# CVEs published 2025-12-16

363 CVEs were published on December 16, 2025: 22 critical, 102 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-14766](https://cve.now/CVE-2025-14766.md): Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption (CVSS 8.8, Google Chrome)
- [CVE-2025-14765](https://cve.now/CVE-2025-14765.md): Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a cra (CVSS 8.8, Google Chrome)
- [CVE-2025-34288](https://cve.now/CVE-2025-34288.md): Nagios XI Privilege Escalation via Writable PHP Include Executed with Sudo (CVSS 8.6, Nagios Enterprises Nagios XI)
- [CVE-2025-68274](https://cve.now/CVE-2025-68274.md): SIPGO library has response DoS vulnerability via nil pointer dereference (CVSS 8.7, emiago sipgo · github.com/emiago/sipgo)
- [CVE-2025-64520](https://cve.now/CVE-2025-64520.md): GLPI vulnerable to unauthorized access to restricted Knowledge Base items through the API (CVSS 6.5, glpi-project glpi)
- [CVE-2025-53619](https://cve.now/CVE-2025-53619.md): An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. (CVSS 7.4, Grassroot DICOM)
- [CVE-2025-53618](https://cve.now/CVE-2025-53618.md): An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. (CVSS 7.4, Grassroot DICOM)
- [CVE-2025-52582](https://cve.now/CVE-2025-52582.md): An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024. (CVSS 7.4, Grassroot DICOM)
- [CVE-2025-48429](https://cve.now/CVE-2025-48429.md): An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. (CVSS 7.4, Grassroot DICOM)
- [CVE-2025-14466](https://cve.now/CVE-2025-14466.md): Güralp Systems Fortimus Series, Minimus Series, and Certimus Series have an Allocation of Resources Without Limits or Throttling vulnerability (CVSS 6.9, Güralp Systems Fortimus Series · Güralp Systems Minimus… +1)
- [CVE-2025-13532](https://cve.now/CVE-2025-13532.md): Weak Password Hash in Core Privileged Access Manager (BoKS) (CVSS 6.2, Fortra Core Privileged Access Manager)
- [CVE-2025-8872](https://cve.now/CVE-2025-8872.md): A specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted (CVSS 7.1, Arista Networks EOS)
- [CVE-2025-14553](https://cve.now/CVE-2025-14553.md): Password Hash Leak Could Lead to Unauthorized Access on Tapo App via Local Network (CVSS 7.0, TP-Link Systems TP-Link Tapo App)
- [CVE-2025-68270](https://cve.now/CVE-2025-68270.md): CourseLimitedStaff Role Allows Studio Access (CVSS 9.9, openedx edx-platform)
- [CVE-2025-68156](https://cve.now/CVE-2025-68156.md): Expr has Denial of Service via Unbounded Recursion in Builtin Functions (CVSS 7.5, expr-lang expr · github.com/expr-lang/expr)
- [CVE-2025-68155](https://cve.now/CVE-2025-68155.md): @vitejs/plugin-rsc has Arbitrary File Read via \`/\_\_vite\_rsc\_findSourceMapURL\` Endpoint on Development (CVSS 7.5, vitejs vite-plugin-react · @vitejs/plugin-rsc)
- [CVE-2025-68154](https://cve.now/CVE-2025-68154.md): Command Injection in fsSize() on Windows (CVSS 8.1, sebhildebrandt systeminformation · systeminformation)
- [CVE-2025-68150](https://cve.now/CVE-2025-68150.md): Parse Server has Server-Side Request Forgery (SSRF) in Instagram OAuth Adapter (CVSS 8.3, parse-community parse-server · parse-server)
- [CVE-2025-68146](https://cve.now/CVE-2025-68146.md): filelock has TOCTOU race condition that allows symlink attacks during lock file creation (CVSS 6.3, tox-dev filelock · filelock)
- [CVE-2025-46296](https://cve.now/CVE-2025-46296.md): An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access admini (CVSS 5.4, Claris FileMaker Server)
- [CVE-2025-46295](https://cve.now/CVE-2025-46295.md): Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input i (CVSS 9.8, Claris FileMaker Server)
- [CVE-2025-46294](https://cve.now/CVE-2025-46294.md): To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsD (CVSS 5.3, Claris FileMaker Server)
- [CVE-2025-68142](https://cve.now/CVE-2025-68142.md): PyMdown Extensions has ReDOS bug in Figure Capture extension (CVSS 2.7, facelessuser pymdown-extensions · pymdown-extensions)
- [CVE-2025-33235](https://cve.now/CVE-2025-33235.md): NVIDIA Resiliency Extension for Linux contains a vulnerability in the checkpointing core, where an attacker may cause a race condition. (CVSS 7.8, NVIDIA Resiliency Extension)
- [CVE-2025-33225](https://cve.now/CVE-2025-33225.md): NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names. (CVSS 8.4, NVIDIA Resiliency Extension)
- [CVE-2025-33210](https://cve.now/CVE-2025-33210.md): NVIDIA Isaac Lab contains a deserialization vulnerability. (CVSS 9.0, NVIDIA Isaac Lab)
- [CVE-2025-33226](https://cve.now/CVE-2025-33226.md): NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. (CVSS 7.8, NVIDIA NeMo Framework)
- [CVE-2025-33212](https://cve.now/CVE-2025-33212.md): NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a use (CVSS 7.3, NVIDIA NeMo Framework)
- [CVE-2023-53900](https://cve.now/CVE-2023-53900.md): Spip 4.1.10 Admin Account Spoofing via Malicious SVG Upload (CVSS 4.8, spip)
- [CVE-2023-53896](https://cve.now/CVE-2023-53896.md): D-Link DAP-1325 Hardware A1 Unauthenticated Configuration Download (CVSS 8.7, D-Link DAP-1325)
- [CVE-2023-53895](https://cve.now/CVE-2023-53895.md): PimpMyLog 1.7.14 Improper Access Control via Account Creation Endpoint (CVSS 9.3, PimpMyLog)
- [CVE-2023-53903](https://cve.now/CVE-2023-53903.md): WebsiteBaker 2.13.3 Stored Cross-Site Scripting via SVG File Upload (CVSS 5.1, WebsiteBaker)
- [CVE-2023-53902](https://cve.now/CVE-2023-53902.md): WebsiteBaker 2.13.3 Directory Traversal via Media Delete Endpoint (CVSS 7.0, WebsiteBaker)
- [CVE-2023-53901](https://cve.now/CVE-2023-53901.md): WBCE CMS 1.6.1 Cross-Site Scripting and Open Redirect Vulnerability (CVSS 7.1, WBCE CMS)
- [CVE-2023-53899](https://cve.now/CVE-2023-53899.md): PodcastGenerator 3.2.9 Blind Server-Side Request Forgery via XML Injection (CVSS 5.1, PodcastGenerator)
- [CVE-2023-53898](https://cve.now/CVE-2023-53898.md): Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting via Configuration (CVSS 5.1, Rukovoditel)
- [CVE-2023-53897](https://cve.now/CVE-2023-53897.md): Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting via Comments (CVSS 5.1, Rukovoditel)
- [CVE-2023-53894](https://cve.now/CVE-2023-53894.md): phpfm 1.7.9 Authentication Bypass via Type Juggling Vulnerability (CVSS 9.3, Dulldusk phpfm)
- [CVE-2025-68130](https://cve.now/CVE-2025-68130.md): tRPC has possible prototype pollution in \`experimental\_nextAppDirCaller\` (CVSS 8.5, trpc · @trpc/server)
- [CVE-2025-68116](https://cve.now/CVE-2025-68116.md): FileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handling (CVSS 8.9, error311 FileRise)
- [CVE-2025-59935](https://cve.now/CVE-2025-59935.md): GLPI Vulnerable to Unauthenticated Stored XSS on the Inventory page (CVSS 6.5, glpi-project glpi)
- [CVE-2025-37164](https://cve.now/CVE-2025-37164.md): A remote code execution issue exists in HPE OneView. (CVSS 10.0, KEV, Hewlett Packard Enterprise (HPE) HPE OneView)
- [CVE-2025-10450](https://cve.now/CVE-2025-10450.md): Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic. (CVSS 8.3, RTI Connext Professional)
- [CVE-2025-68322](https://cve.now/CVE-2025-68322.md): parisc: Avoid crash due to unaligned access in unwinder (no CVSS, Linux)
- [CVE-2025-68321](https://cve.now/CVE-2025-68321.md): page\_pool: always add GFP\_NOWARN for ATOMIC allocations (CVSS 7.5, Linux)
- [CVE-2025-68320](https://cve.now/CVE-2025-68320.md): lan966x: Fix sleeping in atomic context (CVSS 7.5, Linux)
- [CVE-2025-68319](https://cve.now/CVE-2025-68319.md): netconsole: Acquire su\_mutex before navigating configs hierarchy (no CVSS, Linux)
- [CVE-2025-68318](https://cve.now/CVE-2025-68318.md): clk: thead: th1520-ap: set all AXI clocks to CLK\_IS\_CRITICAL (no CVSS, Linux)
- [CVE-2025-68317](https://cve.now/CVE-2025-68317.md): io\_uring/zctx: check chained notif contexts (CVSS 7.8, Linux)
- [CVE-2025-68316](https://cve.now/CVE-2025-68316.md): scsi: ufs: core: Fix invalid probe error return value (no CVSS, Linux)
- [CVE-2025-68315](https://cve.now/CVE-2025-68315.md): f2fs: fix to detect potential corrupted nid in free\_nid\_list (CVSS 9.8, Linux)
- [CVE-2025-68314](https://cve.now/CVE-2025-68314.md): drm/msm: make sure last\_fence is always updated (CVSS 8.8, Linux)
- [CVE-2025-68313](https://cve.now/CVE-2025-68313.md): x86/CPU/AMD: Add RDSEED fix for Zen5 (CVSS 7.1, Linux)
- [CVE-2025-68312](https://cve.now/CVE-2025-68312.md): usbnet: Prevents free active kevent (no CVSS, Linux)
- [CVE-2025-68311](https://cve.now/CVE-2025-68311.md): tty: serial: ip22zilog: Use platform device for probing (no CVSS, Linux)
- [CVE-2025-68310](https://cve.now/CVE-2025-68310.md): s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (no CVSS, Linux)
- [CVE-2025-68309](https://cve.now/CVE-2025-68309.md): PCI/AER: Fix NULL pointer access by aer\_info (no CVSS, Linux)
- [CVE-2025-68269](https://cve.now/CVE-2025-68269.md): In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote projects over SSH (CVSS 5.4, JetBrains IntelliJ IDEA)
- [CVE-2025-68268](https://cve.now/CVE-2025-68268.md): In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings page (CVSS 5.4, JetBrains TeamCity)
- [CVE-2025-68267](https://cve.now/CVE-2025-68267.md): In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installa (CVSS 6.5, JetBrains TeamCity)
- [CVE-2025-68166](https://cve.now/CVE-2025-68166.md): In JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tab (CVSS 5.4, JetBrains TeamCity)
- [CVE-2025-68165](https://cve.now/CVE-2025-68165.md): In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup (CVSS 5.4, JetBrains TeamCity)
- [CVE-2025-68164](https://cve.now/CVE-2025-68164.md): In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test (CVSS 2.7, JetBrains TeamCity)
- [CVE-2025-68163](https://cve.now/CVE-2025-68163.md): In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall page (CVSS 3.5, JetBrains TeamCity)
- [CVE-2025-68162](https://cve.now/CVE-2025-68162.md): In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration (CVSS 2.7, JetBrains TeamCity)
- [CVE-2025-14432](https://cve.now/CVE-2025-14432.md): Poly Video - Sensitive Data Might Be Written to Log File (CVSS 8.1, HP Poly G7500 · HP Poly Studio G62 +14)
- [CVE-2025-62329](https://cve.now/CVE-2025-62329.md): HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability (CVSS 5.0, HCL Software DevOps Deploy / Launch)
- [CVE-2025-68308](https://cve.now/CVE-2025-68308.md): can: kvaser\_usb: leaf: Fix potential infinite loop in command parsers (no CVSS, Linux)
- [CVE-2025-68307](https://cve.now/CVE-2025-68307.md): can: gs\_usb: gs\_usb\_xmit\_callback(): fix handling of failed transmitted URBs (no CVSS, Linux)
- [CVE-2025-68306](https://cve.now/CVE-2025-68306.md): Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface (no CVSS, Linux)
- [CVE-2025-68305](https://cve.now/CVE-2025-68305.md): Bluetooth: hci\_sock: Prevent race in socket write iter and sock bind (no CVSS, Linux)
- [CVE-2025-68304](https://cve.now/CVE-2025-68304.md): Bluetooth: hci\_core: lookup hci\_conn on RX path on protocol side (CVSS 8.8, Linux)
- [CVE-2025-68303](https://cve.now/CVE-2025-68303.md): platform/x86: intel: punit\_ipc: fix memory corruption (CVSS 7.8, Linux)
- [CVE-2025-68302](https://cve.now/CVE-2025-68302.md): net: sxgbe: fix potential NULL dereference in sxgbe\_rx() (CVSS 7.5, Linux)
- [CVE-2025-68301](https://cve.now/CVE-2025-68301.md): net: atlantic: fix fragment overflow handling in RX path (CVSS 9.8, Linux)
- [CVE-2025-68300](https://cve.now/CVE-2025-68300.md): fs/namespace: fix reference leak in grab\_requested\_mnt\_ns (no CVSS, Linux)
- [CVE-2025-68299](https://cve.now/CVE-2025-68299.md): afs: Fix delayed allocation of a cell's anonymous key (no CVSS, Linux)
- [CVE-2025-68298](https://cve.now/CVE-2025-68298.md): Bluetooth: btusb: mediatek: Avoid btusb\_mtk\_claim\_iso\_intf() NULL deref (no CVSS, Linux)
- [CVE-2025-68297](https://cve.now/CVE-2025-68297.md): ceph: fix crash in process\_v2\_sparse\_read() for encrypted directories (no CVSS, Linux)
- [CVE-2025-68296](https://cve.now/CVE-2025-68296.md): drm, fbcon, vga\_switcheroo: Avoid race condition in fbcon setup (no CVSS, Linux)
- [CVE-2025-68295](https://cve.now/CVE-2025-68295.md): smb: client: fix memory leak in cifs\_construct\_tcon() (no CVSS, Linux)
- [CVE-2025-68294](https://cve.now/CVE-2025-68294.md): io\_uring/net: ensure vectored buffer node import is tied to notification (CVSS 7.8, Linux)
- [CVE-2025-68293](https://cve.now/CVE-2025-68293.md): mm/huge\_memory: fix NULL pointer deference when splitting folio (no CVSS, Linux)
- [CVE-2025-68292](https://cve.now/CVE-2025-68292.md): mm/memfd: fix information leak in hugetlb folios (no CVSS, Linux)
- [CVE-2025-68291](https://cve.now/CVE-2025-68291.md): mptcp: Initialise rcv\_mss before calling tcp\_send\_active\_reset() in mptcp\_do\_fastclose(). (no CVSS, Linux)
- [CVE-2025-68290](https://cve.now/CVE-2025-68290.md): most: usb: fix double free on late probe failure (no CVSS, Linux)
- [CVE-2025-68289](https://cve.now/CVE-2025-68289.md): usb: gadget: f\_eem: Fix memory leak in eem\_unwrap (no CVSS, Linux)
- [CVE-2025-68288](https://cve.now/CVE-2025-68288.md): usb: storage: Fix memory leak in USB bulk transport (no CVSS, Linux)
- [CVE-2025-68287](https://cve.now/CVE-2025-68287.md): usb: dwc3: Fix race condition between concurrent dwc3\_remove\_requests() call paths (no CVSS, Linux)
- [CVE-2025-68286](https://cve.now/CVE-2025-68286.md): drm/amd/display: Check NULL before accessing (CVSS 7.8, Linux)
- [CVE-2025-68285](https://cve.now/CVE-2025-68285.md): libceph: fix potential use-after-free in have\_mon\_and\_osd\_map() (CVSS 9.8, Linux)
- [CVE-2025-68284](https://cve.now/CVE-2025-68284.md): libceph: prevent potential out-of-bounds writes in handle\_auth\_session\_key() (CVSS 9.8, Linux)
- [CVE-2025-68283](https://cve.now/CVE-2025-68283.md): libceph: replace BUG\_ON with bounds check for map-\>max\_osd (CVSS 7.5, Linux)
- [CVE-2025-68282](https://cve.now/CVE-2025-68282.md): usb: gadget: udc: fix use-after-free in usb\_gadget\_state\_work (no CVSS, Linux)
- [CVE-2025-68281](https://cve.now/CVE-2025-68281.md): ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list (no CVSS, Linux)
- [CVE-2025-68266](https://cve.now/CVE-2025-68266.md): bfs: Reconstruct file type when loading from disk (no CVSS, Linux)
- [CVE-2025-68265](https://cve.now/CVE-2025-68265.md): nvme: fix admin request\_queue lifetime (CVSS 7.8, Linux)
- [CVE-2025-68264](https://cve.now/CVE-2025-68264.md): ext4: refresh inline data size before write operations (no CVSS, Linux)
- [CVE-2025-68263](https://cve.now/CVE-2025-68263.md): ksmbd: ipc: fix use-after-free in ipc\_msg\_send\_request (CVSS 9.8, Linux)
- [CVE-2025-68262](https://cve.now/CVE-2025-68262.md): crypto: zstd - fix double-free in per-CPU stream cleanup (no CVSS, Linux)
- [CVE-2025-68261](https://cve.now/CVE-2025-68261.md): ext4: add i\_data\_sem protection in ext4\_destroy\_inline\_data\_nolock() (CVSS 7.5, Linux)
- [CVE-2025-68260](https://cve.now/CVE-2025-68260.md): rust\_binder: fix race condition on death\_list (CVSS 7.8, Linux)
- [CVE-2025-68259](https://cve.now/CVE-2025-68259.md): KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (no CVSS, Linux)
- [CVE-2025-68258](https://cve.now/CVE-2025-68258.md): comedi: multiq3: sanitize config options in multiq3\_attach() (no CVSS, Linux)
- [CVE-2025-68257](https://cve.now/CVE-2025-68257.md): comedi: check device's attached status in compat ioctls (no CVSS, Linux)
- [CVE-2025-68256](https://cve.now/CVE-2025-68256.md): staging: rtl8723bs: fix out-of-bounds read in rtw\_get\_ie() parser (CVSS 8.8, Linux)
- [CVE-2025-68255](https://cve.now/CVE-2025-68255.md): staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing (CVSS 8.8, Linux)
- [CVE-2025-68254](https://cve.now/CVE-2025-68254.md): staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing (CVSS 7.1, Linux)
- [CVE-2025-68253](https://cve.now/CVE-2025-68253.md): mm: don't spin in add\_stack\_record when gfp flags don't allow (no CVSS, Linux)
- [CVE-2025-68252](https://cve.now/CVE-2025-68252.md): misc: fastrpc: Fix dma\_buf object leak in fastrpc\_map\_lookup (no CVSS, Linux)
- [CVE-2025-68251](https://cve.now/CVE-2025-68251.md): erofs: avoid infinite loops due to corrupted subpage compact indexes (no CVSS, Linux)
- [CVE-2025-68250](https://cve.now/CVE-2025-68250.md): hung\_task: fix warnings caused by unaligned lock pointers (CVSS 8.2, Linux)
- [CVE-2025-68249](https://cve.now/CVE-2025-68249.md): most: usb: hdm\_probe: Fix calling put\_device() before device initialization (no CVSS, Linux)
- [CVE-2025-68248](https://cve.now/CVE-2025-68248.md): vmw\_balloon: indicate success when effectively deflating during migration (no CVSS, Linux)
- [CVE-2025-68247](https://cve.now/CVE-2025-68247.md): posix-timers: Plug potential memory leak in do\_timer\_create() (no CVSS, Linux)
- [CVE-2025-68246](https://cve.now/CVE-2025-68246.md): ksmbd: close accepted socket when per-IP limit rejects connection (CVSS 7.5, Linux)
- [CVE-2025-68245](https://cve.now/CVE-2025-68245.md): net: netpoll: fix incorrect refcount handling causing incorrect cleanup (no CVSS, Linux)
- [CVE-2025-68244](https://cve.now/CVE-2025-68244.md): drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD (no CVSS, Linux)
- [CVE-2025-68243](https://cve.now/CVE-2025-68243.md): NFS: Check the TLS certificate fields in nfs\_match\_client() (CVSS 7.0, Linux)
- [CVE-2025-68242](https://cve.now/CVE-2025-68242.md): NFS: Fix LTP test failures when timestamps are delegated (no CVSS, Linux)
- [CVE-2025-68241](https://cve.now/CVE-2025-68241.md): ipv4: route: Prevent rt\_bind\_exception() from rebinding stale fnhe (CVSS 7.5, Linux)
- [CVE-2025-68240](https://cve.now/CVE-2025-68240.md): nilfs2: avoid having an active sc\_timer before freeing sci (no CVSS, Linux)
- [CVE-2025-68239](https://cve.now/CVE-2025-68239.md): binfmt\_misc: restore write access before closing files opened by open\_exec() (no CVSS, Linux)
- [CVE-2025-68238](https://cve.now/CVE-2025-68238.md): mtd: rawnand: cadence: fix DMA device NULL pointer dereference (no CVSS, Linux)
- [CVE-2025-68237](https://cve.now/CVE-2025-68237.md): mtdchar: fix integer overflow in read/write ioctls (no CVSS, Linux)
- [CVE-2025-68236](https://cve.now/CVE-2025-68236.md): scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3) (no CVSS, Linux)
- [CVE-2025-68235](https://cve.now/CVE-2025-68235.md): nouveau/firmware: Add missing kfree() of nvkm\_falcon\_fw::boot (no CVSS, Linux)
- [CVE-2025-68234](https://cve.now/CVE-2025-68234.md): io\_uring/cmd\_net: fix wrong argument types for skb\_queue\_splice() (CVSS 7.8, Linux)
- [CVE-2025-68233](https://cve.now/CVE-2025-68233.md): drm/tegra: Add call to put\_pid() (no CVSS, Linux)
- [CVE-2025-68232](https://cve.now/CVE-2025-68232.md): veth: more robust handing of race to avoid txq getting stuck (CVSS 7.5, Linux)
- [CVE-2025-68231](https://cve.now/CVE-2025-68231.md): mm/mempool: fix poisoning order\>0 pages with HIGHMEM (no CVSS, Linux)
- [CVE-2025-68230](https://cve.now/CVE-2025-68230.md): drm/amdgpu: fix gpu page fault after hibernation on PF passthrough (no CVSS, Linux)
- [CVE-2025-68229](https://cve.now/CVE-2025-68229.md): scsi: target: tcm\_loop: Fix segfault in tcm\_loop\_tpg\_address\_show() (no CVSS, Linux)
- [CVE-2025-68228](https://cve.now/CVE-2025-68228.md): drm/plane: Fix create\_in\_format\_blob() return value (no CVSS, Linux)
- [CVE-2025-68227](https://cve.now/CVE-2025-68227.md): mptcp: Fix proto fallback detection with BPF (no CVSS, Linux)
- [CVE-2025-68226](https://cve.now/CVE-2025-68226.md): smb: client: fix incomplete backport in cfids\_invalidation\_worker() (CVSS 8.8, Linux)
- [CVE-2025-68225](https://cve.now/CVE-2025-68225.md): lib/test\_kho: check if KHO is enabled (no CVSS, Linux)
- [CVE-2025-68223](https://cve.now/CVE-2025-68223.md): drm/radeon: delete radeon\_fence\_process in is\_signaled, no deadlock (no CVSS, Linux)
- [CVE-2025-68222](https://cve.now/CVE-2025-68222.md): pinctrl: s32cc: fix uninitialized memory in s32\_pinctrl\_desc (no CVSS, Linux)
- [CVE-2025-68221](https://cve.now/CVE-2025-68221.md): mptcp: fix address removal logic in mptcp\_pm\_nl\_rm\_addr (no CVSS, Linux)
- [CVE-2025-68220](https://cve.now/CVE-2025-68220.md): net: ethernet: ti: netcp: Standardize knav\_dma\_open\_channel to return NULL on error (no CVSS, Linux)
- [CVE-2025-68219](https://cve.now/CVE-2025-68219.md): cifs: fix memory leak in smb3\_fs\_context\_parse\_param error path (no CVSS, Linux)
- [CVE-2025-68218](https://cve.now/CVE-2025-68218.md): nvme-multipath: fix lockdep WARN due to partition scan work (CVSS 7.5, Linux)
- [CVE-2025-68217](https://cve.now/CVE-2025-68217.md): Input: pegasus-notetaker - fix potential out-of-bounds access (no CVSS, Linux)
- [CVE-2025-68216](https://cve.now/CVE-2025-68216.md): LoongArch: BPF: Disable trampoline for kernel module function trace (no CVSS, Linux)
- [CVE-2025-68215](https://cve.now/CVE-2025-68215.md): ice: fix PTP cleanup on driver removal in error path (CVSS 7.0, Linux)
- [CVE-2025-68214](https://cve.now/CVE-2025-68214.md): timers: Fix NULL function pointer race in timer\_shutdown\_sync() (no CVSS, Linux)
- [CVE-2025-68213](https://cve.now/CVE-2025-68213.md): idpf: fix possible vport\_config NULL pointer deref in remove (no CVSS, Linux)
- [CVE-2025-68212](https://cve.now/CVE-2025-68212.md): fs: Fix uninitialized 'offp' in statmount\_string() (CVSS 7.8, Linux)
- [CVE-2025-68211](https://cve.now/CVE-2025-68211.md): ksm: use range-walk function to jump over holes in scan\_get\_next\_rmap\_item (no CVSS, Linux)
- [CVE-2025-68210](https://cve.now/CVE-2025-68210.md): erofs: avoid infinite loop due to incomplete zstd-compressed data (no CVSS, Linux)
- [CVE-2025-68209](https://cve.now/CVE-2025-68209.md): mlx5: Fix default values in create CQ (no CVSS, Linux)
- [CVE-2025-68208](https://cve.now/CVE-2025-68208.md): bpf: account for current allocated stack depth in widen\_imprecise\_scalars() (CVSS 7.8, Linux)
- [CVE-2025-68207](https://cve.now/CVE-2025-68207.md): drm/xe/guc: Synchronize Dead CT worker with unbind (CVSS 7.8, Linux)
- [CVE-2025-68206](https://cve.now/CVE-2025-68206.md): netfilter: nft\_ct: add seqadj extension for natted connections (CVSS 7.5, Linux)
- [CVE-2025-68205](https://cve.now/CVE-2025-68205.md): ALSA: hda/hdmi: Fix breakage at probing nvhdmi-mcp driver (no CVSS, Linux)
- [CVE-2025-68204](https://cve.now/CVE-2025-68204.md): pmdomain: arm: scmi: Fix genpd leak on provider registration failure (no CVSS, Linux)
- [CVE-2025-68202](https://cve.now/CVE-2025-68202.md): sched\_ext: Fix unsafe locking in the scx\_dump\_state() (no CVSS, Linux)
- [CVE-2025-68201](https://cve.now/CVE-2025-68201.md): drm/amdgpu: remove two invalid BUG\_ON()s (no CVSS, Linux)
- [CVE-2025-68200](https://cve.now/CVE-2025-68200.md): bpf: Add bpf\_prog\_run\_data\_pointers() (no CVSS, Linux)
- [CVE-2025-68199](https://cve.now/CVE-2025-68199.md): codetag: debug: handle existing CODETAG\_EMPTY in mark\_objexts\_empty for slabobj\_ext (no CVSS, Linux)
- [CVE-2025-68198](https://cve.now/CVE-2025-68198.md): crash: fix crashkernel resource shrink (no CVSS, Linux)
- [CVE-2025-68197](https://cve.now/CVE-2025-68197.md): bnxt\_en: Fix null pointer dereference in bnxt\_bs\_trace\_check\_wrap() (no CVSS, Linux)
- [CVE-2025-68196](https://cve.now/CVE-2025-68196.md): drm/amd/display: Cache streams targeting link when performing LT automation (no CVSS, Linux)
- [CVE-2025-68194](https://cve.now/CVE-2025-68194.md): media: imon: make send\_packet() more robust (no CVSS, Linux)
- [CVE-2025-68193](https://cve.now/CVE-2025-68193.md): drm/xe/guc: Add devm release action to safely tear down CT (no CVSS, Linux)
- [CVE-2025-68192](https://cve.now/CVE-2025-68192.md): net: usb: qmi\_wwan: initialize MAC header offset in qmimux\_rx\_fixup (CVSS 9.8, Linux)
- [CVE-2025-68191](https://cve.now/CVE-2025-68191.md): udp\_tunnel: use netdev\_warn() instead of netdev\_WARN() (no CVSS, Linux)
- [CVE-2025-68190](https://cve.now/CVE-2025-68190.md): drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu\_atom\_execute\_table\_locked() (no CVSS, Linux)
- [CVE-2025-68189](https://cve.now/CVE-2025-68189.md): drm/msm: Fix GEM free for imported dma-bufs (CVSS 7.8, Linux)
- [CVE-2025-68188](https://cve.now/CVE-2025-68188.md): tcp: use dst\_dev\_rcu() in tcp\_fastopen\_active\_disable\_ofo\_check() (no CVSS, Linux)
- [CVE-2025-68187](https://cve.now/CVE-2025-68187.md): net: mdio: Check regmap pointer returned by device\_node\_to\_regmap() (no CVSS, Linux)
- [CVE-2025-68186](https://cve.now/CVE-2025-68186.md): ring-buffer: Do not warn in ring\_buffer\_map\_get\_reader() when reader catches up (no CVSS, Linux)
- [CVE-2025-68185](https://cve.now/CVE-2025-68185.md): nfs4\_setup\_readdir(): insufficient locking for -\>d\_parent-\>d\_inode dereferencing (no CVSS, Linux)
- [CVE-2025-68184](https://cve.now/CVE-2025-68184.md): drm/mediatek: Disable AFBC support on Mediatek DRM driver (CVSS 7.1, Linux)
- [CVE-2025-68183](https://cve.now/CVE-2025-68183.md): ima: don't clear IMA\_DIGSIG flag when setting or removing non-IMA xattr (CVSS 7.8, Linux)
- [CVE-2025-68182](https://cve.now/CVE-2025-68182.md): wifi: iwlwifi: fix potential use after free in iwl\_mld\_remove\_link() (CVSS 7.5, Linux)
- [CVE-2025-68181](https://cve.now/CVE-2025-68181.md): drm/radeon: Remove calls to drm\_put\_dev() (CVSS 7.8, Linux)
- [CVE-2025-68180](https://cve.now/CVE-2025-68180.md): drm/amd/display: Fix NULL deref in debugfs odm\_combine\_segments (no CVSS, Linux)
- [CVE-2025-68179](https://cve.now/CVE-2025-68179.md): s390: Disable ARCH\_WANT\_OPTIMIZE\_HUGETLB\_VMEMMAP (CVSS 7.8, Linux)
- [CVE-2025-68178](https://cve.now/CVE-2025-68178.md): blk-cgroup: fix possible deadlock while configuring policy (no CVSS, Linux)
- [CVE-2025-68177](https://cve.now/CVE-2025-68177.md): cpufreq/longhaul: handle NULL policy in longhaul\_exit (no CVSS, Linux)
- [CVE-2025-68176](https://cve.now/CVE-2025-68176.md): PCI: cadence: Check for the existence of cdns\_pcie::ops before using it (no CVSS, Linux)
- [CVE-2025-68175](https://cve.now/CVE-2025-68175.md): media: nxp: imx8-isi: Fix streaming cleanup on release (CVSS 7.8, Linux)
- [CVE-2025-68174](https://cve.now/CVE-2025-68174.md): amd/amdkfd: enhance kfd process check in switch partition (CVSS 7.8, Linux)
- [CVE-2025-68173](https://cve.now/CVE-2025-68173.md): ftrace: Fix softlockup in ftrace\_module\_enable (no CVSS, Linux)
- [CVE-2025-68172](https://cve.now/CVE-2025-68172.md): crypto: aspeed - fix double free caused by devm (no CVSS, Linux)
- [CVE-2025-68171](https://cve.now/CVE-2025-68171.md): x86/fpu: Ensure XFD state on signal delivery (CVSS 7.8, Linux)
- [CVE-2025-68170](https://cve.now/CVE-2025-68170.md): drm/radeon: Do not kfree() devres managed rdev (CVSS 7.8, Linux)
- [CVE-2025-68169](https://cve.now/CVE-2025-68169.md): netpoll: Fix deadlock in memory allocation under spinlock (no CVSS, Linux)
- [CVE-2025-68168](https://cve.now/CVE-2025-68168.md): jfs: fix uninitialized waitqueue in transaction manager (CVSS 7.8, Linux)
- [CVE-2025-68167](https://cve.now/CVE-2025-68167.md): gpiolib: fix invalid pointer access in debugfs (CVSS 7.8, Linux)
- [CVE-2025-40363](https://cve.now/CVE-2025-40363.md): net: ipv6: fix field-spanning memcpy warning in AH output (no CVSS, Linux)
- [CVE-2025-40362](https://cve.now/CVE-2025-40362.md): ceph: fix multifs mds auth caps issue (CVSS 8.8, Linux)
- [CVE-2025-40360](https://cve.now/CVE-2025-40360.md): drm/sysfb: Do not dereference NULL pointer in plane reset (no CVSS, Linux)
- [CVE-2025-40359](https://cve.now/CVE-2025-40359.md): perf/x86/intel: Fix KASAN global-out-of-bounds warning (no CVSS, Linux)
- [CVE-2025-40358](https://cve.now/CVE-2025-40358.md): riscv: stacktrace: Disable KASAN checks for non-current tasks (CVSS 7.1, Linux)
- [CVE-2025-40357](https://cve.now/CVE-2025-40357.md): net/smc: fix general protection fault in \_\_smc\_diag\_dump (no CVSS, Linux)
- [CVE-2025-40356](https://cve.now/CVE-2025-40356.md): spi: rockchip-sfc: Fix DMA-API usage (CVSS 7.8, Linux)
- [CVE-2025-40355](https://cve.now/CVE-2025-40355.md): sysfs: check visibility before changing group attribute ownership (no CVSS, Linux)
- [CVE-2025-40354](https://cve.now/CVE-2025-40354.md): drm/amd/display: increase max link count and fix link-\>enc NULL pointer access (CVSS 7.8, Linux)
- [CVE-2025-40353](https://cve.now/CVE-2025-40353.md): arm64: mte: Do not warn if the page is already tagged in copy\_highpage() (no CVSS, Linux)
- [CVE-2025-40352](https://cve.now/CVE-2025-40352.md): platform/mellanox: mlxbf-pmc: add sysfs\_attr\_init() to count\_clock init (no CVSS, Linux)
- [CVE-2025-40351](https://cve.now/CVE-2025-40351.md): hfsplus: fix KMSAN uninit-value issue in hfsplus\_delete\_cat() (no CVSS, Linux)
- [CVE-2025-40350](https://cve.now/CVE-2025-40350.md): net/mlx5e: RX, Fix generating skb from non-linear xdp\_buff for striding RQ (CVSS 9.8, Linux)
- [CVE-2025-40349](https://cve.now/CVE-2025-40349.md): hfs: validate record offset in hfsplus\_bmap\_alloc (CVSS 7.8, Linux)
- [CVE-2025-40348](https://cve.now/CVE-2025-40348.md): slab: Avoid race on slab-\>obj\_exts in alloc\_slab\_obj\_exts (no CVSS, Linux)
- [CVE-2025-40347](https://cve.now/CVE-2025-40347.md): net: enetc: fix the deadlock of enetc\_mdio\_lock (CVSS 7.5, Linux)
- [CVE-2025-40346](https://cve.now/CVE-2025-40346.md): arch\_topology: Fix incorrect error check in topology\_parse\_cpu\_capacity() (no CVSS, Linux)
- [CVE-2025-14780](https://cve.now/CVE-2025-14780.md): Xiongwei Smart Catering Cloud Platform dish\_trade\_detail\_get sql injection (CVSS 5.3, Xiongwei Smart Catering Cloud Platform)
- [CVE-2025-65076](https://cve.now/CVE-2025-65076.md): Arbitrary File Read and Delete via Path Traversal in WaveStore Server (CVSS 8.6, WaveStore Server)
- [CVE-2025-65075](https://cve.now/CVE-2025-65075.md): Arbitrary File Read and Delete via Path Traversal in WaveStore Server (CVSS 5.1, WaveStore Server)
- [CVE-2025-65074](https://cve.now/CVE-2025-65074.md): OS Command Injection via Path Traversal in WaveStore Server (CVSS 8.6, WaveStore Server)
- [CVE-2025-14443](https://cve.now/CVE-2025-14443.md): Ose-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanism (CVSS 6.4, Red Hat OpenShift Container Platform · github.com/openshift…)
- [CVE-2025-13474](https://cve.now/CVE-2025-13474.md): IDOR in Menulux Software's Mobile App (CVSS 7.5, Menulux Software Mobile App)
- [CVE-2025-13741](https://cve.now/CVE-2025-13741.md): Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories \<= 4.9.2 - Missing Authorization to Authenticated (Contributor+) Authors' Emails Exposure (CVSS 4.3, Schedule Post Changes With PublishPress Future: Unpublish,…)
- [CVE-2025-11220](https://cve.now/CVE-2025-11220.md): Elementor \<= 3.33.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Text Path (CVSS 6.4, elemntor Elementor Website Builder – more than just a page…)
- [CVE-2025-0836](https://cve.now/CVE-2025-0836.md): XProtect MIP API Missing Authorization (CVSS 5.3, Milestone Systems XProtect VMS)
- [CVE-2025-14002](https://cve.now/CVE-2025-14002.md): WPCOM Member \<= 1.7.16 - Authentication Bypass via Weak OTP (CVSS 8.1, whyun WPCOM Member)
- [CVE-2025-13231](https://cve.now/CVE-2025-13231.md): Fancy Product Designer | WooCommerce WordPress \<= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition (CVSS 6.5, radykal Fancy Product Designer)
- [CVE-2025-68088](https://cve.now/CVE-2025-68088.md): WordPress Huger for Elementor plugin \<= 1.1.5 - Broken Access Control vulnerability (CVSS 5.4, merkulove Huger for Elementor)
- [CVE-2025-68087](https://cve.now/CVE-2025-68087.md): WordPress Modalier for Elementor plugin \<= 1.0.6 - Broken Access Control vulnerability (CVSS 5.4, merkulove Modalier for Elementor)
- [CVE-2025-68086](https://cve.now/CVE-2025-68086.md): WordPress Reformer for Elementor plugin \<= 1.0.6 - Broken Access Control vulnerability (CVSS 5.4, merkulove Reformer for Elementor)
- [CVE-2025-68085](https://cve.now/CVE-2025-68085.md): WordPress Buttoner for Elementor plugin \<= 1.0.6 - Settings Change vulnerability (CVSS 5.4, merkulove Buttoner for Elementor)
- [CVE-2025-68084](https://cve.now/CVE-2025-68084.md): WordPress Ultimate Auction plugin \<= 4.3.3 - Broken Access Control vulnerability (CVSS 5.4, Nitesh Ultimate Auction)
- [CVE-2025-68083](https://cve.now/CVE-2025-68083.md): WordPress Meks Quick Plugin Disabler plugin \<= 1.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Meks Quick Plugin Disabler)
- [CVE-2025-68082](https://cve.now/CVE-2025-68082.md): WordPress Semrush Content Toolkit plugin \<= 1.1.32 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, SEMrush CY Semrush Content Toolkit)
- [CVE-2025-68080](https://cve.now/CVE-2025-68080.md): WordPress User Avatar - Reloaded plugin \<= 1.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Saad Iqbal User Avatar - Reloaded)
- [CVE-2025-68079](https://cve.now/CVE-2025-68079.md): WordPress Salient Shortcodes plugin \<= 1.5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ThemeNectar Salient Shortcodes)
- [CVE-2025-68078](https://cve.now/CVE-2025-68078.md): WordPress Salient Portfolio theme \<= 1.8.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ThemeNectar Salient Portfolio)
- [CVE-2025-68077](https://cve.now/CVE-2025-68077.md): WordPress Stockholm theme \<= 9.14.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Select-Themes Stockholm)
- [CVE-2025-68076](https://cve.now/CVE-2025-68076.md): WordPress Stockholm Core plugin \<= 2.4.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Select-Themes Stockholm Core)
- [CVE-2025-68071](https://cve.now/CVE-2025-68071.md): WordPress Essential Real Estate plugin \<= 5.3.2 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5, g5theme Essential Real Estate)
- [CVE-2025-68070](https://cve.now/CVE-2025-68070.md): WordPress VK Google Job Posting Manager plugin \<= 1.2.22 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Vektor VK Google Job Posting Manager)
- [CVE-2025-68068](https://cve.now/CVE-2025-68068.md): WordPress Stockholm theme \<= 9.14.1 - Local File Inclusion vulnerability (CVSS 7.5, Select-Themes Stockholm)
- [CVE-2025-68067](https://cve.now/CVE-2025-68067.md): WordPress Stockholm Core plugin \<= 2.4.6 - Local File Inclusion vulnerability (CVSS 7.5, Select-Themes Stockholm Core)
- [CVE-2025-68066](https://cve.now/CVE-2025-68066.md): WordPress Soledad theme \<= 8.7.0 - Local File Inclusion vulnerability (CVSS 7.5, PenciDesign Soledad)
- [CVE-2025-68065](https://cve.now/CVE-2025-68065.md): WordPress Hub Core plugin \< 6.0.2 - Local File Inclusion vulnerability (CVSS 7.5, LiquidThemes Hub Core)
- [CVE-2025-68062](https://cve.now/CVE-2025-68062.md): WordPress MinimogWP theme \<= 3.9.6 - Local File Inclusion vulnerability (CVSS 7.5, ThemeMove MinimogWP)
- [CVE-2025-68061](https://cve.now/CVE-2025-68061.md): WordPress EduMall theme \<= 4.4.7 - Local File Inclusion vulnerability (CVSS 7.5, ThemeMove EduMall)
- [CVE-2025-68056](https://cve.now/CVE-2025-68056.md): WordPress LBG Zoominoutslider plugin \<= 5.4.4 - SQL Injection vulnerability (CVSS 8.5, LambertGroup LBG Zoominoutslider)
- [CVE-2025-68055](https://cve.now/CVE-2025-68055.md): WordPress Hydra Booking plugin \<= 1.1.32 - SQL Injection vulnerability (CVSS 8.5, Themefic Hydra Booking)
- [CVE-2025-68054](https://cve.now/CVE-2025-68054.md): WordPress CountDown With Image or Video Background plugin \<= 1.5 - SQL Injection vulnerability (CVSS 8.5, LambertGroup CountDown With Image or Video Background)
- [CVE-2025-68053](https://cve.now/CVE-2025-68053.md): WordPress xPromoter plugin \<= 1.3.4 - SQL Injection vulnerability (CVSS 8.5, LambertGroup xPromoter)
- [CVE-2025-67999](https://cve.now/CVE-2025-67999.md): WordPress Newsletter plugin \<= 9.0.9 - SQL Injection vulnerability (CVSS 7.6, Stefano Lissa Newsletter)
- [CVE-2025-67989](https://cve.now/CVE-2025-67989.md): WordPress Kerge theme \<= 4.1.3 - Server Side Request Forgery (SSRF) vulnerability (CVSS 5.4, LMPixels Kerge)
- [CVE-2025-67986](https://cve.now/CVE-2025-67986.md): WordPress Document Library Lite plugin \<= 1.1.7 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9, Barn2 Plugins Document Library Lite)
- [CVE-2025-67985](https://cve.now/CVE-2025-67985.md): WordPress Document Library Lite plugin \<= 1.1.7 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, Barn2 Plugins Document Library Lite)
- [CVE-2025-67983](https://cve.now/CVE-2025-67983.md): WordPress WP Visitor Statistics (Real Time Traffic) plugin \<= 8.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, osama.esh WP Visitor Statistics)
- [CVE-2025-67976](https://cve.now/CVE-2025-67976.md): WordPress Watu Quiz plugin \<= 3.4.5 - Broken Access Control vulnerability (CVSS 6.5, Bob Watu Quiz)
- [CVE-2025-67965](https://cve.now/CVE-2025-67965.md): WordPress Homey Core plugin \<= 2.4.3 - Broken Access Control vulnerability (CVSS 5.3, favethemes Homey Core)
- [CVE-2025-67962](https://cve.now/CVE-2025-67962.md): WordPress Broken Link Checker plugin \<= 1.2.6 - SQL Injection vulnerability (CVSS 7.6, AIOSEO Plugin Team Broken Link Checker)
- [CVE-2025-67951](https://cve.now/CVE-2025-67951.md): WordPress WPZOOM Addons for Elementor plugin \<= 1.2.10 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, WPZOOM Addons for Elementor)
- [CVE-2025-67950](https://cve.now/CVE-2025-67950.md): WordPress All In One SEO Pack plugin \<= 4.9.1 - SQL Injection vulnerability (CVSS 8.5, Syed Balkhi All In One SEO Pack)
- [CVE-2025-67948](https://cve.now/CVE-2025-67948.md): WordPress SendPulse Email Marketing Newsletter plugin \<= 2.2.1 - Sensitive Data Exposure vulnerability (CVSS 4.3, SendPulse Email Marketing Newsletter)
- [CVE-2025-67929](https://cve.now/CVE-2025-67929.md): WordPress TI WooCommerce Wishlist plugin \<= 2.10.0 - Broken Access Control vulnerability (CVSS 5.3, templateinvaders TI WooCommerce Wishlist)
- [CVE-2025-67912](https://cve.now/CVE-2025-67912.md): WordPress Stars Testimonials plugin \<= 3.3.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Premio Stars Testimonials)
- [CVE-2025-66167](https://cve.now/CVE-2025-66167.md): WordPress Lottier plugin \<= 1.1.1 - Broken Access Control vulnerability (CVSS 5.4, merkulove Lottier)
- [CVE-2025-66166](https://cve.now/CVE-2025-66166.md): WordPress Lottier for Elementor plugin \<= 1.0.9 - Broken Access Control vulnerability (CVSS 5.4, merkulove Lottier for Elementor)
- [CVE-2025-66165](https://cve.now/CVE-2025-66165.md): WordPress Lottier for WPBakery plugin \<= 1.1.7 - Broken Access Control vulnerability (CVSS 5.4, merkulove Lottier for WPBakery)
- [CVE-2025-66164](https://cve.now/CVE-2025-66164.md): WordPress Laser plugin \<= 1.1.1 - Broken Access Control vulnerability (CVSS 5.4, merkulove Laser)
- [CVE-2025-66163](https://cve.now/CVE-2025-66163.md): WordPress Masker for Elementor plugin \<= 1.1.4 - Broken Access Control vulnerability (CVSS 5.4, merkulove Masker for Elementor)
- [CVE-2025-66162](https://cve.now/CVE-2025-66162.md): WordPress Spoter for Elementor plugin \<= 1.04 - Broken Access Control vulnerability (CVSS 5.4, merkulove Spoter for Elementor)
- [CVE-2025-66161](https://cve.now/CVE-2025-66161.md): WordPress Grider for Elementor plugin \<= 1.0.8 - Broken Access Control vulnerability (CVSS 5.4, merkulove Grider for Elementor)
- [CVE-2025-66147](https://cve.now/CVE-2025-66147.md): WordPress Coder for Elementor plugin \<= 1.0.13 - Broken Access Control vulnerability (CVSS 5.4, merkulove Coder for Elementor)
- [CVE-2025-66134](https://cve.now/CVE-2025-66134.md): WordPress FileBird Pro plugin \<= 6.5.1 - Broken Access Control vulnerability (CVSS 5.4, NinjaTeam FileBird Pro)
- [CVE-2025-66133](https://cve.now/CVE-2025-66133.md): WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin \<= 4.0.7 - Broken Access Control vulnerability (CVSS 5.3, WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy C…)
- [CVE-2025-66132](https://cve.now/CVE-2025-66132.md): WordPress FAPI Member plugin \<= 2.2.30 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3, FAPI Business s.r.o. FAPI Member)
- [CVE-2025-66131](https://cve.now/CVE-2025-66131.md): WordPress Yaad Sarig Payment Gateway For WC plugin \<= 2.2.11 - Broken Access Control vulnerability (CVSS 5.3, yaadsarig Yaad Sarig Payment Gateway For WC)
- [CVE-2025-66130](https://cve.now/CVE-2025-66130.md): WordPress WP Views Counter plugin \<= 2.1.2 - Broken Access Control vulnerability (CVSS 5.3, etruel WP Views Counter)
- [CVE-2025-66129](https://cve.now/CVE-2025-66129.md): WordPress Pochipp plugin \<= 1.18.0 - Broken Access Control vulnerability (CVSS 5.3, wppochipp Pochipp)
- [CVE-2025-66128](https://cve.now/CVE-2025-66128.md): WordPress Sendinblue for WooCommerce plugin \<= 4.0.49 - Broken Access Control vulnerability (CVSS 5.3, Brevo Sendinblue for WooCommerce)
- [CVE-2025-66127](https://cve.now/CVE-2025-66127.md): WordPress Essential Real Estate plugin \<= 5.3.2 - Broken Access Control vulnerability (CVSS 5.3, g5theme Essential Real Estate)
- [CVE-2025-66126](https://cve.now/CVE-2025-66126.md): WordPress Fix Media Library plugin \<= 2.0 - Sensitive Data Exposure vulnerability (CVSS 5.3, wowpress.host Fix Media Library)
- [CVE-2025-66125](https://cve.now/CVE-2025-66125.md): WordPress Ultimate Auction plugin \<= 4.3.3 - Sensitive Data Exposure vulnerability (CVSS 5.3, Nitesh Ultimate Auction)
- [CVE-2025-66124](https://cve.now/CVE-2025-66124.md): WordPress Leaky Paywall plugin \<= 4.22.6 - Broken Access Control vulnerability (CVSS 5.3, ZEEN101 Leaky Paywall)
- [CVE-2025-66122](https://cve.now/CVE-2025-66122.md): WordPress Stylish Price List plugin \<= 7.2.2 - Broken Access Control vulnerability (CVSS 5.3, Design Stylish Price List)
- [CVE-2025-66121](https://cve.now/CVE-2025-66121.md): WordPress SiteGround Security plugin \<= 1.5.8 - Broken Access Control vulnerability (CVSS 5.3, SiteGround Security)
- [CVE-2025-66120](https://cve.now/CVE-2025-66120.md): WordPress CatFolders plugin \<= 2.5.3 - Broken Access Control vulnerability (CVSS 5.3, CatFolders)
- [CVE-2025-64639](https://cve.now/CVE-2025-64639.md): WordPress WP Compress for MainWP plugin \<= 6.50.17 - Broken Access Control vulnerability (CVSS 5.3, WP Compress for MainWP)
- [CVE-2025-64638](https://cve.now/CVE-2025-64638.md): WordPress OnPay.io for WooCommerce plugin \<= 1.0.47 - Broken Access Control vulnerability (CVSS 5.3, OnPay.io for WooCommerce)
- [CVE-2025-64635](https://cve.now/CVE-2025-64635.md): WordPress Feeds for YouTube plugin \<= 2.4.0 - Broken Access Control vulnerability (CVSS 5.3, Syed Balkhi Feeds for YouTube)
- [CVE-2025-64634](https://cve.now/CVE-2025-64634.md): WordPress Avada theme \<= 7.13.2 - Broken Access Control vulnerability (CVSS 5.3, ThemeFusion Avada)
- [CVE-2025-64633](https://cve.now/CVE-2025-64633.md): WordPress Norebro Extra plugin \<= 1.6.8 - Content Injection vulnerability (CVSS 5.3, colabrio Norebro Extra)
- [CVE-2025-64632](https://cve.now/CVE-2025-64632.md): WordPress Google XML Sitemaps plugin \<= 4.1.22 - Broken Access Control vulnerability (CVSS 5.3, Auctollo Google XML Sitemaps)
- [CVE-2025-64631](https://cve.now/CVE-2025-64631.md): WordPress WCFM Marketplace plugin \<= 3.7.1 - Broken Access Control vulnerability (CVSS 4.9, WC Lovers WCFM Marketplace)
- [CVE-2025-64630](https://cve.now/CVE-2025-64630.md): WordPress Business Directory plugin \<= 6.4.19 - Broken Access Control vulnerability (CVSS 4.9, Strategy11 Team Business Directory)
- [CVE-2025-64253](https://cve.now/CVE-2025-64253.md): WordPress Health Check & Troubleshooting plugin \<= 1.7.1 - Path Traversal vulnerability (CVSS 4.9, WordPress.org Health Check & Troubleshooting)
- [CVE-2025-64251](https://cve.now/CVE-2025-64251.md): WordPress Ultimate Learning Pro plugin \<= 3.9.3 - Arbitrary Content Deletion vulnerability (CVSS 4.9, azzaroco Ultimate Learning Pro)
- [CVE-2025-64250](https://cve.now/CVE-2025-64250.md): WordPress Directorist plugin \<= 8.6.6 - Open Redirection vulnerability (CVSS 4.7, wpWax Directorist)
- [CVE-2025-64249](https://cve.now/CVE-2025-64249.md): WordPress Protect WP Admin plugin \<= 4.1 - Broken Access Control vulnerability (CVSS 4.3, WP-EXPERTS.IN Protect WP Admin)
- [CVE-2025-64248](https://cve.now/CVE-2025-64248.md): WordPress Request a Quote plugin \<= 2.5.3 - Broken Access Control vulnerability (CVSS 4.3, emarket-design Request a Quote)
- [CVE-2025-64247](https://cve.now/CVE-2025-64247.md): WordPress Read More & Accordion plugin \<= 3.5.5.1 - Broken Access Control vulnerability (CVSS 4.3, edmon.parker Read More & Accordion)
- [CVE-2025-64246](https://cve.now/CVE-2025-64246.md): WordPress Accessibility by AudioEye plugin \<= 1.0.49 - Broken Access Control vulnerability (CVSS 4.3, netopsae Accessibility by AudioEye)
- [CVE-2025-64245](https://cve.now/CVE-2025-64245.md): WordPress Import external attachments plugin \<= 1.5.12 - Broken Access Control vulnerability (CVSS 4.3, ryanpcmcquen Import external attachments)
- [CVE-2025-64244](https://cve.now/CVE-2025-64244.md): WordPress Restrict Elementor Widgets, Columns and Sections plugin \<= 1.12 - Broken Access Control vulnerability (CVSS 4.3, Codexpert Restrict Elementor Widgets, Columns and Sections)
- [CVE-2025-64243](https://cve.now/CVE-2025-64243.md): WordPress Directory Pro plugin \<= 2.5.6 - Broken Access Control vulnerability (CVSS 4.3, e-plugins Directory Pro)
- [CVE-2025-64242](https://cve.now/CVE-2025-64242.md): WordPress Easy Property Listings plugin \<= 3.5.22 - Broken Access Control vulnerability (CVSS 4.3, Merv Barrett Easy Property Listings)
- [CVE-2025-64241](https://cve.now/CVE-2025-64241.md): WordPress WP Coupons and Deals plugin \<= 3.2.4 - Broken Access Control vulnerability (CVSS 4.3, Imtiaz Rayhan WP Coupons and Deals)
- [CVE-2025-64240](https://cve.now/CVE-2025-64240.md): WordPress Freshchat plugin \<= 2.3.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Freshchat)
- [CVE-2025-64239](https://cve.now/CVE-2025-64239.md): WordPress RTL Tester plugin \<= 1.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Yoav Farhi RTL Tester)
- [CVE-2025-64238](https://cve.now/CVE-2025-64238.md): WordPress WPS Bidouille plugin \<= 1.33.1 - Broken Access Control vulnerability (CVSS 4.3, NicolasKulka WPS Bidouille)
- [CVE-2025-64237](https://cve.now/CVE-2025-64237.md): WordPress Quick Interest Slider plugin \<= 3.1.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Graham Quick Interest Slider)
- [CVE-2025-59009](https://cve.now/CVE-2025-59009.md): WordPress Listify theme \<= 3.2.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Astoundify Listify)
- [CVE-2025-59001](https://cve.now/CVE-2025-59001.md): WordPress Salient Core plugin \<= 3.0.8 - Broken Access Control vulnerability (CVSS 4.3, ThemeNectar Salient Core)
- [CVE-2025-58999](https://cve.now/CVE-2025-58999.md): WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin \<= 1.25 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, loopus WP Attractive Donations System - Easy Stripe & Paypa…)
- [CVE-2025-54045](https://cve.now/CVE-2025-54045.md): WordPress CM On Demand Search And Replace plugin \<= 1.5.5 - Broken Access Control vulnerability (CVSS 4.3, CreativeMindsSolutions CM On Demand Search And Replace)
- [CVE-2025-54005](https://cve.now/CVE-2025-54005.md): WordPress SKT Page Builder plugin \<= 4.9 - Broken Access Control vulnerability (CVSS 4.3, sonalsinha21 SKT Page Builder)
- [CVE-2025-54004](https://cve.now/CVE-2025-54004.md): WordPress WCFM – Frontend Manager for WooCommerce plugin \<= 6.7.24 - Broken Access Control vulnerability (CVSS 2.7, WC Lovers WCFM – Frontend Manager for WooCommerce)
- [CVE-2025-49300](https://cve.now/CVE-2025-49300.md): WordPress Traveler Option Tree plugin \<= 2.8 - Sensitive Data Exposure vulnerability (CVSS 2.7, Shinetheme Traveler Option Tree)
- [CVE-2025-11991](https://cve.now/CVE-2025-11991.md): JetFormBuilder \<= 3.5.3 - Missing Authorization to Unauthenticated Form Generation (CVSS 5.3, jetmonsters JetFormBuilder — Dynamic Blocks Form Builder)
- [CVE-2025-13439](https://cve.now/CVE-2025-13439.md): Fancy Product Designer | WooCommerce WordPress \<= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter (CVSS 5.9, radykal Fancy Product Designer)
- [CVE-2025-66635](https://cve.now/CVE-2025-66635.md): Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config. (CVSS 7.2, SEIKO EPSON Web Config)
- [CVE-2025-62330](https://cve.now/CVE-2025-62330.md): HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information (CVSS 5.9, HCL Software DevOps Deploy)
- [CVE-2025-12809](https://cve.now/CVE-2025-12809.md): dokan pro \<= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure (CVSS 5.3, wedevs Dokan Pro)
- [CVE-2025-13794](https://cve.now/CVE-2025-13794.md): Auto Featured Image \<= 4.2.1 - Missing Authorization to Authenticated (Contributor+) Post Thumbnail Modification (CVSS 4.3, themeisle Auto Featured Image)
- [CVE-2025-14252](https://cve.now/CVE-2025-14252.md): An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, and (CVSS 8.5, Advantech SUSI)
- [CVE-2025-14777](https://cve.now/CVE-2025-14777.md): Keycloak: keycloak idor in realm client creating/deleting (CVSS 6.0, Red Hat build of Keycloak)
- [CVE-2025-66357](https://cve.now/CVE-2025-66357.md): CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper check for unusual or exceptional conditions. (CVSS 5.3, Inaba Denki Sangyo Co. CHOCO TEI WATCHER mini)
- [CVE-2025-59479](https://cve.now/CVE-2025-59479.md): CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper restriction of rendered UI layers or frames. (CVSS 4.3, Inaba Denki Sangyo Co. CHOCO TEI WATCHER mini)
- [CVE-2025-61976](https://cve.now/CVE-2025-61976.md): CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper check for unusual or exceptional conditions. (CVSS 7.5, Inaba Denki Sangyo Co. CHOCO TEI WATCHER mini)
- [CVE-2025-13956](https://cve.now/CVE-2025-13956.md): LearnPress – WordPress LMS Plugin \<= 4.3.1 - Missing Authorization to Unauthenticated Orders Statistics Exposure (CVSS 5.3, thimpress LearnPress – WordPress LMS Plugin for Create and…)
- [CVE-2025-14749](https://cve.now/CVE-2025-14749.md): Ningyuanda TC155 ONVIF PTZ Control device\_service access control (CVSS 5.3, Ningyuanda TC155)
- [CVE-2025-14748](https://cve.now/CVE-2025-14748.md): Ningyuanda TC155 ONVIF Device Management Service device\_service access control (CVSS 5.3, Ningyuanda TC155)
- [CVE-2025-59385](https://cve.now/CVE-2025-59385.md): QTS, QuTS hero (CVSS 8.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2025-62847](https://cve.now/CVE-2025-62847.md): QTS, QuTS hero (CVSS 6.6, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2025-62848](https://cve.now/CVE-2025-62848.md): QTS, QuTS hero (CVSS 8.1, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2025-62849](https://cve.now/CVE-2025-62849.md): QTS, QuTS hero (CVSS 5.2, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2025-14747](https://cve.now/CVE-2025-14747.md): Ningyuanda TC155 RTSP Service denial of service (CVSS 5.3, Ningyuanda TC155)
- [CVE-2025-14746](https://cve.now/CVE-2025-14746.md): Ningyuanda TC155 RTSP Live Video Stream Endpoint improper authentication (CVSS 5.3, Ningyuanda TC155)
- [CVE-2025-68115](https://cve.now/CVE-2025-68115.md): Parse Server vulnerable to Cross-Site Scripting (XSS) via Unescaped Mustache Template Variables (CVSS 5.3, parse-community parse-server · parse-server)
- [CVE-2025-68113](https://cve.now/CVE-2025-68113.md): ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay (CVSS 6.5, altcha-org altcha-lib · altcha-lib +4)
- [CVE-2025-67751](https://cve.now/CVE-2025-67751.md): ChurchCRM has SQL Injection in Event Editor via \`EN\_tyid\` Parameter caused by an Incomplete Fix (CVSS 7.2, ChurchCRM CRM)
- [CVE-2025-67874](https://cve.now/CVE-2025-67874.md): ChurchCRM has plaintext password return in response (CVSS 6.9, ChurchCRM CRM)
- [CVE-2025-67744](https://cve.now/CVE-2025-67744.md): Mermaid XSS vulnerability leads to Remote Code Execution (CVSS 9.7, ThinkInAIXYZ deepchat)
- [CVE-2025-67748](https://cve.now/CVE-2025-67748.md): Fickling has Code Injection vulnerability via pty.spawn() (CVSS 7.1, trailofbits fickling · fickling)
- [CVE-2025-14758](https://cve.now/CVE-2025-14758.md): Initialization of a Resource with an Insecure Default in YAOOK (CVSS 6.5, ALASCA YAOOK)
- [CVE-2025-67747](https://cve.now/CVE-2025-67747.md): Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list (CVSS 7.1, trailofbits fickling · fickling)
- [CVE-2025-67736](https://cve.now/CVE-2025-67736.md): Authenticated SQL Injection in FreePBX tts (Text To Speech) module (CVSS 8.6, FreePBX tts)
- [CVE-2025-67735](https://cve.now/CVE-2025-67735.md): Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder (CVSS 6.5, netty · io.netty:netty-codec-http)
- [CVE-2025-67722](https://cve.now/CVE-2025-67722.md): Authenticated amportal search for ‘freepbx\_engine’ in non root writeable directories leads to potential privilege escalation (CVSS 5.7, FreePBX framework)
- [CVE-2025-66449](https://cve.now/CVE-2025-66449.md): ConvertX has Path Traversal that leads to Arbitrary File Write and Arbitrary Code Execution (CVSS 8.8, C4illin ConvertX)
- [CVE-2025-67715](https://cve.now/CVE-2025-67715.md): Weblate has Systematic User and Project Enumeration via Broken Authorization in REST API (IDOR) (CVSS 4.3, WeblateOrg weblate · weblate)
- [CVE-2025-67492](https://cve.now/CVE-2025-67492.md): Weblate's over‑permissive webhook endpoint enables mass repository updates and component enumeration (CVSS 5.3, WeblateOrg weblate · weblate)
- [CVE-2025-29231](https://cve.now/CVE-2025-29231.md): A stored cross-site scripting (XSS) vulnerability in the page\_save component of Linksys E5600 V1.1.0.26 allows attackers to execute arbitrar (CVSS 6.1)
- [CVE-2025-50398](https://cve.now/CVE-2025-50398.md): Mercury D196G d196gv1-cn-up\_2020-01-09\_11.21.44 is vulnerable to Buffer Overflow in the function sub\_404CAEDC via the parameter fac\_password (CVSS 9.8)
- [CVE-2025-50401](https://cve.now/CVE-2025-50401.md): Mercury D196G d196gv1-cn-up\_2020-01-09\_11.21.44 is vulnerable to Buffer Overflow in the function sub\_404CAEDC via the parameter password. (CVSS 9.8)
- [CVE-2025-52196](https://cve.now/CVE-2025-52196.md): Server-Side Request Forgery (SSRF) vulnerability in Ctera Portal 8.1.x (8.1.1417.24) allows remote attackers to induce the server to make ar (CVSS 7.5)
- [CVE-2025-62862](https://cve.now/CVE-2025-62862.md): Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorre (CVSS 4.6)
- [CVE-2025-62863](https://cve.now/CVE-2025-62863.md): Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorre (CVSS 9.8)
- [CVE-2025-62864](https://cve.now/CVE-2025-62864.md): Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorre (CVSS 9.8)
- [CVE-2025-63414](https://cve.now/CVE-2025-63414.md): A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06\_06 allows an unauthenticated remote attacker to achieve arbitrary com (CVSS 10.0)
- [CVE-2025-64012](https://cve.now/CVE-2025-64012.md): InvoicePlane commit debb446c is vulnerable to Incorrect Access Control. (CVSS 4.3)
- [CVE-2025-65318](https://cve.now/CVE-2025-65318.md): When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web (CVSS 9.1)
- [CVE-2025-65319](https://cve.now/CVE-2025-65319.md): When using the attachment interaction functionality, Blue Mail 1.140.103 and below saves documents to a file system without a Mark-of-the-We (CVSS 9.1)
- [CVE-2025-65427](https://cve.now/CVE-2025-65427.md): An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to (CVSS 6.5)
- [CVE-2025-65581](https://cve.now/CVE-2025-65581.md): An open redirect vulnerability exists in the Account module in Volosoft ABP Framework \>= 5.1.0 and \< 10.0.0-rc.2. (CVSS 5.3, Volo.Abp.Account.Web)
- [CVE-2025-65589](https://cve.now/CVE-2025-65589.md): nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Attributes functionality. (CVSS 6.1)
- [CVE-2025-65590](https://cve.now/CVE-2025-65590.md): nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Management area. (CVSS 5.4)
- [CVE-2025-65591](https://cve.now/CVE-2025-65591.md): nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Currencies functionality. (CVSS 5.4)
- [CVE-2025-65592](https://cve.now/CVE-2025-65592.md): nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality. (CVSS 6.1)
- [CVE-2025-65593](https://cve.now/CVE-2025-65593.md): nopCommerce 4.90.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Schedule Tasks functionality. (CVSS 8.8)
- [CVE-2025-65834](https://cve.now/CVE-2025-65834.md): Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-12-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.