\>i\_blkbits \> PAGE\_SHIFT (no CVSS, Linux)
- [CVE-2025-40294](https://cve.now/CVE-2025-40294.md): Bluetooth: MGMT: Fix OOB access in parse\_adv\_monitor\_pattern() (no CVSS, Linux)
- [CVE-2025-40293](https://cve.now/CVE-2025-40293.md): iommufd: Don't overflow during division for dirty tracking (no CVSS, Linux)
- [CVE-2025-40292](https://cve.now/CVE-2025-40292.md): virtio-net: fix received length check in big packets (CVSS 8.4, Linux)
- [CVE-2025-40291](https://cve.now/CVE-2025-40291.md): io\_uring: fix regbuf vector size truncation (CVSS 7.8, Linux)
- [CVE-2025-14207](https://cve.now/CVE-2025-14207.md): tushar-2223 Hotel-Management-System invoiceprint.php sql injection (CVSS 6.9, tushar-2223 Hotel-Management-System)
- [CVE-2025-40290](https://cve.now/CVE-2025-40290.md): xsk: avoid data corruption on cq descriptor number (CVSS 7.8, Linux)
- [CVE-2025-14206](https://cve.now/CVE-2025-14206.md): SourceCodester Online Student Clearance System Fee Table delete-fee.php improper authorization (CVSS 6.9, SourceCodester Online Student Clearance System)
- [CVE-2025-59391](https://cve.now/CVE-2025-59391.md): A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches. (CVSS 6.5)
- [CVE-2025-60912](https://cve.now/CVE-2025-60912.md): phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality. (CVSS 3.3)
- [CVE-2025-61318](https://cve.now/CVE-2025-61318.md): Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. (CVSS 5.3)
- [CVE-2025-63721](https://cve.now/CVE-2025-63721.md): HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API an (CVSS 9.8)
- [CVE-2025-64081](https://cve.now/CVE-2025-64081.md): SQL injection vulnerability in /php/api\_patient\_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attac (CVSS 9.8)
- [CVE-2025-65228](https://cve.now/CVE-2025-65228.md): A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R. (CVSS 3.5)
- [CVE-2025-65229](https://cve.now/CVE-2025-65229.md): A stored cross-site scripting (XSS) vulnerability exists in the web interface of Lyrion Music Server \<= 9.0.3. (CVSS 4.6)
- [CVE-2025-65230](https://cve.now/CVE-2025-65230.md): Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting (XSS) vulnerability in the Web UI Configuration Streaming Destinat (CVSS 5.4)
- [CVE-2025-65231](https://cve.now/CVE-2025-65231.md): Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O & Serial configuration page, specifically (CVSS 6.1)
- [CVE-2025-65271](https://cve.now/CVE-2025-65271.md): Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the c (CVSS 8.8)
- [CVE-2025-65363](https://cve.now/CVE-2025-65363.md): Authenticated append-style command-injection Ruijie APs (AP\_RGOS 11.1.x) allows an authenticated web user to execute appended shell expressi (CVSS 7.2)
- [CVE-2025-65548](https://cve.now/CVE-2025-65548.md): NUT-14 allows cashu tokens to be created with a preimage hash. (CVSS 9.1, cashu)
- [CVE-2025-65795](https://cve.now/CVE-2025-65795.md): Incorrect access control in the /api/v1/user endpoint of usememos memos v0.25.2 allows unauthorized attackers to create arbitrary accounts v (CVSS 7.5, github.com/usememos/memos)
- [CVE-2025-65796](https://cve.now/CVE-2025-65796.md): Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reactions made to other (CVSS 4.3, github.com/usememos/memos)
- [CVE-2025-65797](https://cve.now/CVE-2025-65797.md): Incorrect access control in the Identity Provider service of usememos memos v0.25.2 allows attackers with low-level privileges to arbitraril (CVSS 6.5, github.com/usememos/memos)
- [CVE-2025-65798](https://cve.now/CVE-2025-65798.md): Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete attachments ma (CVSS 5.4, github.com/usememos/memos)
- [CVE-2025-65799](https://cve.now/CVE-2025-65799.md): A lack of file name validation or verification in the Attachment service of usememos memos v0.25.2 allows attackers to execute a path traver (CVSS 4.3, github.com/usememos/memos)
- [CVE-2025-65804](https://cve.now/CVE-2025-65804.md): Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corruption and enable rem (CVSS 6.5)
- [CVE-2025-65849](https://cve.now/CVE-2025-65849.md): A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Wo (CVSS 9.1, altcha)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-12-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.