# CVEs published 2025-12-17

188 CVEs were published on December 17, 2025: 29 critical, 57 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2025-14202](https://cve.now/CVE-2025-14202.md): Cross-Site Request Forgery (CSRF) Leading to Account Takeover via SVG File Upload (CVSS 8.2, LinkDing)
- [CVE-2025-14837](https://cve.now/CVE-2025-14837.md): ZZCMS Backend Website Settings siteconfig.php stripfxg code injection (CVSS 5.1, ZZCMS)
- [CVE-2025-68435](https://cve.now/CVE-2025-68435.md): Zerobyte has Authentication Bypass by Primary Weakness (CVSS 9.1, nicotsx zerobyte)
- [CVE-2025-14836](https://cve.now/CVE-2025-14836.md): ZZCMS User Data Storage user\_save.php cleartext storage in file (CVSS 5.1, ZZCMS)
- [CVE-2025-14834](https://cve.now/CVE-2025-14834.md): code-projects Simple Stock System checkuser.php sql injection (CVSS 5.3, code-projects Simple Stock System)
- [CVE-2025-68433](https://cve.now/CVE-2025-68433.md): Zed IDE MCP Context Server Configuration Arbitrary Code Execution (CVSS 7.8, zed-industries zed)
- [CVE-2023-53917](https://cve.now/CVE-2023-53917.md): Affiliate Me 5.0.1 SQL Injection Vulnerability via Admin Panel (CVSS 8.7, powerstonegh Affiliate Me)
- [CVE-2025-68432](https://cve.now/CVE-2025-68432.md): Zed IDE LSP Binary Configuration Arbitrary Code Execution (CVSS 7.8, zed-industries zed)
- [CVE-2023-53933](https://cve.now/CVE-2023-53933.md): Serendipity 2.4.0 Authenticated Remote Code Execution via File Upload (CVSS 8.7, s9y Serendipity)
- [CVE-2023-53932](https://cve.now/CVE-2023-53932.md): Serendipity 2.4.0 Stored Cross-Site Scripting via Admin Entry Creation (CVSS 5.1, s9y Serendipity)
- [CVE-2023-53931](https://cve.now/CVE-2023-53931.md): Revive Adserver 5.4.1 Cross-Site Scripting via Banner Advanced Settings (CVSS 5.1, revive-adserver)
- [CVE-2023-53930](https://cve.now/CVE-2023-53930.md): ProjectSend r1605 Insecure Direct Object Reference File Download Vulnerability (CVSS 7.1, projectSend)
- [CVE-2023-53929](https://cve.now/CVE-2023-53929.md): phpMyFAQ 3.1.12 CSV Injection via User Profile Export (CVSS 6.2, phpMyFAQ · thorsten/phpmyfaq +1)
- [CVE-2023-53928](https://cve.now/CVE-2023-53928.md): PHPFusion 9.10.30 Stored Cross-Site Scripting via File Manager Upload (CVSS 5.1, Php-fusion PHPFusion)
- [CVE-2023-53927](https://cve.now/CVE-2023-53927.md): PHPJabbers Simple CMS 5.0 Stored Cross-Site Scripting via Section Creation (CVSS 5.1, PHPJabbers Simple CMS)
- [CVE-2023-53926](https://cve.now/CVE-2023-53926.md): PHPJabbers Simple CMS 5.0 SQL Injection via Column Parameter (CVSS 8.7, PHPJabbers Simple CMS)
- [CVE-2023-53925](https://cve.now/CVE-2023-53925.md): UliCMS 2023.1 Stored Cross-Site Scripting via SVG File Upload (CVSS 5.1, Ulicms)
- [CVE-2023-53924](https://cve.now/CVE-2023-53924.md): UliCMS 2023.1-sniffing-vicuna Remote Code Execution via Avatar Upload (CVSS 8.7, Ulicms)
- [CVE-2023-53923](https://cve.now/CVE-2023-53923.md): UliCMS 2023.1 Privilege Escalation via Unauthenticated Admin Account Creation (CVSS 9.3, Ulicms)
- [CVE-2023-53922](https://cve.now/CVE-2023-53922.md): TinyWebGallery v2.5 Remote Code Execution via Unrestricted File Upload (CVSS 9.3, TinyWebGallery)
- [CVE-2023-53921](https://cve.now/CVE-2023-53921.md): SitemagicCMS 4.4.3 Remote Code Execution via Unrestricted File Upload (CVSS 8.7, SitemagicCMS)
- [CVE-2023-53920](https://cve.now/CVE-2023-53920.md): PodcastGenerator Stored Cross-Site Scripting via Podcast Title Field (CVSS 5.1, PodcastGenerator)
- [CVE-2023-53919](https://cve.now/CVE-2023-53919.md): PodcastGenerator Stored Cross-Site Scripting via Freebox Content Field (CVSS 5.1, PodcastGenerator)
- [CVE-2023-53918](https://cve.now/CVE-2023-53918.md): PodcastGenerator Stored Cross-Site Scripting via Episode Title Field (CVSS 5.1, PodcastGenerator)
- [CVE-2023-53916](https://cve.now/CVE-2023-53916.md): Zenphoto 1.6 Stored Cross-Site Scripting via User Postal Code Field (CVSS 5.1, Zenphoto)
- [CVE-2023-53915](https://cve.now/CVE-2023-53915.md): Zenphoto 1.6 Stored Cross-Site Scripting via Album Description (CVSS 5.1, Zenphoto)
- [CVE-2023-53914](https://cve.now/CVE-2023-53914.md): UliCMS 2023.1 Authentication Bypass via Mass Assignment Vulnerability (CVSS 9.3, Ulicms)
- [CVE-2023-53913](https://cve.now/CVE-2023-53913.md): Rukovoditel 3.3.1 CSV Injection via User Account Export (CVSS 6.2, Rukovoditel)
- [CVE-2023-53912](https://cve.now/CVE-2023-53912.md): USB Flash Drives Control 4.1.0.0 Unquoted Service Path Privilege Escalation (CVSS 8.5, BiniSoft USB Flash Drives Control)
- [CVE-2023-53911](https://cve.now/CVE-2023-53911.md): Textpattern CMS 4.8.8 Authenticated Stored Cross-Site Scripting via Article Excerpt (CVSS 5.1, Tmrswrr Textpattern CMS)
- [CVE-2023-53910](https://cve.now/CVE-2023-53910.md): WBCE CMS 1.6.1 Stored Cross-Site Scripting via Page Content (CVSS 5.1, wbce-cms WBCE CMS)
- [CVE-2023-53909](https://cve.now/CVE-2023-53909.md): WBCE CMS 1.6.1 SVG File Content Cross-Site Scripting (CVSS 5.1, wbce-cms WBCE CMS)
- [CVE-2023-53908](https://cve.now/CVE-2023-53908.md): HiSecOS 04.0.01 Privilege Escalation via User Role Modification (CVSS 8.7, Belden HiSecOS)
- [CVE-2023-53907](https://cve.now/CVE-2023-53907.md): Bludit \< 3.13.0 Authenticated Arbitrary File Download via Backup Plugin (CVSS 7.1, Bludit Backup Plugin)
- [CVE-2023-53906](https://cve.now/CVE-2023-53906.md): ProjectSend r1605 Stored Cross-Site Scripting via Custom Assets Page (CVSS 5.1, projectSend)
- [CVE-2023-53905](https://cve.now/CVE-2023-53905.md): ProjectSend r1605 CSV Injection via User Account Export Functionality (CVSS 6.2, projectSend)
- [CVE-2023-53904](https://cve.now/CVE-2023-53904.md): Xenforo 2.2.13 Authenticated Stored Cross-Site Scripting via Smilie Categories (CVSS 5.1, Xenforo)
- [CVE-2025-66029](https://cve.now/CVE-2025-66029.md): Open OnDemand affected by Apache proxy passing sensitive headers (CVSS 7.6, OSC ondemand)
- [CVE-2025-14833](https://cve.now/CVE-2025-14833.md): code-projects Online Appointment Booking System deletemanagerclinic.php sql injection (CVSS 6.9, code-projects Online Appointment Booking System)
- [CVE-2025-68429](https://cve.now/CVE-2025-68429.md): Storybook manager bundle may expose environment variables during build (CVSS 7.3, storybookjs storybook · storybook)
- [CVE-2025-68434](https://cve.now/CVE-2025-68434.md): opensourcepos has Cross-Site Request Forgery vulnerability that leads to Unauthorized Administrator Creation (CVSS 8.8, opensourcepos)
- [CVE-2025-68147](https://cve.now/CVE-2025-68147.md): opensourcepos has a Cross-site Scripting vulnerability (CVSS 8.1, opensourcepos)
- [CVE-2025-68145](https://cve.now/CVE-2025-68145.md): mcp-server-git has missing path validation when using --repository flag (CVSS 6.4, modelcontextprotocol servers · mcp-server-git)
- [CVE-2025-68144](https://cve.now/CVE-2025-68144.md): mcp-server-git argument injection in git\_diff and git\_checkout functions allows overwriting local files (CVSS 6.3, modelcontextprotocol servers · mcp-server-git)
- [CVE-2025-68143](https://cve.now/CVE-2025-68143.md): mcp-server-git's unrestricted git\_init tool allows repository creation at arbitrary filesystem locations (CVSS 6.5, modelcontextprotocol servers · mcp-server-git)
- [CVE-2025-68129](https://cve.now/CVE-2025-68129.md): Auth0-PHP SDK has Improper Audience Validation (CVSS 6.8, auth0-PHP · auth0/auth0-php)
- [CVE-2025-14832](https://cve.now/CVE-2025-14832.md): itsourcecode Online Cake Ordering System updateproduct.php sql injection (CVSS 6.9, itsourcecode Online Cake Ordering System)
- [CVE-2025-68118](https://cve.now/CVE-2025-68118.md): Potential Heap Out-of-Bounds Read in freerdp\_certificate\_data\_hash\_ via Unsafe \_snprintf Usage (CVSS 6.6, FreeRDP)
- [CVE-2025-68275](https://cve.now/CVE-2025-68275.md): ChurchCRM vulnerable to Stored XSS - Group name \> Person Listing (CVSS 9.2, ChurchCRM CRM)
- [CVE-2025-68401](https://cve.now/CVE-2025-68401.md): ChurchCRM has Stored Cross-Site Scripting (XSS) vulnerability that leads to session theft and account takeover (CVSS 6.2, ChurchCRM CRM)
- [CVE-2025-68400](https://cve.now/CVE-2025-68400.md): ChurchCRM vulnerable to time-based blind SQL Injection in ConfirmReportEmail.php (CVSS 9.3, ChurchCRM CRM)
- [CVE-2025-68399](https://cve.now/CVE-2025-68399.md): ChurchCRM has Stored Cross-Site Scripting (XSS) In GroupEditor.php (CVSS 2.0, ChurchCRM CRM)
- [CVE-2025-68112](https://cve.now/CVE-2025-68112.md): ChurchCRM has SQL injection in EditEventAttendees.php (CVSS 9.6, ChurchCRM CRM)
- [CVE-2025-68111](https://cve.now/CVE-2025-68111.md): ChurchCRM has SQL Injection in eGive Import Feature (CVSS 7.2, ChurchCRM CRM)
- [CVE-2025-68110](https://cve.now/CVE-2025-68110.md): ChurchCRM discloses database information on error message (CVSS 10.0, ChurchCRM CRM)
- [CVE-2025-68109](https://cve.now/CVE-2025-68109.md): ChurchCRM vulnerable to RCE with database restore functionality (CVSS 9.1, ChurchCRM CRM)
- [CVE-2025-67877](https://cve.now/CVE-2025-67877.md): ChurchCRM SQL Injection Vulnerability (CVSS 7.4, ChurchCRM CRM)
- [CVE-2025-67876](https://cve.now/CVE-2025-67876.md): ChurchCRM has Stored XSS in Group Role Name Leading to Admin Session Hijacking (CVSS 9.3, ChurchCRM CRM)
- [CVE-2025-67875](https://cve.now/CVE-2025-67875.md): ChurchCRM has stored XSS via Person Property Assignment Leading to Admin Session Hijacking (CVSS 8.5, ChurchCRM CRM)
- [CVE-2025-68114](https://cve.now/CVE-2025-68114.md): Capstone doesn't check vsnprintf return in SStream\_concat, allows stack buffer underflow and overflow (CVSS 4.8, capstone-engine capstone)
- [CVE-2025-67873](https://cve.now/CVE-2025-67873.md): Capstone doesn't check Skipdata length, leading to cs\_insn.bytes heap buffer overflow (CVSS 4.8, capstone-engine capstone)
- [CVE-2025-67493](https://cve.now/CVE-2025-67493.md): Homarr: missing input sanitization and possible privilege escalation through ldap search query injection (CVSS 7.5, homarr-labs homarr)
- [CVE-2025-43514](https://cve.now/CVE-2025-43514.md): The issue was addressed with improved handling of caches. (CVSS 5.5, Apple macOS)
- [CVE-2025-46281](https://cve.now/CVE-2025-46281.md): A logic issue was addressed with improved checks. (CVSS 8.4, Apple macOS)
- [CVE-2025-46278](https://cve.now/CVE-2025-46278.md): The issue was addressed with improved handling of caches. (CVSS 5.0, Apple macOS)
- [CVE-2025-46279](https://cve.now/CVE-2025-46279.md): A permissions issue was addressed with additional restrictions. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43535](https://cve.now/CVE-2025-43535.md): The issue was addressed with improved memory handling. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2025-46291](https://cve.now/CVE-2025-46291.md): A logic issue was addressed with improved validation. (CVSS 5.5, Apple macOS)
- [CVE-2025-43533](https://cve.now/CVE-2025-43533.md): The issue was addressed with improved bounds checks. (CVSS 5.7, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43529](https://cve.now/CVE-2025-43529.md): A use-after-free issue was addressed with improved memory management. (CVSS 8.8, KEV, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43475](https://cve.now/CVE-2025-43475.md): A logging issue was addressed with improved data redaction. (CVSS 5.5, Apple iOS and iPadOS)
- [CVE-2025-43526](https://cve.now/CVE-2025-43526.md): This issue was addressed with improved URL validation. (CVSS 9.8, Apple Safari · Apple macOS)
- [CVE-2025-46288](https://cve.now/CVE-2025-46288.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-43531](https://cve.now/CVE-2025-43531.md): A race condition was addressed with improved state handling. (CVSS 3.1, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-55254](https://cve.now/CVE-2025-55254.md): HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI) (CVSS 3.7, HCL Software BigFix Remote Control)
- [CVE-2025-46292](https://cve.now/CVE-2025-46292.md): This issue was addressed with additional entitlement checks. (CVSS 5.5, Apple iOS and iPadOS)
- [CVE-2025-43536](https://cve.now/CVE-2025-43536.md): A use-after-free issue was addressed with improved memory management. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +1)
- [CVE-2025-43428](https://cve.now/CVE-2025-43428.md): A configuration issue was addressed with additional restrictions. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2025-46283](https://cve.now/CVE-2025-46283.md): A logic issue was addressed with improved validation. (CVSS 5.5, Apple macOS)
- [CVE-2025-43541](https://cve.now/CVE-2025-43541.md): A type confusion issue was addressed with improved state handling. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2025-43501](https://cve.now/CVE-2025-43501.md): A buffer overflow issue was addressed with improved memory handling. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2025-46282](https://cve.now/CVE-2025-46282.md): The issue was addressed with additional permissions checks. (CVSS 5.5, Apple Safari · Apple macOS)
- [CVE-2025-46277](https://cve.now/CVE-2025-46277.md): A logging issue was addressed with improved data redaction. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2025-59849](https://cve.now/CVE-2025-59849.md): HCL BigFix Remote Control is vulnerable to an insecure CSP configuration (CVSS 4.7, HCL Software BigFix Remote Control)
- [CVE-2025-53000](https://cve.now/CVE-2025-53000.md): nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows (CVSS 8.5, jupyter nbconvert · nbconvert)
- [CVE-2025-66647](https://cve.now/CVE-2025-66647.md): RIOT OS has buffer overflow in gnrc\_ipv6\_ext\_frag\_reass (CVSS 1.7, RIOT-OS RIOT)
- [CVE-2025-14764](https://cve.now/CVE-2025-14764.md): Missing cryptographic key commitment in the Amazon S3 Encryption Client for Go may allow a user with write access to the S3 bucket to introd (CVSS 5.3, AWS S3 Encryption Client for Go · github.com/aws/amazon-… +2)
- [CVE-2025-14763](https://cve.now/CVE-2025-14763.md): Missing cryptographic key commitment in the Amazon S3 Encryption Client for Java may allow a user with write access to the S3 bucket to intr (CVSS 5.3, AWS S3 Encryption Client for Java · software.amazon.encrypt…)
- [CVE-2025-14762](https://cve.now/CVE-2025-14762.md): Missing cryptographic key commitment in the AWS SDK for Ruby may allow a user with write access to the S3 bucket to introduce a new EDK that (CVSS 5.3, AWS SDK for Ruby · aws-sdk-s3)
- [CVE-2025-14761](https://cve.now/CVE-2025-14761.md): Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that (CVSS 5.3, AWS SDK for PHP · aws/aws-sdk-php)
- [CVE-2025-14760](https://cve.now/CVE-2025-14760.md): Missing cryptographic key commitment in the AWS SDK for C++ may allow a user with write access to the S3 bucket to introduce a new EDK that (CVSS 5.3, AWS SDK for C++)
- [CVE-2025-14759](https://cve.now/CVE-2025-14759.md): Missing cryptographic key commitment in the Amazon S3 Encryption Client for .NET may allow a user with write access to the S3 bucket to intr (CVSS 5.3, AWS S3 Encryption Client for .NET · Amazon.Extensions.S3.En…)
- [CVE-2025-34438](https://cve.now/CVE-2025-34438.md): AVideo \< 20.1 IDOR Arbitrary Video Rotation (CVSS 5.3, World Wide Broadcast Network AVideo)
- [CVE-2025-34437](https://cve.now/CVE-2025-34437.md): AVideo \< 20.1 IDOR Arbitrary Comment Image Upload (CVSS 8.7, World Wide Broadcast Network AVideo)
- [CVE-2025-34435](https://cve.now/CVE-2025-34435.md): AVideo \< 20.1 IDOR Arbitrary File Deletion (CVSS 8.7, World Wide Broadcast Network AVideo)
- [CVE-2025-34436](https://cve.now/CVE-2025-34436.md): AVideo \< 20.1 IDOR Arbitrary File Upload (CVSS 8.7, World Wide Broadcast Network AVideo)
- [CVE-2025-34434](https://cve.now/CVE-2025-34434.md): AVideo \< 20.1 ImageGallery Plugin Unauthenticated File Upload and Deletion (CVSS 9.3, World Wide Broadcast Network AVideo)
- [CVE-2025-34439](https://cve.now/CVE-2025-34439.md): AVideo \< 20.1 Open Redirect via cancelUri Parameter (CVSS 4.8, World Wide Broadcast Network AVideo)
- [CVE-2025-34440](https://cve.now/CVE-2025-34440.md): AVideo \< 20.1 Open Redirect via siteRedirectUri Parameter (CVSS 4.8, World Wide Broadcast Network AVideo)
- [CVE-2025-34442](https://cve.now/CVE-2025-34442.md): AVideo \< 20.1 System Path Disclosure via Public API (CVSS 6.9, World Wide Broadcast Network AVideo)
- [CVE-2025-34441](https://cve.now/CVE-2025-34441.md): AVideo \< 20.1 User Information Disclosure via Public API (CVSS 6.9, World Wide Broadcast Network AVideo)
- [CVE-2025-66646](https://cve.now/CVE-2025-66646.md): RIOT-OS has NULL pointer dereference in gnrc\_ipv6\_ext\_frag\_reass (CVSS 1.7, RIOT-OS RIOT)
- [CVE-2025-66397](https://cve.now/CVE-2025-66397.md): ChurchCRM's Kiosk Manager Functions are vulnerable to Broken Access Control (CVSS 8.3, ChurchCRM CRM)
- [CVE-2025-66396](https://cve.now/CVE-2025-66396.md): ChurchCRM has SQL Injection in User Editor via \`type\` Parameter Key (CVSS 7.2, ChurchCRM CRM)
- [CVE-2025-66395](https://cve.now/CVE-2025-66395.md): SQL Injection in Event List via \`WhichType\` Parameter (CVSS 8.8, ChurchCRM CRM)
- [CVE-2025-62521](https://cve.now/CVE-2025-62521.md): ChurchCRM has unauthenticated RCE in its Install Wizard (CVSS 10.0, ChurchCRM CRM)
- [CVE-2025-14081](https://cve.now/CVE-2025-14081.md): Ultimate Member \<= 2.11.0 - Authenticated (Subscriber+) Profile Privacy Setting Bypass (CVSS 4.3, ultimatemember Ultimate Member – User Profile, Registration…)
- [CVE-2025-13537](https://cve.now/CVE-2025-13537.md): Live Composer – Free WordPress Website Builder \<= 2.0.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 6.4, livecomposer Live Composer – Free WordPress Website Builder)
- [CVE-2025-13217](https://cve.now/CVE-2025-13217.md): Ultimate Member \<= 2.11.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'value' (CVSS 6.4, ultimatemember Ultimate Member – User Profile, Registration…)
- [CVE-2025-13326](https://cve.now/CVE-2025-13326.md): Mattermost Desktop App fails to enable Hardened Runtime when packaged for Mac App Store (CVSS 3.9, Mattermost)
- [CVE-2025-13324](https://cve.now/CVE-2025-13324.md): Lack of Invalidation of Legacy Remote Cluster Invite Tokens After Confirmation (CVSS 3.7, Mattermost · github.com/mattermost/mattermost +4)
- [CVE-2025-13321](https://cve.now/CVE-2025-13321.md): Mattermost Desktop App logging sensitive information and fails to clear data on server deletion (CVSS 3.3, Mattermost · mattermost-desktop)
- [CVE-2025-12689](https://cve.now/CVE-2025-12689.md): DoS in Calls plugin via malformed UTF-8 in WebSocket request (CVSS 6.5, Mattermost · github.com/mattermost/mattermost-plugin-calls)
- [CVE-2025-20393](https://cve.now/CVE-2025-20393.md): Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability (CVSS 10.0, KEV, Cisco Secure Email)
- [CVE-2025-26381](https://cve.now/CVE-2025-26381.md): OpenBlue Mobile Web Application configuration issue for optional for OpenBlue Workplace (formerly FM Systems) (CVSS 6.5, Johnson Controls OpenBlue Workplace)
- [CVE-2025-43873](https://cve.now/CVE-2025-43873.md): iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - setFaultDebounce (CVSS 8.7, Johnson Control iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2…)
- [CVE-2025-14727](https://cve.now/CVE-2025-14727.md): NGINX Ingress Controller vulnerability (CVSS 8.3, F5 NGINX Ingress Controller)
- [CVE-2025-44005](https://cve.now/CVE-2025-44005.md): An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain p (CVSS 10.0, smallstep Step-CA · github.com/smallstep/certificates)
- [CVE-2025-14266](https://cve.now/CVE-2025-14266.md): CSRF in Ercom Cryptobox administration console (CVSS 0.6, Ercom Cryptobox)
- [CVE-2025-61736](https://cve.now/CVE-2025-61736.md): iSTAR- Improper Validation of Certificate Expiration (CVSS 7.1, Johnson Controls iSTAReX, iSTAR Edge, iSTAR Ultra LT, iSTAR…)
- [CVE-2025-14097](https://cve.now/CVE-2025-14097.md): Remote Code Execution Vulnerability in Radiometer Products (CVSS 7.2, Radiometer Medical Aps ABL90 FLEX and ABL90 FLEX PLUS An… +1)
- [CVE-2025-14096](https://cve.now/CVE-2025-14096.md): Credential Disclosure vulnerability in Radiometer Products (CVSS 8.4, Radiometer Medical Aps ABL90 FLEX and ABL90 FLEX PLUS An… +1)
- [CVE-2025-62690](https://cve.now/CVE-2025-62690.md): Open redirect in error page when link opened in new tab (CVSS 3.1, Mattermost · github.com/mattermost/mattermost/server/v8 +4)
- [CVE-2025-13352](https://cve.now/CVE-2025-13352.md): Mattermost GitHub Plugin allows unauthorized GitHub reactions via reaction forwarding hijacking (CVSS 3.0, Mattermost · github.com/mattermost/mattermost +5)
- [CVE-2025-62190](https://cve.now/CVE-2025-62190.md): CSRF Allows Call Initiation and Message Delivery (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-plugin-calls)
- [CVE-2025-67895](https://cve.now/CVE-2025-67895.md): Apache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 2 (CVSS 9.8, Apache Software Foundation Apache Airflow Providers Edge… +1)
- [CVE-2025-14095](https://cve.now/CVE-2025-14095.md): Privilege boundary violation in Radiometer Products (CVSS 6.8, Radiometer Medical Aps ABL90 FLEX and ABL90 FLEX PLUS An… +2)
- [CVE-2025-14101](https://cve.now/CVE-2025-14101.md): IDOR in GG Soft's PaperWork (CVSS 7.1, GG Soft Software Services PaperWork)
- [CVE-2025-14347](https://cve.now/CVE-2025-14347.md): Reflected XSS in Proliz's OBS (CVSS 6.3, Proliz Software OBS (Student Affairs Information System)0)
- [CVE-2025-14399](https://cve.now/CVE-2025-14399.md): Download Plugins and Themes from Dashboard \<= 1.9.6 - Cross-Site Request Forgery to Bulk Plugin/Theme Archival (CVSS 4.3, wpcodefactory Download Plugins and Themes in ZIP from Dashb…)
- [CVE-2025-12496](https://cve.now/CVE-2025-12496.md): Zephyr Project Manager \<= 3.3.203 - Authenticated (Custom+) Arbitrary File Read And Server-Side Request Forgery (CVSS 4.9, dylanjkotze Zephyr Project Manager)
- [CVE-2025-11924](https://cve.now/CVE-2025-11924.md): Ninja Forms – The Contact Form Builder That Grows With You \<= 3.13.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Unscoped Bearer Token (CVSS 7.5, kstover Ninja Forms – The Contact Form Builder That Grows W…)
- [CVE-2025-13750](https://cve.now/CVE-2025-13750.md): Converter for Media \<= 6.3.2 - Missing Authorization to Authenticated (Subscriber+) Optimized Image Deletion via regenerate-attachment REST Endpoint (CVSS 4.3, mateuszgbiorczyk Converter for Media – Optimize images | Co…)
- [CVE-2025-14061](https://cve.now/CVE-2025-14061.md): Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent \<= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Post Deletion (CVSS 5.3, wplegalpages Cookie Banner for GDPR / CCPA – WPLP Cookie Co…)
- [CVE-2025-14817](https://cve.now/CVE-2025-14817.md): Factory Mode App Exists Privilege Escalation Issue Allowing Third-Party Apps to Open ADB (CVSS 6.5, Tecno Pova6 Pro)
- [CVE-2025-14154](https://cve.now/CVE-2025-14154.md): Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss \<= 2.10.2 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1, wordplus Better Messages – Live Chat, Chat Rooms, Real-Time…)
- [CVE-2025-14385](https://cve.now/CVE-2025-14385.md): WP Recipe Maker \<= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, brechtvds WP Recipe Maker)
- [CVE-2025-13880](https://cve.now/CVE-2025-13880.md): WP Social Ninja - Embed Social Feeds, Customer Reviews, Chat Widgets (Google Reviews, YouTube Feed, Photo Feeds, and More) \<= 4.0.1 - Missing Authorization to Unauthenticated Plugin's Settings Disclosure And Modification (CVSS 6.5, adreastrian WP Social Ninja – Embed Social Feeds, User Revi…)
- [CVE-2025-13861](https://cve.now/CVE-2025-13861.md): HTML Forms – Simple WordPress Forms Plugin \<= 1.6.0 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1, linksoftware HTML Forms – Simple WordPress Forms Plugin)
- [CVE-2025-59374](https://cve.now/CVE-2025-59374.md): "UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced thro (CVSS 9.3, KEV, ASUS live update)
- [CVE-2025-11775](https://cve.now/CVE-2025-11775.md): An out-of-bounds read vulnerability has been identified in the asComSvc service. (CVSS 4.8, ASUS Armoury Crate)
- [CVE-2025-11901](https://cve.now/CVE-2025-11901.md): An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, (CVSS 7.0, ASUS B460 series · ASUS B560 series +11)
- [CVE-2025-64700](https://cve.now/CVE-2025-64700.md): Cross-site request forgery vulnerability exists in GROWI v7.3.3 and earlier. (CVSS 4.3, GROWI)
- [CVE-2025-14305](https://cve.now/CVE-2025-14305.md): Acer｜ListCheck.exe - Local Privilege Escalation (CVSS 8.5, Acer ListCheck.exe)
- [CVE-2025-14304](https://cve.now/CVE-2025-14304.md): ASRock, ASRockRack, ASRockInd｜Motherboard - Protection Mechanism Failure (CVSS 7.0, ASRock Intel 500 chipset motherboard · ASRockRack Intel… +10)
- [CVE-2025-13977](https://cve.now/CVE-2025-13977.md): Essential Addons for Elementor – Popular Elementor Templates & Widgets \<= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, wpdevteam Essential Addons for Elementor – Popular Elemento…)
- [CVE-2025-14303](https://cve.now/CVE-2025-14303.md): MSI｜Motherboard - Protection Mechanism Failure (CVSS 7.0, MSI Intel 600 chipset motherboard · MSI Intel 700 chipset m…)
- [CVE-2025-14302](https://cve.now/CVE-2025-14302.md): GIGABYTE｜Motherboard - Protection Mechanism Failure (CVSS 7.0, GIGABYTE intel 600 chipset Motherboard · GIGABYTE intel… +4)
- [CVE-2025-14801](https://cve.now/CVE-2025-14801.md): xiweicheng TMS create createComment cross site scripting (CVSS 4.8, xiweicheng TMS)
- [CVE-2025-11369](https://cve.now/CVE-2025-11369.md): Essential Blocks \<= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure (CVSS 4.3, wpdevteam Gutenberg Essential Blocks – Page Builder for Gut…)
- [CVE-2025-11009](https://cve.now/CVE-2025-11009.md): Information Disclosure Vulnerability in GT Designer3 (CVSS 5.1, Mitsubishi Electric GT Designer3 Version1)
- [CVE-2025-53524](https://cve.now/CVE-2025-53524.md): Fuji Electric Monitouch V-SFT-6 Out-of-bounds Write (CVSS 7.8, Fuji Electric Monitouch V-SFT-6)
- [CVE-2025-14700](https://cve.now/CVE-2025-14700.md): Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller (CVSS 9.9, Arcadia Technology Crafty Controller)
- [CVE-2025-14701](https://cve.now/CVE-2025-14701.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller (CVSS 7.1, Arcadia Technology Crafty Controller)
- [CVE-2022-23851](https://cve.now/CVE-2022-23851.md): Netaxis API Orchestrator (APIO) before 0.19.3 allows server side template injection (SSTI). (CVSS 9.8)
- [CVE-2024-29370](https://cve.now/CVE-2024-29370.md): In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allows an attacker to cause a Denial-of-Service (DoS) condition by crafting (CVSS 5.3, python-jose)
- [CVE-2024-29371](https://cve.now/CVE-2024-29371.md): In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token wi (CVSS 7.5, org.bitbucket.b\_c:jose4j)
- [CVE-2024-46060](https://cve.now/CVE-2024-46060.md): Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home direct (CVSS 7.8)
- [CVE-2024-46062](https://cve.now/CVE-2024-46062.md): Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability when installed outside the user's home direc (CVSS 7.8)
- [CVE-2025-53398](https://cve.now/CVE-2025-53398.md): The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions, (CVSS 7.8)
- [CVE-2025-53919](https://cve.now/CVE-2025-53919.md): An issue was discovered in the Portrait Dell Color Management application through 3.3.008 for Dell monitors, It creates a temporary folder, (CVSS 7.8)
- [CVE-2025-65185](https://cve.now/CVE-2025-65185.md): There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious users to enumerate users by enteri (CVSS 2.8)
- [CVE-2025-65203](https://cve.now/CVE-2025-65203.md): KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directiv (CVSS 7.1)
- [CVE-2025-65233](https://cve.now/CVE-2025-65233.md): Reflected cross-site scripting (XSS) in SLiMS (slims9\_bulian) before 9.6.0 via improper handling of $\_SERVER\['PHP\_SELF' \] in index.php/sysco (CVSS 6.1)
- [CVE-2025-65855](https://cve.now/CVE-2025-65855.md): The OTA firmware update mechanism in Netun Solutions HelpFlash IoT (firmware v18\_178\_221102\_ASCII\_PRO\_1R5\_50) uses hard-coded WiFi credentia (CVSS 6.6)
- [CVE-2025-66921](https://cve.now/CVE-2025-66921.md): A Cross-site scripting (XSS) vulnerability in Create/Update Item(s) Module in Open Source Point of Sale v3.4.1 allows remote attackers to in (CVSS 7.2)
- [CVE-2025-66923](https://cve.now/CVE-2025-66923.md): A Cross-site scripting (XSS) vulnerability in Create/Update Customer(s) in Open Source Point of Sale v3.4.1 allows remote attackers to injec (CVSS 7.2)
- [CVE-2025-66924](https://cve.now/CVE-2025-66924.md): A Cross-site scripting (XSS) vulnerability in Create/Update Item Kit(s) in Open Source Point of Sale v3.4.1 allows remote attackers to injec (CVSS 6.1)
- [CVE-2025-66953](https://cve.now/CVE-2025-66953.md): CSRF vulnerability in narda miteq Uplink Power Contril Unit UPC2 v.1.17 allows a remote attacker to execute arbitrary code via the Web-based (CVSS 8.8)
- [CVE-2025-67073](https://cve.now/CVE-2025-67073.md): A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause (CVSS 9.8)
- [CVE-2025-67074](https://cve.now/CVE-2025-67074.md): A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause (CVSS 6.5)
- [CVE-2025-67164](https://cve.now/CVE-2025-67164.md): An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute ar (CVSS 9.9, pagekit/pagekit)
- [CVE-2025-67165](https://cve.now/CVE-2025-67165.md): An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges. (CVSS 9.8, pagekit/pagekit)
- [CVE-2025-67168](https://cve.now/CVE-2025-67168.md): RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords. (CVSS 5.3)
- [CVE-2025-67170](https://cve.now/CVE-2025-67170.md): A reflected cross-site scripting (XSS) vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary code in the context of a user's (CVSS 6.1)
- [CVE-2025-67171](https://cve.now/CVE-2025-67171.md): Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal. (CVSS 7.5)
- [CVE-2025-67172](https://cve.now/CVE-2025-67172.md): RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse\_special\_tags() function. (CVSS 7.2)
- [CVE-2025-67173](https://cve.now/CVE-2025-67173.md): A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via (CVSS 6.8)
- [CVE-2025-67174](https://cve.now/CVE-2025-67174.md): A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal (CVSS 6.2)
- [CVE-2025-67285](https://cve.now/CVE-2025-67285.md): A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. (CVSS 7.3)
- [CVE-2025-67781](https://cve.now/CVE-2025-67781.md): An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. (CVSS 9.9)
- [CVE-2025-67787](https://cve.now/CVE-2025-67787.md): An issue was discovered in 25.1.2 before 25.1.5. (CVSS 9.6)
- [CVE-2025-67789](https://cve.now/CVE-2025-67789.md): An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. (CVSS 5.3)
- [CVE-2025-67790](https://cve.now/CVE-2025-67790.md): An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. (CVSS 9.8)
- [CVE-2025-67791](https://cve.now/CVE-2025-67791.md): An issue was discovered in DriveLock 24.1 through 24.1.\*, 24.2 through 24.2.\*, and 25.1 through 25.1.\*. (CVSS 9.8)
- [CVE-2025-67792](https://cve.now/CVE-2025-67792.md): An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. (CVSS 8.8)
- [CVE-2025-67793](https://cve.now/CVE-2025-67793.md): An issue was discovered in DriveLock 24.1 through 24.1.\*, 24.2 through 24.2.\*, and 25.1 before 25.1.6. (CVSS 9.8)
- [CVE-2025-67794](https://cve.now/CVE-2025-67794.md): An issue was discovered in DriveLock 24.1 through 24.1.\*, 24.2 before 24.2.8, and 25.1 before 25.1.6. (CVSS 8.4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-12-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.