CVEs published December 15, 2025
149 CVEs were published on December 15, 2025: 16 critical, 58 high.
- Published
- 149
- Critical
- 16
- High
- 58
- Medium
- 70
- Low
- 5
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 53
Most affected products
- Autodesk Shared Components
- 17
- Shiguangwu sgwbox N3
- 7
- Autodesk Shared Components · Autodesk AutoCAD
- 3
- CTCMS Content Management System
- 3
- LINE client for iOS
- 3
- NetSupport Software Manager
- 3
- blackcat-cms Blackcat CMS
- 2
- django-allauth
- 2
- FantasticLBP Hotels Server
- 2
- getgrav/grav
- 2
Critical 16
- CVE-2023-53881ReyeeOS 1.204.1614 Man-in-the-Middle Remote Code Execution via CWMPRuijie ReyeeOS
- CVE-2023-53877Bus Reservation System 1.1 Multiple SQL Injection via pickup_id ParameterPhpjabbers Bus Reservation System
- CVE-2023-53872Wp2Fac 1.0 OS Command Injection via send.php EndpointWp2Fac
- CVE-2025-13888Openshift-gitops-operator: openshift gitops: namespace admin cluster takeover via privileged jobsredhat-developer gitops-operator · Red Hat OpenShift Git… +1
- CVE-2025-14156Fox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder'ays-pro Fox LMS – WordPress LMS Plugin
- CVE-2025-14709Shiguangwu sgwbox N3 WIRELESSCFGGET http_eshell_server buffer overflowShiguangwu sgwbox N3
- CVE-2025-14708Shiguangwu sgwbox N3 WIREDCFGGET http_eshell_server buffer overflowShiguangwu sgwbox N3
- CVE-2025-14707Shiguangwu sgwbox N3 DOCKER Feature http_eshell_server command injectionShiguangwu sgwbox N3
- CVE-2025-14706Shiguangwu sgwbox N3 NETREBOOT http_eshell_server command injectionShiguangwu sgwbox N3
- CVE-2025-14705Shiguangwu sgwbox N3 SHARESERVER Feature command injectionShiguangwu sgwbox N3
- CVE-2025-55895TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Cont
- CVE-2025-65213MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool.
- CVE-2025-66438A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format rendering mechanism.
- CVE-2025-66439An issue was discovered in Frappe ERPNext through 15.89.0.
- CVE-2025-66440An issue was discovered in Frappe ERPNext through 15.89.0.
- CVE-2025-66844In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates when page content is processed by Twig angetgrav/grav
High 58
- CVE-2025-10900MODEL File Parsing Out-of-Bounds Write VulnerabilityAutodesk Shared Components
- CVE-2025-10899MODEL File Parsing Out-of-Bounds Write VulnerabilityAutodesk Shared Components
- CVE-2025-10898Multiple Vulnerabilities in Certain Autodesk ProductsAutodesk Shared Components · Autodesk AutoCAD
- CVE-2025-10889CATPART File Parsing Memory Corruption VulnerabilityAutodesk Shared Components
- CVE-2025-10888MODEL File Parsing Out-of-Bounds Write VulnerabilityAutodesk Shared Components
- CVE-2025-10887MODEL File Parsing Memory Corruption VulnerabilityAutodesk Shared Components
- CVE-2025-10886MODEL File Parsing Memory Corruption VulnerabilityAutodesk Shared Components
- CVE-2025-10884CATPART File Parsing Out-of-Bounds Write VulnerabilityAutodesk Shared Components
- CVE-2025-10883CATPRODUCT File Parsing Out-of-Bounds Read VulnerabilityAutodesk Shared Components
- CVE-2025-10882Multiple Vulnerabilities in Certain Autodesk ProductsAutodesk Shared Components · Autodesk AutoCAD
- CVE-2025-10881CATPRODUCT File Parsing Heap-Based Overflow VulnerabilityAutodesk Shared Components · Autodesk AutoCAD
- CVE-2025-9460SLDPRT File Parsing Out-of-Bounds Read VulnerabilityAutodesk Shared Components
- CVE-2025-9459SLDPRT File Parsing Out-of-Bounds Read VulnerabilityAutodesk Shared Components
- CVE-2025-9457PRT File Parsing Memory Corruption VulnerabilityAutodesk Shared Components
- CVE-2025-9456SLDPRT File Parsing Memory Corruption VulnerabilityAutodesk Shared Components
- CVE-2025-9455CATPRODUCT File Parsing Out-of-Bounds Read VulnerabilityAutodesk Shared Components
- CVE-2025-9454PRT File Parsing Out-of-Bounds Read VulnerabilityAutodesk Shared Components
- CVE-2025-9453PRT File Parsing Out-of-Bounds Read VulnerabilityAutodesk Shared Components
- CVE-2025-9452SLDPRT File Parsing Memory Corruption VulnerabilityAutodesk Shared Components
- CVE-2025-14593CATPART File Parsing Out-of-Bounds Read VulnerabilityAutodesk Shared Components
- CVE-2025-66402misskey.js's export data contains private post datamisskey-dev misskey · misskey-js
- CVE-2025-58173FreshRSS vulnerable to authenticated RCE via path traversal inside include()FreshRSS
- CVE-2025-9121Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted DataHitachi Vantara Pentaho Data Integration and Analytics
- CVE-2023-53892Blackcat CMS 1.4 Remote Code Execution via Jquery Plugin Managerblackcat-cms Blackcat CMS
- CVE-2023-53889Perch CMS 3.2 Remote Code Execution via Unrestricted File UploadPerch
- CVE-2023-53888Zomplog 3.9 Remote Code Execution via Authenticated File ManipulationZomplog
- CVE-2023-53885Webutler v3.2 Remote Code Execution via Arbitrary File UploadWebutler
- CVE-2023-53883Webedition CMS v2.9.8.8 Remote Code Execution via PHP Page CreationWebedition CMS
- CVE-2023-53875GOM Player 2.3.90.5360 Remote Code Execution via Insecure IE ComponentGomlab GOM Player
- CVE-2023-53873SyncBreeze 15.2.24 Denial of Service via Login Endpoint OverflowSyncBreeze
- CVE-2023-53869WEBIGniter 28.7.23 Unrestricted File Upload Remote Code ExecutionWebIGniter
- CVE-2023-53868Coppermine Gallery 1.6.25 Remote Code Execution via Plugin Uploadcoppermine-gallery
- CVE-2025-59947NanoMQ has Buffer Overflownanomq
- CVE-2025-14503Overly Permissive Trust Policy in Harmonix on AWS EKSHarmonix on AWS
- CVE-2025-14038EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints.EnterpriseDB Hybrid Manager - LTS · EnterpriseDB Hybrid Man…
- CVE-2025-11393Insights-runtimes-tech-preview/runtimes-inventory-rhel8-operator: improper proxy configuration allows unauthorized administrative commandsRed Hat Lightspeed (formerly Insights) for Runtimes · Re… +1
- CVE-2025-13824Micro820®, Micro850®, Micro870® – Specialized Fuzzing VulnerabilitiesRockwell Automation Micro820®, Micro850®, Micro870®
- CVE-2025-13823Micro820®, Micro850®, Micro870® – Specialized Fuzzing VulnerabilitiesRockwell Automation Micro820®, Micro850®, Micro870®
- CVE-2025-34181NetSupport Manager < 14.12.0001 Authenticated Path Traversal Arbitrary File Write RCENetSupport Software Manager
- CVE-2025-34180NetSupport Manager < 14.12.0001 Gateway Key Reversible Encoding Credential RecoveryNetSupport Software Manager
- CVE-2025-34179NetSupport Manager < 14.12.0001 Unauthenticated SQLi Local File DisclosureNetSupport Software Manager
- CVE-2025-14383Booking Calendar <= 10.14.8 - Unauthenticated SQL Injection via dates_to_checkwpdevelop Booking Calendar
- CVE-2025-14022LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financialLINE client for iOS
- CVE-2025-13355URL Shortify < 1.11.4 - Reflected XSSURL Shortify
- CVE-2025-12684URL Shortify < 1.11.3 - Reflected XSSURL Shortify
- CVE-2025-14712JHENG GAO｜Student Learning Assessment and Support System - Exposure of Sensitive InformationJHENG GAO Student Learning Assessment and Support System
- CVE-2025-14693Ugreen DH2100+ USB symlinkUgreen DH2100+
- CVE-2024-44598FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module.
- CVE-2024-44599FNT Command 13.4.0 is vulnerable to Directory Traversal.
- CVE-2025-60786A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uplo
- CVE-2025-65176An issue was discovered in Dynatrace OneAgent before 1.325.47.
- CVE-2025-65742An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen OmniDocs v11.0 allows attackers to obtain sensitive in
- CVE-2025-65778An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.
- CVE-2025-65779An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.
- CVE-2025-65780An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.
- CVE-2025-65781An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.
- CVE-2025-66434An SSTI (Server-Side Template Injection) vulnerability exists in the get_dunning_letter_text method of Frappe ERPNext through 15.89.0.
- CVE-2025-66437An SSTI (Server-Side Template Injection) vulnerability exists in the get_address_display method of Frappe ERPNext through 15.89.0.
Medium, low and unrated 75
- CVE-2025-66407Weblate has Server-Side Request Forgery vulnerabilityWeblateOrg weblate · weblate
- CVE-2025-14731CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template engineCTCMS Content Management System
- CVE-2025-66482Misskey has a login rate limit bypass via spoofed X-Forwarded-For headermisskey-dev misskey · misskey-js
- CVE-2025-14730CTCMS Content Management System Backend System Configuration Ct_Config.php code injectionCTCMS Content Management System
- CVE-2025-14729CTCMS Content Management System Backend App Configuration Ct_App.php save code injectionCTCMS Content Management System
- CVE-2025-64338ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection NameMacWarrior clipbucket-v5
- CVE-2025-9122Hitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive InformationHitachi Vantara Pentaho Data Integration and Analytics
- CVE-2023-53879NVClient 5.0 Stack Buffer Overflow Vulnerability via User Configurationneonguvenlik NVClient
- CVE-2025-14722vion707 DMadmin Backend AddonsController.class.php add cross site scriptingvion707 DMadmin
- CVE-2023-53893Ateme TITAN File 3.9 Authenticated Server-Side Request Forgery VulnerabilityAteme TITAN
- CVE-2023-53891Blackcat CMS 1.4 Stored Cross-Site Scripting via Page Modificationblackcat-cms Blackcat CMS
- CVE-2023-53890Perch CMS 3.2 Stored Cross-Site Scripting via SVG File UploadPerch
- CVE-2023-53887Zomplog 3.9 Cross-Site Scripting Vulnerability via Page CreationZomplog
- CVE-2023-53886Xlight FTP Server 3.9.3.6 Stack Buffer Overflow Vulnerability via Execute ProgramXlightftpd Xlight FTP Server
- CVE-2023-53884Webedition CMS v2.9.8.8 Stored Cross-Site Scripting via SVG UploadWebedition CMS
- CVE-2023-53882JLex GuestBook 1.6.4 Reflected Cross-Site Scripting via URL Parameterjlexart JLex GuestBook
- CVE-2023-53880Lucee 5.4.2.17 Authenticated Reflected Cross-Site Scripting via Admin InterfacesLucee
- CVE-2023-53878Member Login Script 3.3 Client-Side Request Desynchronization VulnerabilityPhpjabbers Member Login Script
- CVE-2023-53876Academy LMS 6.1 Arbitrary File Upload Vulnerability via Profile SettingsCreativeitem Academy LMS
- CVE-2023-53874GOM Player 2.3.90.5360 Buffer Overflow via Equalizer Preset NameGomlab GOM Player
- CVE-2023-53871Soosyze 2.0.0 Unrestricted File Upload via Broken Upload LogicSoosyze
- CVE-2023-53870Jorani 1.0.3 Cross-Site Scripting Vulnerability via Language ParameterJorani
- CVE-2025-64725Weblate has improper validation upon invitation acceptanceWeblateOrg weblate · weblate
- CVE-2025-13489IBM DevOps Deploy is susceptible to a Cleartext Transmission of Sensitive InformationUCD - IBM DevOps Deploy
- CVE-2025-14148IBM DevOps Deploy is susceptible to a Insufficiently Protected Credentials vulnerabilityUCD - IBM DevOps Deploy
- CVE-2025-12035Bluetooth: Integer Overflow in Bluetooth Classic (BR/EDR) L2CAPzephyrproject-rtos Zephyr
- CVE-2025-36360IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Insufficient Session Expiration vulnerabilityUCD - IBM UrbanCode Deploy · UCD - IBM DevOps Deploy
- CVE-2025-14387LearnPress – WordPress LMS Plugin <= 4.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_socialthimpress LearnPress – WordPress LMS Plugin for Create and…
- CVE-2025-13950OneSignal – Web Push Notifications <= 3.6.1 - Missing Authorization to Unauthenticated Plugin Settings UpdateOneSignal – Web Push Notifications
- CVE-2025-13728FluentAuth - Auth Security Plugin <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluent_auth_reset_password' Shortcodetechjewel FluentAuth – The Ultimate Authorization & Securit…
- CVE-2025-12900FileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders Tamperingninjateam FileBird – WordPress Media Library Folders & File…
- CVE-2025-13610RegistrationMagic <= 6.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' Shortcodemetagauss RegistrationMagic – Custom Registration Forms, Us…
- CVE-2025-14003Image Gallery – Photo Grid & Video Gallery <= 2.13.3 - Missing Authorization to Authenticated (Author+) Arbitrary Gallery Modificationwpchill Modula Image Gallery – Photo Grid & Video Gallery
- CVE-2025-13367User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeswpeverest User Registration & Membership – Free & Paid Memb…
- CVE-2025-13608CC Child Pages <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'child_pages' Shortcodecaterhamcomputing CC Child Pages
- CVE-2025-66388Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UIApache Software Foundation Apache Airflow · apache-airflow
- CVE-2025-11670NTLM Hash Exposure VulnerabilityZohocorp ManageEngine ADManager Plus
- CVE-2025-37731Elasticsearch Improper AuthenticationElasticsearch · org.elasticsearch.plugin:x-pack-security +1
- CVE-2025-14714TCC Bypass via Inherited Permissions in Bundled InterpreterThe Document Foundation LibreOffice
- CVE-2025-37732Kibana Cross-site Scripting via the Integration Package Upload FunctionalityElastic Kibana
- CVE-2025-14711FantasticLBP Hotels Server hotelList.php sql injectionFantasticLBP Hotels Server
- CVE-2025-14710FantasticLBP Hotels Server OrderList.php sql injectionFantasticLBP Hotels Server
- CVE-2025-14023LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user inteLINE client for iOS
- CVE-2025-14021The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execLINE client for iOS
- CVE-2025-14020LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security ToLINE client for Android
- CVE-2025-14019LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure LINE client for Android
- CVE-2025-11363Royal Elementor Addons and Templates < 1.7.1037 - Unauthenticated Media File UploadRoyal Addons for Elementor
- CVE-2025-14549OMR on Z processors Exposing a possible buffer over-read problemEclipse OMR
- CVE-2025-14704Shiguangwu sgwbox N3 API eshell path traversalShiguangwu sgwbox N3
- CVE-2025-14703Shiguangwu sgwbox N3 POST Message fsnotify improper authenticationShiguangwu sgwbox N3
- CVE-2025-14702Smartbit CommV Smartschool App be.smartschool.mobile.SplashActivity path traversalSmartbit CommV Smartschool App
- CVE-2025-67906In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.MISP
- CVE-2025-13740Lightweight Accordion <= 1.5.20 - Authenticated (Contributor+) Stored Cross-Site Scriptingsomeguy9 Lightweight Accordion
- CVE-2025-14699Municorn FAX App biz.faxapp.app path traversalMunicorn FAX App
- CVE-2025-14698atlaszz AI Photo Team Galleryit App gallery.photogallery.pictures.vault.album path traversalatlaszz AI Photo Team Galleryit App
- CVE-2025-14697Shenzhen Sixun Software Sixun Shanghui Group Business Management System ExportFiles file accessShenzhen Sixun Software Sixun Shanghui Group Business Manag…
- CVE-2025-14696Shenzhen Sixun Software Sixun Shanghui Group Business Management System UpdatePasswordBatch password recoveryShenzhen Sixun Software Sixun Shanghui Group Business Manag…
- CVE-2025-14695SamuNatsu HaloBot Inter-plugin API index.js html_renderer dynamically-managed code resourcesSamuNatsu HaloBot
- CVE-2025-14694ketr JEPaaS readAllPostil sql injectionketr JEPaaS
- CVE-2023-36337A reflected cross-site scripting (XSS) vulnerability in the component /index.php/cuzh4 of PHP Inventory Management System 1 allows attackers
- CVE-2023-36338Inventory Management System 1 was discovered to contain a SQL injection vulnerability.
- CVE-2023-38913SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script.
- CVE-2025-51962A HTML Injection vulnerability in the comment section of the project page in MicroStudio 24.01.29 allows remote attackers to inject arbitrar
- CVE-2025-55703An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API.
- CVE-2025-55893TOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via hostName.
- CVE-2025-55901TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.
- CVE-2025-65430An issue was discovered in allauth-django before 65.13.0.django-allauth
- CVE-2025-65431An issue was discovered in allauth-django before 65.13.0.django-allauth
- CVE-2025-65782An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.
- CVE-2025-65835The Cordova plugin cordova-plugin-x-socialsharing (SocialSharing-PhoneGap-Plugin) for Android 6.0.4, registers an exported broadcast receive
- CVE-2025-66435An SSTI (Server-Side Template Injection) vulnerability exists in the get_contract_template method of Frappe ERPNext through 15.89.0.
- CVE-2025-66436An SSTI (Server-Side Template Injection) vulnerability exists in the get_terms_and_conditions method of Frappe ERPNext through 15.89.0.
- CVE-2025-66843grav before v1.7.49.5 has a Stored Cross-Site Scripting (Stored XSS) vulnerability in the page editing functionality.getgrav/grav
- CVE-2025-66963An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html
- CVE-2025-67809An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.