CVEs published December 16, 2025
363 CVEs were published on December 16, 2025: 22 critical, 102 high. 1 is now in CISA KEV.
- Published
- 363
- Critical
- 22
- High
- 102
- Medium
- 132
- Low
- 6
- Unrated
- 101
- Now in CISA KEV
- 1
- Fix available
- 116
Most affected products
- Linux
- 156
- JetBrains TeamCity
- 7
- Grassroot DICOM
- 4
- Ningyuanda TC155
- 4
- QNAP Systems QTS · QNAP Systems QuTS hero
- 4
- Claris FileMaker Server
- 3
- Inaba Denki Sangyo Co. CHOCO TEI WATCHER mini
- 3
- WaveStore Server
- 3
- Barn2 Plugins Document Library Lite
- 2
- ChurchCRM CRM
- 2
Critical 22
- CVE-2025-68270CourseLimitedStaff Role Allows Studio Accessopenedx edx-platform
- CVE-2025-46295Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input iClaris FileMaker Server
- CVE-2025-33210NVIDIA Isaac Lab contains a deserialization vulnerability.NVIDIA Isaac Lab
- CVE-2023-53895PimpMyLog 1.7.14 Improper Access Control via Account Creation EndpointPimpMyLog
- CVE-2023-53894phpfm 1.7.9 Authentication Bypass via Type Juggling VulnerabilityDulldusk phpfm
- CVE-2025-37164A remote code execution issue exists in HPE OneView.Hewlett Packard Enterprise (HPE) HPE OneView
- CVE-2025-68315f2fs: fix to detect potential corrupted nid in free_nid_listLinux
- CVE-2025-68301net: atlantic: fix fragment overflow handling in RX pathLinux
- CVE-2025-68285libceph: fix potential use-after-free in have_mon_and_osd_map()Linux
- CVE-2025-68284libceph: prevent potential out-of-bounds writes in handle_auth_session_key()Linux
- CVE-2025-68263ksmbd: ipc: fix use-after-free in ipc_msg_send_requestLinux
- CVE-2025-68192net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixupLinux
- CVE-2025-40350net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQLinux
- CVE-2025-67744Mermaid XSS vulnerability leads to Remote Code ExecutionThinkInAIXYZ deepchat
- CVE-2025-50398Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter fac_password
- CVE-2025-50401Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter password.
- CVE-2025-62863Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorre
- CVE-2025-62864Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorre
- CVE-2025-63414A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an unauthenticated remote attacker to achieve arbitrary com
- CVE-2025-65318When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web
- CVE-2025-65319When using the attachment interaction functionality, Blue Mail 1.140.103 and below saves documents to a file system without a Mark-of-the-We
- CVE-2025-65834Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow.
High 102
- CVE-2025-14766Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruptionGoogle Chrome
- CVE-2025-14765Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a craGoogle Chrome
- CVE-2025-34288Nagios XI Privilege Escalation via Writable PHP Include Executed with SudoNagios Enterprises Nagios XI
- CVE-2025-68274SIPGO library has response DoS vulnerability via nil pointer dereferenceemiago sipgo · github.com/emiago/sipgo
- CVE-2025-53619An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024.Grassroot DICOM
- CVE-2025-53618An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024.Grassroot DICOM
- CVE-2025-52582An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024.Grassroot DICOM
- CVE-2025-48429An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024.Grassroot DICOM
- CVE-2025-8872A specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restartedArista Networks EOS
- CVE-2025-14553Password Hash Leak Could Lead to Unauthorized Access on Tapo App via Local NetworkTP-Link Systems TP-Link Tapo App
- CVE-2025-68156Expr has Denial of Service via Unbounded Recursion in Builtin Functionsexpr-lang expr · github.com/expr-lang/expr
- CVE-2025-68155@vitejs/plugin-rsc has Arbitrary File Read via `/__vite_rsc_findSourceMapURL` Endpoint on Developmentvitejs vite-plugin-react · @vitejs/plugin-rsc
- CVE-2025-68154Command Injection in fsSize() on Windowssebhildebrandt systeminformation · systeminformation
- CVE-2025-68150Parse Server has Server-Side Request Forgery (SSRF) in Instagram OAuth Adapterparse-community parse-server · parse-server
- CVE-2025-33235NVIDIA Resiliency Extension for Linux contains a vulnerability in the checkpointing core, where an attacker may cause a race condition.NVIDIA Resiliency Extension
- CVE-2025-33225NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names.NVIDIA Resiliency Extension
- CVE-2025-33226NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection.NVIDIA NeMo Framework
- CVE-2025-33212NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a useNVIDIA NeMo Framework
- CVE-2023-53896D-Link DAP-1325 Hardware A1 Unauthenticated Configuration DownloadD-Link DAP-1325
- CVE-2023-53902WebsiteBaker 2.13.3 Directory Traversal via Media Delete EndpointWebsiteBaker
- CVE-2023-53901WBCE CMS 1.6.1 Cross-Site Scripting and Open Redirect VulnerabilityWBCE CMS
- CVE-2025-68130tRPC has possible prototype pollution in `experimental_nextAppDirCaller`trpc · @trpc/server
- CVE-2025-68116FileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handlingerror311 FileRise
- CVE-2025-10450Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic.RTI Connext Professional
- CVE-2025-68321page_pool: always add GFP_NOWARN for ATOMIC allocationsLinux
- CVE-2025-68320lan966x: Fix sleeping in atomic contextLinux
- CVE-2025-68317io_uring/zctx: check chained notif contextsLinux
- CVE-2025-68314drm/msm: make sure last_fence is always updatedLinux
- CVE-2025-68313x86/CPU/AMD: Add RDSEED fix for Zen5Linux
- CVE-2025-14432Poly Video - Sensitive Data Might Be Written to Log FileHP Poly G7500 · HP Poly Studio G62 +14
- CVE-2025-68304Bluetooth: hci_core: lookup hci_conn on RX path on protocol sideLinux
- CVE-2025-68303platform/x86: intel: punit_ipc: fix memory corruptionLinux
- CVE-2025-68302net: sxgbe: fix potential NULL dereference in sxgbe_rx()Linux
- CVE-2025-68294io_uring/net: ensure vectored buffer node import is tied to notificationLinux
- CVE-2025-68286drm/amd/display: Check NULL before accessingLinux
- CVE-2025-68283libceph: replace BUG_ON with bounds check for map->max_osdLinux
- CVE-2025-68265nvme: fix admin request_queue lifetimeLinux
- CVE-2025-68261ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()Linux
- CVE-2025-68260rust_binder: fix race condition on death_listLinux
- CVE-2025-68256staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parserLinux
- CVE-2025-68255staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsingLinux
- CVE-2025-68254staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsingLinux
- CVE-2025-68250hung_task: fix warnings caused by unaligned lock pointersLinux
- CVE-2025-68246ksmbd: close accepted socket when per-IP limit rejects connectionLinux
- CVE-2025-68243NFS: Check the TLS certificate fields in nfs_match_client()Linux
- CVE-2025-68241ipv4: route: Prevent rt_bind_exception() from rebinding stale fnheLinux
- CVE-2025-68234io_uring/cmd_net: fix wrong argument types for skb_queue_splice()Linux
- CVE-2025-68232veth: more robust handing of race to avoid txq getting stuckLinux
- CVE-2025-68226smb: client: fix incomplete backport in cfids_invalidation_worker()Linux
- CVE-2025-68218nvme-multipath: fix lockdep WARN due to partition scan workLinux
- CVE-2025-68215ice: fix PTP cleanup on driver removal in error pathLinux
- CVE-2025-68212fs: Fix uninitialized 'offp' in statmount_string()Linux
- CVE-2025-68208bpf: account for current allocated stack depth in widen_imprecise_scalars()Linux
- CVE-2025-68207drm/xe/guc: Synchronize Dead CT worker with unbindLinux
- CVE-2025-68206netfilter: nft_ct: add seqadj extension for natted connectionsLinux
- CVE-2025-68189drm/msm: Fix GEM free for imported dma-bufsLinux
- CVE-2025-68184drm/mediatek: Disable AFBC support on Mediatek DRM driverLinux
- CVE-2025-68183ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattrLinux
- CVE-2025-68182wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()Linux
- CVE-2025-68181drm/radeon: Remove calls to drm_put_dev()Linux
- CVE-2025-68179s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAPLinux
- CVE-2025-68175media: nxp: imx8-isi: Fix streaming cleanup on releaseLinux
- CVE-2025-68174amd/amdkfd: enhance kfd process check in switch partitionLinux
- CVE-2025-68171x86/fpu: Ensure XFD state on signal deliveryLinux
- CVE-2025-68170drm/radeon: Do not kfree() devres managed rdevLinux
- CVE-2025-68168jfs: fix uninitialized waitqueue in transaction managerLinux
- CVE-2025-68167gpiolib: fix invalid pointer access in debugfsLinux
- CVE-2025-40362ceph: fix multifs mds auth caps issueLinux
- CVE-2025-40358riscv: stacktrace: Disable KASAN checks for non-current tasksLinux
- CVE-2025-40356spi: rockchip-sfc: Fix DMA-API usageLinux
- CVE-2025-40354drm/amd/display: increase max link count and fix link->enc NULL pointer accessLinux
- CVE-2025-40349hfs: validate record offset in hfsplus_bmap_allocLinux
- CVE-2025-40347net: enetc: fix the deadlock of enetc_mdio_lockLinux
- CVE-2025-65076Arbitrary File Read and Delete via Path Traversal in WaveStore ServerWaveStore Server
- CVE-2025-65074OS Command Injection via Path Traversal in WaveStore ServerWaveStore Server
- CVE-2025-13474IDOR in Menulux Software's Mobile AppMenulux Software Mobile App
- CVE-2025-14002WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTPwhyun WPCOM Member
- CVE-2025-68068WordPress Stockholm theme <= 9.14.1 - Local File Inclusion vulnerabilitySelect-Themes Stockholm
- CVE-2025-68067WordPress Stockholm Core plugin <= 2.4.6 - Local File Inclusion vulnerabilitySelect-Themes Stockholm Core
- CVE-2025-68066WordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerabilityPenciDesign Soledad
- CVE-2025-68065WordPress Hub Core plugin < 6.0.2 - Local File Inclusion vulnerabilityLiquidThemes Hub Core
- CVE-2025-68062WordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerabilityThemeMove MinimogWP
- CVE-2025-68061WordPress EduMall theme <= 4.4.7 - Local File Inclusion vulnerabilityThemeMove EduMall
- CVE-2025-68056WordPress LBG Zoominoutslider plugin <= 5.4.4 - SQL Injection vulnerabilityLambertGroup LBG Zoominoutslider
- CVE-2025-68055WordPress Hydra Booking plugin <= 1.1.32 - SQL Injection vulnerabilityThemefic Hydra Booking
- CVE-2025-68054WordPress CountDown With Image or Video Background plugin <= 1.5 - SQL Injection vulnerabilityLambertGroup CountDown With Image or Video Background
- CVE-2025-68053WordPress xPromoter plugin <= 1.3.4 - SQL Injection vulnerabilityLambertGroup xPromoter
- CVE-2025-67999WordPress Newsletter plugin <= 9.0.9 - SQL Injection vulnerabilityStefano Lissa Newsletter
- CVE-2025-67962WordPress Broken Link Checker plugin <= 1.2.6 - SQL Injection vulnerabilityAIOSEO Plugin Team Broken Link Checker
- CVE-2025-67950WordPress All In One SEO Pack plugin <= 4.9.1 - SQL Injection vulnerabilitySyed Balkhi All In One SEO Pack
- CVE-2025-66635Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config.SEIKO EPSON Web Config
- CVE-2025-14252An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, andAdvantech SUSI
- CVE-2025-61976CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper check for unusual or exceptional conditions.Inaba Denki Sangyo Co. CHOCO TEI WATCHER mini
- CVE-2025-59385QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-62848QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-67751ChurchCRM has SQL Injection in Event Editor via `EN_tyid` Parameter caused by an Incomplete FixChurchCRM CRM
- CVE-2025-67748Fickling has Code Injection vulnerability via pty.spawn()trailofbits fickling · fickling
- CVE-2025-67747Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules listtrailofbits fickling · fickling
- CVE-2025-67736Authenticated SQL Injection in FreePBX tts (Text To Speech) moduleFreePBX tts
- CVE-2025-66449ConvertX has Path Traversal that leads to Arbitrary File Write and Arbitrary Code ExecutionC4illin ConvertX
- CVE-2025-52196Server-Side Request Forgery (SSRF) vulnerability in Ctera Portal 8.1.x (8.1.1417.24) allows remote attackers to induce the server to make ar
- CVE-2025-65593nopCommerce 4.90.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Schedule Tasks functionality.
Medium, low and unrated 239
- CVE-2025-64520GLPI vulnerable to unauthorized access to restricted Knowledge Base items through the APIglpi-project glpi
- CVE-2025-14466Güralp Systems Fortimus Series, Minimus Series, and Certimus Series have an Allocation of Resources Without Limits or Throttling vulnerabilityGüralp Systems Fortimus Series · Güralp Systems Minimus… +1
- CVE-2025-13532Weak Password Hash in Core Privileged Access Manager (BoKS)Fortra Core Privileged Access Manager
- CVE-2025-68146filelock has TOCTOU race condition that allows symlink attacks during lock file creationtox-dev filelock · filelock
- CVE-2025-46296An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access adminiClaris FileMaker Server
- CVE-2025-46294To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsDClaris FileMaker Server
- CVE-2025-68142PyMdown Extensions has ReDOS bug in Figure Capture extensionfacelessuser pymdown-extensions · pymdown-extensions
- CVE-2023-53900Spip 4.1.10 Admin Account Spoofing via Malicious SVG Uploadspip
- CVE-2023-53903WebsiteBaker 2.13.3 Stored Cross-Site Scripting via SVG File UploadWebsiteBaker
- CVE-2023-53899PodcastGenerator 3.2.9 Blind Server-Side Request Forgery via XML InjectionPodcastGenerator
- CVE-2023-53898Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting via ConfigurationRukovoditel
- CVE-2023-53897Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting via CommentsRukovoditel
- CVE-2025-59935GLPI Vulnerable to Unauthenticated Stored XSS on the Inventory pageglpi-project glpi
- CVE-2025-68322parisc: Avoid crash due to unaligned access in unwinderLinux
- CVE-2025-68319netconsole: Acquire su_mutex before navigating configs hierarchyLinux
- CVE-2025-68318clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICALLinux
- CVE-2025-68316scsi: ufs: core: Fix invalid probe error return valueLinux
- CVE-2025-68312usbnet: Prevents free active keventLinux
- CVE-2025-68311tty: serial: ip22zilog: Use platform device for probingLinux
- CVE-2025-68310s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdumpLinux
- CVE-2025-68309PCI/AER: Fix NULL pointer access by aer_infoLinux
- CVE-2025-68269In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote projects over SSHJetBrains IntelliJ IDEA
- CVE-2025-68268In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings pageJetBrains TeamCity
- CVE-2025-68267In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installaJetBrains TeamCity
- CVE-2025-68166In JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tabJetBrains TeamCity
- CVE-2025-68165In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setupJetBrains TeamCity
- CVE-2025-68164In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection testJetBrains TeamCity
- CVE-2025-68163In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall pageJetBrains TeamCity
- CVE-2025-68162In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configurationJetBrains TeamCity
- CVE-2025-62329HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerabilityHCL Software DevOps Deploy / Launch
- CVE-2025-68308can: kvaser_usb: leaf: Fix potential infinite loop in command parsersLinux
- CVE-2025-68307can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBsLinux
- CVE-2025-68306Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interfaceLinux
- CVE-2025-68305Bluetooth: hci_sock: Prevent race in socket write iter and sock bindLinux
- CVE-2025-68300fs/namespace: fix reference leak in grab_requested_mnt_nsLinux
- CVE-2025-68299afs: Fix delayed allocation of a cell's anonymous keyLinux
- CVE-2025-68298Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL derefLinux
- CVE-2025-68297ceph: fix crash in process_v2_sparse_read() for encrypted directoriesLinux
- CVE-2025-68296drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setupLinux
- CVE-2025-68295smb: client: fix memory leak in cifs_construct_tcon()Linux
- CVE-2025-68293mm/huge_memory: fix NULL pointer deference when splitting folioLinux
- CVE-2025-68292mm/memfd: fix information leak in hugetlb foliosLinux
- CVE-2025-68291mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().Linux
- CVE-2025-68290most: usb: fix double free on late probe failureLinux
- CVE-2025-68289usb: gadget: f_eem: Fix memory leak in eem_unwrapLinux
- CVE-2025-68288usb: storage: Fix memory leak in USB bulk transportLinux
- CVE-2025-68287usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call pathsLinux
- CVE-2025-68282usb: gadget: udc: fix use-after-free in usb_gadget_state_workLinux
- CVE-2025-68281ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-listLinux
- CVE-2025-68266bfs: Reconstruct file type when loading from diskLinux
- CVE-2025-68264ext4: refresh inline data size before write operationsLinux
- CVE-2025-68262crypto: zstd - fix double-free in per-CPU stream cleanupLinux
- CVE-2025-68259KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replacedLinux
- CVE-2025-68258comedi: multiq3: sanitize config options in multiq3_attach()Linux
- CVE-2025-68257comedi: check device's attached status in compat ioctlsLinux
- CVE-2025-68253mm: don't spin in add_stack_record when gfp flags don't allowLinux
- CVE-2025-68252misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookupLinux
- CVE-2025-68251erofs: avoid infinite loops due to corrupted subpage compact indexesLinux
- CVE-2025-68249most: usb: hdm_probe: Fix calling put_device() before device initializationLinux
- CVE-2025-68248vmw_balloon: indicate success when effectively deflating during migrationLinux
- CVE-2025-68247posix-timers: Plug potential memory leak in do_timer_create()Linux
- CVE-2025-68245net: netpoll: fix incorrect refcount handling causing incorrect cleanupLinux
- CVE-2025-68244drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTDLinux
- CVE-2025-68242NFS: Fix LTP test failures when timestamps are delegatedLinux
- CVE-2025-68240nilfs2: avoid having an active sc_timer before freeing sciLinux
- CVE-2025-68239binfmt_misc: restore write access before closing files opened by open_exec()Linux
- CVE-2025-68238mtd: rawnand: cadence: fix DMA device NULL pointer dereferenceLinux
- CVE-2025-68237mtdchar: fix integer overflow in read/write ioctlsLinux
- CVE-2025-68236scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3)Linux
- CVE-2025-68235nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::bootLinux
- CVE-2025-68233drm/tegra: Add call to put_pid()Linux
- CVE-2025-68231mm/mempool: fix poisoning order>0 pages with HIGHMEMLinux
- CVE-2025-68230drm/amdgpu: fix gpu page fault after hibernation on PF passthroughLinux
- CVE-2025-68229scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()Linux
- CVE-2025-68228drm/plane: Fix create_in_format_blob() return valueLinux
- CVE-2025-68227mptcp: Fix proto fallback detection with BPFLinux
- CVE-2025-68225lib/test_kho: check if KHO is enabledLinux
- CVE-2025-68223drm/radeon: delete radeon_fence_process in is_signaled, no deadlockLinux
- CVE-2025-68222pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_descLinux
- CVE-2025-68221mptcp: fix address removal logic in mptcp_pm_nl_rm_addrLinux
- CVE-2025-68220net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on errorLinux
- CVE-2025-68219cifs: fix memory leak in smb3_fs_context_parse_param error pathLinux
- CVE-2025-68217Input: pegasus-notetaker - fix potential out-of-bounds accessLinux
- CVE-2025-68216LoongArch: BPF: Disable trampoline for kernel module function traceLinux
- CVE-2025-68214timers: Fix NULL function pointer race in timer_shutdown_sync()Linux
- CVE-2025-68213idpf: fix possible vport_config NULL pointer deref in removeLinux
- CVE-2025-68211ksm: use range-walk function to jump over holes in scan_get_next_rmap_itemLinux
- CVE-2025-68210erofs: avoid infinite loop due to incomplete zstd-compressed dataLinux
- CVE-2025-68209mlx5: Fix default values in create CQLinux
- CVE-2025-68205ALSA: hda/hdmi: Fix breakage at probing nvhdmi-mcp driverLinux
- CVE-2025-68204pmdomain: arm: scmi: Fix genpd leak on provider registration failureLinux
- CVE-2025-68202sched_ext: Fix unsafe locking in the scx_dump_state()Linux
- CVE-2025-68201drm/amdgpu: remove two invalid BUG_ON()sLinux
- CVE-2025-68200bpf: Add bpf_prog_run_data_pointers()Linux
- CVE-2025-68199codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_extLinux
- CVE-2025-68198crash: fix crashkernel resource shrinkLinux
- CVE-2025-68197bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap()Linux
- CVE-2025-68196drm/amd/display: Cache streams targeting link when performing LT automationLinux
- CVE-2025-68194media: imon: make send_packet() more robustLinux
- CVE-2025-68193drm/xe/guc: Add devm release action to safely tear down CTLinux
- CVE-2025-68191udp_tunnel: use netdev_warn() instead of netdev_WARN()Linux
- CVE-2025-68190drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked()Linux
- CVE-2025-68188tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()Linux
- CVE-2025-68187net: mdio: Check regmap pointer returned by device_node_to_regmap()Linux
- CVE-2025-68186ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches upLinux
- CVE-2025-68185nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencingLinux
- CVE-2025-68180drm/amd/display: Fix NULL deref in debugfs odm_combine_segmentsLinux
- CVE-2025-68178blk-cgroup: fix possible deadlock while configuring policyLinux
- CVE-2025-68177cpufreq/longhaul: handle NULL policy in longhaul_exitLinux
- CVE-2025-68176PCI: cadence: Check for the existence of cdns_pcie::ops before using itLinux
- CVE-2025-68173ftrace: Fix softlockup in ftrace_module_enableLinux
- CVE-2025-68172crypto: aspeed - fix double free caused by devmLinux
- CVE-2025-68169netpoll: Fix deadlock in memory allocation under spinlockLinux
- CVE-2025-40363net: ipv6: fix field-spanning memcpy warning in AH outputLinux
- CVE-2025-40360drm/sysfb: Do not dereference NULL pointer in plane resetLinux
- CVE-2025-40359perf/x86/intel: Fix KASAN global-out-of-bounds warningLinux
- CVE-2025-40357net/smc: fix general protection fault in __smc_diag_dumpLinux
- CVE-2025-40355sysfs: check visibility before changing group attribute ownershipLinux
- CVE-2025-40353arm64: mte: Do not warn if the page is already tagged in copy_highpage()Linux
- CVE-2025-40352platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock initLinux
- CVE-2025-40351hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()Linux
- CVE-2025-40348slab: Avoid race on slab->obj_exts in alloc_slab_obj_extsLinux
- CVE-2025-40346arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()Linux
- CVE-2025-14780Xiongwei Smart Catering Cloud Platform dish_trade_detail_get sql injectionXiongwei Smart Catering Cloud Platform
- CVE-2025-65075Arbitrary File Read and Delete via Path Traversal in WaveStore ServerWaveStore Server
- CVE-2025-14443Ose-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanismRed Hat OpenShift Container Platform · github.com/openshift…
- CVE-2025-13741Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) Authors' Emails ExposureSchedule Post Changes With PublishPress Future: Unpublish,…
- CVE-2025-11220Elementor <= 3.33.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Text Pathelemntor Elementor Website Builder – more than just a page…
- CVE-2025-0836XProtect MIP API Missing AuthorizationMilestone Systems XProtect VMS
- CVE-2025-13231Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Conditionradykal Fancy Product Designer
- CVE-2025-68088WordPress Huger for Elementor plugin <= 1.1.5 - Broken Access Control vulnerabilitymerkulove Huger for Elementor
- CVE-2025-68087WordPress Modalier for Elementor plugin <= 1.0.6 - Broken Access Control vulnerabilitymerkulove Modalier for Elementor
- CVE-2025-68086WordPress Reformer for Elementor plugin <= 1.0.6 - Broken Access Control vulnerabilitymerkulove Reformer for Elementor
- CVE-2025-68085WordPress Buttoner for Elementor plugin <= 1.0.6 - Settings Change vulnerabilitymerkulove Buttoner for Elementor
- CVE-2025-68084WordPress Ultimate Auction plugin <= 4.3.3 - Broken Access Control vulnerabilityNitesh Ultimate Auction
- CVE-2025-68083WordPress Meks Quick Plugin Disabler plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerabilityMeks Quick Plugin Disabler
- CVE-2025-68082WordPress Semrush Content Toolkit plugin <= 1.1.32 - Cross Site Request Forgery (CSRF) vulnerabilitySEMrush CY Semrush Content Toolkit
- CVE-2025-68080WordPress User Avatar - Reloaded plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerabilitySaad Iqbal User Avatar - Reloaded
- CVE-2025-68079WordPress Salient Shortcodes plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerabilityThemeNectar Salient Shortcodes
- CVE-2025-68078WordPress Salient Portfolio theme <= 1.8.2 - Cross Site Scripting (XSS) vulnerabilityThemeNectar Salient Portfolio
- CVE-2025-68077WordPress Stockholm theme <= 9.14.1 - Cross Site Scripting (XSS) vulnerabilitySelect-Themes Stockholm
- CVE-2025-68076WordPress Stockholm Core plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerabilitySelect-Themes Stockholm Core
- CVE-2025-68071WordPress Essential Real Estate plugin <= 5.3.2 - Insecure Direct Object References (IDOR) vulnerabilityg5theme Essential Real Estate
- CVE-2025-68070WordPress VK Google Job Posting Manager plugin <= 1.2.22 - Cross Site Scripting (XSS) vulnerabilityVektor VK Google Job Posting Manager
- CVE-2025-67989WordPress Kerge theme <= 4.1.3 - Server Side Request Forgery (SSRF) vulnerabilityLMPixels Kerge
- CVE-2025-67986WordPress Document Library Lite plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerabilityBarn2 Plugins Document Library Lite
- CVE-2025-67985WordPress Document Library Lite plugin <= 1.1.7 - Insecure Direct Object References (IDOR) vulnerabilityBarn2 Plugins Document Library Lite
- CVE-2025-67983WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 8.3 - Cross Site Scripting (XSS) vulnerabilityosama.esh WP Visitor Statistics
- CVE-2025-67976WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerabilityBob Watu Quiz
- CVE-2025-67965WordPress Homey Core plugin <= 2.4.3 - Broken Access Control vulnerabilityfavethemes Homey Core
- CVE-2025-67951WordPress WPZOOM Addons for Elementor plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerabilityWPZOOM Addons for Elementor
- CVE-2025-67948WordPress SendPulse Email Marketing Newsletter plugin <= 2.2.1 - Sensitive Data Exposure vulnerabilitySendPulse Email Marketing Newsletter
- CVE-2025-67929WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - Broken Access Control vulnerabilitytemplateinvaders TI WooCommerce Wishlist
- CVE-2025-67912WordPress Stars Testimonials plugin <= 3.3.4 - Cross Site Scripting (XSS) vulnerabilityPremio Stars Testimonials
- CVE-2025-66167WordPress Lottier plugin <= 1.1.1 - Broken Access Control vulnerabilitymerkulove Lottier
- CVE-2025-66166WordPress Lottier for Elementor plugin <= 1.0.9 - Broken Access Control vulnerabilitymerkulove Lottier for Elementor
- CVE-2025-66165WordPress Lottier for WPBakery plugin <= 1.1.7 - Broken Access Control vulnerabilitymerkulove Lottier for WPBakery
- CVE-2025-66164WordPress Laser plugin <= 1.1.1 - Broken Access Control vulnerabilitymerkulove Laser
- CVE-2025-66163WordPress Masker for Elementor plugin <= 1.1.4 - Broken Access Control vulnerabilitymerkulove Masker for Elementor
- CVE-2025-66162WordPress Spoter for Elementor plugin <= 1.04 - Broken Access Control vulnerabilitymerkulove Spoter for Elementor
- CVE-2025-66161WordPress Grider for Elementor plugin <= 1.0.8 - Broken Access Control vulnerabilitymerkulove Grider for Elementor
- CVE-2025-66147WordPress Coder for Elementor plugin <= 1.0.13 - Broken Access Control vulnerabilitymerkulove Coder for Elementor
- CVE-2025-66134WordPress FileBird Pro plugin <= 6.5.1 - Broken Access Control vulnerabilityNinjaTeam FileBird Pro
- CVE-2025-66133WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.7 - Broken Access Control vulnerabilityWP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy C…
- CVE-2025-66132WordPress FAPI Member plugin <= 2.2.30 - Insecure Direct Object References (IDOR) vulnerabilityFAPI Business s.r.o. FAPI Member
- CVE-2025-66131WordPress Yaad Sarig Payment Gateway For WC plugin <= 2.2.11 - Broken Access Control vulnerabilityyaadsarig Yaad Sarig Payment Gateway For WC
- CVE-2025-66130WordPress WP Views Counter plugin <= 2.1.2 - Broken Access Control vulnerabilityetruel WP Views Counter
- CVE-2025-66129WordPress Pochipp plugin <= 1.18.0 - Broken Access Control vulnerabilitywppochipp Pochipp
- CVE-2025-66128WordPress Sendinblue for WooCommerce plugin <= 4.0.49 - Broken Access Control vulnerabilityBrevo Sendinblue for WooCommerce
- CVE-2025-66127WordPress Essential Real Estate plugin <= 5.3.2 - Broken Access Control vulnerabilityg5theme Essential Real Estate
- CVE-2025-66126WordPress Fix Media Library plugin <= 2.0 - Sensitive Data Exposure vulnerabilitywowpress.host Fix Media Library
- CVE-2025-66125WordPress Ultimate Auction plugin <= 4.3.3 - Sensitive Data Exposure vulnerabilityNitesh Ultimate Auction
- CVE-2025-66124WordPress Leaky Paywall plugin <= 4.22.6 - Broken Access Control vulnerabilityZEEN101 Leaky Paywall
- CVE-2025-66122WordPress Stylish Price List plugin <= 7.2.2 - Broken Access Control vulnerabilityDesign Stylish Price List
- CVE-2025-66121WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerabilitySiteGround Security
- CVE-2025-66120WordPress CatFolders plugin <= 2.5.3 - Broken Access Control vulnerabilityCatFolders
- CVE-2025-64639WordPress WP Compress for MainWP plugin <= 6.50.17 - Broken Access Control vulnerabilityWP Compress for MainWP
- CVE-2025-64638WordPress OnPay.io for WooCommerce plugin <= 1.0.47 - Broken Access Control vulnerabilityOnPay.io for WooCommerce
- CVE-2025-64635WordPress Feeds for YouTube plugin <= 2.4.0 - Broken Access Control vulnerabilitySyed Balkhi Feeds for YouTube
- CVE-2025-64634WordPress Avada theme <= 7.13.2 - Broken Access Control vulnerabilityThemeFusion Avada
- CVE-2025-64633WordPress Norebro Extra plugin <= 1.6.8 - Content Injection vulnerabilitycolabrio Norebro Extra
- CVE-2025-64632WordPress Google XML Sitemaps plugin <= 4.1.22 - Broken Access Control vulnerabilityAuctollo Google XML Sitemaps
- CVE-2025-64631WordPress WCFM Marketplace plugin <= 3.7.1 - Broken Access Control vulnerabilityWC Lovers WCFM Marketplace
- CVE-2025-64630WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerabilityStrategy11 Team Business Directory
- CVE-2025-64253WordPress Health Check & Troubleshooting plugin <= 1.7.1 - Path Traversal vulnerabilityWordPress.org Health Check & Troubleshooting
- CVE-2025-64251WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbitrary Content Deletion vulnerabilityazzaroco Ultimate Learning Pro
- CVE-2025-64250WordPress Directorist plugin <= 8.6.6 - Open Redirection vulnerabilitywpWax Directorist
- CVE-2025-64249WordPress Protect WP Admin plugin <= 4.1 - Broken Access Control vulnerabilityWP-EXPERTS.IN Protect WP Admin
- CVE-2025-64248WordPress Request a Quote plugin <= 2.5.3 - Broken Access Control vulnerabilityemarket-design Request a Quote
- CVE-2025-64247WordPress Read More & Accordion plugin <= 3.5.5.1 - Broken Access Control vulnerabilityedmon.parker Read More & Accordion
- CVE-2025-64246WordPress Accessibility by AudioEye plugin <= 1.0.49 - Broken Access Control vulnerabilitynetopsae Accessibility by AudioEye
- CVE-2025-64245WordPress Import external attachments plugin <= 1.5.12 - Broken Access Control vulnerabilityryanpcmcquen Import external attachments
- CVE-2025-64244WordPress Restrict Elementor Widgets, Columns and Sections plugin <= 1.12 - Broken Access Control vulnerabilityCodexpert Restrict Elementor Widgets, Columns and Sections
- CVE-2025-64243WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerabilitye-plugins Directory Pro
- CVE-2025-64242WordPress Easy Property Listings plugin <= 3.5.22 - Broken Access Control vulnerabilityMerv Barrett Easy Property Listings
- CVE-2025-64241WordPress WP Coupons and Deals plugin <= 3.2.4 - Broken Access Control vulnerabilityImtiaz Rayhan WP Coupons and Deals
- CVE-2025-64240WordPress Freshchat plugin <= 2.3.4 - Cross Site Request Forgery (CSRF) vulnerabilityFreshchat
- CVE-2025-64239WordPress RTL Tester plugin <= 1.2 - Cross Site Request Forgery (CSRF) vulnerabilityYoav Farhi RTL Tester
- CVE-2025-64238WordPress WPS Bidouille plugin <= 1.33.1 - Broken Access Control vulnerabilityNicolasKulka WPS Bidouille
- CVE-2025-64237WordPress Quick Interest Slider plugin <= 3.1.5 - Cross Site Request Forgery (CSRF) vulnerabilityGraham Quick Interest Slider
- CVE-2025-59009WordPress Listify theme <= 3.2.5 - Cross Site Request Forgery (CSRF) vulnerabilityAstoundify Listify
- CVE-2025-59001WordPress Salient Core plugin <= 3.0.8 - Broken Access Control vulnerabilityThemeNectar Salient Core
- CVE-2025-58999WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Cross Site Request Forgery (CSRF) vulnerabilityloopus WP Attractive Donations System - Easy Stripe & Paypa…
- CVE-2025-54045WordPress CM On Demand Search And Replace plugin <= 1.5.5 - Broken Access Control vulnerabilityCreativeMindsSolutions CM On Demand Search And Replace
- CVE-2025-54005WordPress SKT Page Builder plugin <= 4.9 - Broken Access Control vulnerabilitysonalsinha21 SKT Page Builder
- CVE-2025-54004WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.7.24 - Broken Access Control vulnerabilityWC Lovers WCFM – Frontend Manager for WooCommerce
- CVE-2025-49300WordPress Traveler Option Tree plugin <= 2.8 - Sensitive Data Exposure vulnerabilityShinetheme Traveler Option Tree
- CVE-2025-11991JetFormBuilder <= 3.5.3 - Missing Authorization to Unauthenticated Form Generationjetmonsters JetFormBuilder — Dynamic Blocks Form Builder
- CVE-2025-13439Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameterradykal Fancy Product Designer
- CVE-2025-62330HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive informationHCL Software DevOps Deploy
- CVE-2025-12809dokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposurewedevs Dokan Pro
- CVE-2025-13794Auto Featured Image <= 4.2.1 - Missing Authorization to Authenticated (Contributor+) Post Thumbnail Modificationthemeisle Auto Featured Image
- CVE-2025-14777Keycloak: keycloak idor in realm client creating/deletingRed Hat build of Keycloak
- CVE-2025-66357CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper check for unusual or exceptional conditions.Inaba Denki Sangyo Co. CHOCO TEI WATCHER mini
- CVE-2025-59479CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper restriction of rendered UI layers or frames.Inaba Denki Sangyo Co. CHOCO TEI WATCHER mini
- CVE-2025-13956LearnPress – WordPress LMS Plugin <= 4.3.1 - Missing Authorization to Unauthenticated Orders Statistics Exposurethimpress LearnPress – WordPress LMS Plugin for Create and…
- CVE-2025-14749Ningyuanda TC155 ONVIF PTZ Control device_service access controlNingyuanda TC155
- CVE-2025-14748Ningyuanda TC155 ONVIF Device Management Service device_service access controlNingyuanda TC155
- CVE-2025-62847QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-62849QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-14747Ningyuanda TC155 RTSP Service denial of serviceNingyuanda TC155
- CVE-2025-14746Ningyuanda TC155 RTSP Live Video Stream Endpoint improper authenticationNingyuanda TC155
- CVE-2025-68115Parse Server vulnerable to Cross-Site Scripting (XSS) via Unescaped Mustache Template Variablesparse-community parse-server · parse-server
- CVE-2025-68113ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replayaltcha-org altcha-lib · altcha-lib +4
- CVE-2025-67874ChurchCRM has plaintext password return in responseChurchCRM CRM
- CVE-2025-14758Initialization of a Resource with an Insecure Default in YAOOKALASCA YAOOK
- CVE-2025-67735Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncodernetty · io.netty:netty-codec-http
- CVE-2025-67722Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalationFreePBX framework
- CVE-2025-67715Weblate has Systematic User and Project Enumeration via Broken Authorization in REST API (IDOR)WeblateOrg weblate · weblate
- CVE-2025-67492Weblate's over‑permissive webhook endpoint enables mass repository updates and component enumerationWeblateOrg weblate · weblate
- CVE-2025-29231A stored cross-site scripting (XSS) vulnerability in the page_save component of Linksys E5600 V1.1.0.26 allows attackers to execute arbitrar
- CVE-2025-62862Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorre
- CVE-2025-64012InvoicePlane commit debb446c is vulnerable to Incorrect Access Control.
- CVE-2025-65427An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to
- CVE-2025-65581An open redirect vulnerability exists in the Account module in Volosoft ABP Framework >= 5.1.0 and < 10.0.0-rc.2.Volo.Abp.Account.Web
- CVE-2025-65589nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Attributes functionality.
- CVE-2025-65590nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Management area.
- CVE-2025-65591nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Currencies functionality.
- CVE-2025-65592nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality.