# CVEs published 2025-12-19

110 CVEs were published on December 19, 2025: 11 critical, 33 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2025-68613](https://cve.now/CVE-2025-68613.md): n8n Vulnerable to Remote Code Execution via Expression Injection (CVSS 10.0, KEV, n8n-io n8n · n8n)
- [CVE-2023-53953](https://cve.now/CVE-2023-53953.md): WebsiteBaker 2.13.3 Stored Cross-Site Scripting via Page Creation (CVSS 5.1, WebsiteBaker)
- [CVE-2023-53950](https://cve.now/CVE-2023-53950.md): InnovaStudio WYSIWYG Editor 5.4 Unrestricted File Upload via Filename Manipulation (CVSS 9.3, innovastudio WYSIWYG Editor)
- [CVE-2023-53959](https://cve.now/CVE-2023-53959.md): FileZilla Client 3.63.1 DLL Hijacking via Missing TextShaping.dll (CVSS 8.5, filezilla-project FileZilla Client)
- [CVE-2023-53958](https://cve.now/CVE-2023-53958.md): LDAP Tool Box Self Service Password 1.5.2 Account Takeover via HTTP Host Header (CVSS 8.6, ltb-project LDAP Tool Box Self Service Password)
- [CVE-2023-53957](https://cve.now/CVE-2023-53957.md): Kimai 1.30.10 SameSite Cookie Vulnerability Session Hijacking (CVSS 8.5, Kimai · kimai/kimai)
- [CVE-2023-53956](https://cve.now/CVE-2023-53956.md): Flatnux 2021-03.25 Authenticated File Upload Remote Code Execution (CVSS 8.7, altervista flatnux)
- [CVE-2023-53954](https://cve.now/CVE-2023-53954.md): ActFax 10.10 Unquoted Path Services Privilege Escalation Vulnerability (CVSS 8.5, ActFax)
- [CVE-2023-53952](https://cve.now/CVE-2023-53952.md): Dotclear 2.25.3 Authenticated Remote Code Execution via File Upload (CVSS 8.7, Dotclear)
- [CVE-2023-53951](https://cve.now/CVE-2023-53951.md): Ever Gauzy v0.281.9 JWT Authentication Weakness via HMAC Secret (CVSS 9.3, ever gauzy)
- [CVE-2023-53949](https://cve.now/CVE-2023-53949.md): AspEmail 5.6.0.2 Local Privilege Escalation via Binary Permission Vulnerability (CVSS 8.5, AspEmail)
- [CVE-2023-53948](https://cve.now/CVE-2023-53948.md): Lilac-Reloaded for Nagios 2.0.8 Remote Code Execution via Autodiscovery (CVSS 9.3, cat03 Lilac-Reloaded)
- [CVE-2023-53947](https://cve.now/CVE-2023-53947.md): OCS Inventory NG 2.3.0.0 Unquoted Service Path Privilege Escalation (CVSS 8.5, oscinventory OCS Inventory NG)
- [CVE-2023-53946](https://cve.now/CVE-2023-53946.md): Arcsoft PhotoStudio 6.0.0.172 Unquoted Service Path Privilege Escalation (CVSS 8.5, Arcsoft PhotoStudio)
- [CVE-2023-53945](https://cve.now/CVE-2023-53945.md): BrainyCP 1.0 Remote Code Execution via Authenticated Crontab Manipulation (CVSS 8.7, BrainyCP)
- [CVE-2025-68481](https://cve.now/CVE-2025-68481.md): FastAPI Users Vulnerable to 1-click Account Takeover in Apps Using FastAPI SSO (CVSS 5.9, fastapi-users)
- [CVE-2025-67712](https://cve.now/CVE-2025-67712.md): HTML injection issue in ArcGIS Web App Builder (CVSS 4.7, Esri ArcGIS Web AppBuilder {Developer Edition))
- [CVE-2025-14968](https://cve.now/CVE-2025-14968.md): code-projects Simple Stock System update.php sql injection (CVSS 6.9, code-projects Simple Stock System)
- [CVE-2025-12874](https://cve.now/CVE-2025-12874.md): HTTP Request Smuggling in Quest Coexistence Manager for Notes (CVSS 6.3, Quest Coexistence Manager for Notes)
- [CVE-2025-14967](https://cve.now/CVE-2025-14967.md): itsourcecode Student Management System candidates\_report.php sql injection (CVSS 6.9, itsourcecode Student Management System)
- [CVE-2025-14966](https://cve.now/CVE-2025-14966.md): FastAdmin Backend Controller Backend.php selectpage sql injection (CVSS 5.1, FastAdmin)
- [CVE-2025-14965](https://cve.now/CVE-2025-14965.md): 1541492390c yougou-mall ResourceController.java delete path traversal (CVSS 5.1, 1541492390c yougou-mall)
- [CVE-2025-14964](https://cve.now/CVE-2025-14964.md): TOTOLINK T10 cstecgi.cgi sprintf stack-based overflow (CVSS 9.3, TOTOLINK T10)
- [CVE-2025-14962](https://cve.now/CVE-2025-14962.md): code-projects Simple Stock System chatuser.php cross site scripting (CVSS 5.3, code-projects Simple Stock System)
- [CVE-2025-14961](https://cve.now/CVE-2025-14961.md): code-projects Simple Blood Donor Management System editedcampaign.php sql injection (CVSS 6.9, code-projects Simple Blood Donor Management System)
- [CVE-2025-14960](https://cve.now/CVE-2025-14960.md): code-projects Simple Blood Donor Management System editeddonor.php sql injection (CVSS 6.9, code-projects Simple Blood Donor Management System)
- [CVE-2025-14959](https://cve.now/CVE-2025-14959.md): code-projects Simple Stock System signup.php sql injection (CVSS 6.9, code-projects Simple Stock System)
- [CVE-2025-14958](https://cve.now/CVE-2025-14958.md): floooh sokol sokol\_gfx.h \_sg\_pipeline\_common\_init heap-based overflow (CVSS 4.8, floooh sokol)
- [CVE-2025-68430](https://cve.now/CVE-2025-68430.md): CVAT vulnerable to directory traversal via mounted share listing (CVSS 5.3, cvat-ai cvat)
- [CVE-2025-68478](https://cve.now/CVE-2025-68478.md): Langflow Vulnerable to External Control of File Name or Path (CVSS 7.1, langflow-ai langflow · langflow)
- [CVE-2025-14957](https://cve.now/CVE-2025-14957.md): WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereference (CVSS 4.8, WebAssembly Binaryen)
- [CVE-2025-68477](https://cve.now/CVE-2025-68477.md): Langflow vulnerable to Server-Side Request Forgery (CVSS 7.7, langflow-ai langflow · langflow)
- [CVE-2025-68457](https://cve.now/CVE-2025-68457.md): Orejime has executable code in HTML attributes (CVSS 0.6, boscop-fr orejime · orejime)
- [CVE-2025-14809](https://cve.now/CVE-2025-14809.md): Address bar spoofing risk in ArcSearch on Android (CVSS 7.4, The Browser Company of New York ArcSearch)
- [CVE-2025-14812](https://cve.now/CVE-2025-14812.md): Address bar spoofing risk in Arc Search on iOS (CVSS 7.5, The Browser Company of New York ArcSearch)
- [CVE-2025-66580](https://cve.now/CVE-2025-66580.md): Dive has Cross-Site Scripting vulnerability that can escalate to Remote Code Execution (CVSS 9.7, OpenAgentPlatform Dive)
- [CVE-2025-65035](https://cve.now/CVE-2025-65035.md): GLPI Database Inventory Plugin Vulnerable to Stored Object Injection (CVSS 6.4, pluginsGLPI databaseinventory)
- [CVE-2023-30971](https://cve.now/CVE-2023-30971.md): Gaia unauthenticated endpoints (CVSS 6.8, com.palantir.acme.gaia:gaia)
- [CVE-2024-49587](https://cve.now/CVE-2024-49587.md): Glutton V1 endpoints missing authentication (CVSS 9.1, com.palantir.gotham:glutton)
- [CVE-2025-14956](https://cve.now/CVE-2025-14956.md): WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow (CVSS 4.8, WebAssembly Binaryen)
- [CVE-2025-14955](https://cve.now/CVE-2025-14955.md): Open5GS PFCP handler.c ogs\_pfcp\_handle\_create\_pdr initialization (CVSS 6.3, Open5GS)
- [CVE-2025-58053](https://cve.now/CVE-2025-58053.md): Galette has a privilege escalation vulnerability (CVSS 4.9, galette)
- [CVE-2025-58052](https://cve.now/CVE-2025-58052.md): Galette has groups managers access control bypass on Members (CVSS 2.1, galette)
- [CVE-2025-14954](https://cve.now/CVE-2025-14954.md): Open5GS QER/FAR/URR/PDR context.c ogs\_pfcp\_qer\_find\_or\_add assertion (CVSS 6.3, Open5GS)
- [CVE-2025-14953](https://cve.now/CVE-2025-14953.md): Open5GS FAR-ID handler.c ogs\_pfcp\_handle\_create\_pdr null pointer dereference (CVSS 2.3, Open5GS)
- [CVE-2025-34433](https://cve.now/CVE-2025-34433.md): AVideo \< 20.1 Unauthenticated RCE via Predictable Installation Salt (CVSS 9.3, World Wide Broadcast Network AVideo)
- [CVE-2025-53922](https://cve.now/CVE-2025-53922.md): Galette has access control bypass (CVSS 1.3, galette)
- [CVE-2025-14952](https://cve.now/CVE-2025-14952.md): Campcodes Supplier Management System add\_category.php sql injection (CVSS 6.9, Campcodes Supplier Management System)
- [CVE-2025-14951](https://cve.now/CVE-2025-14951.md): code-projects Scholars Tracking System home.php sql injection (CVSS 6.9, code-projects Scholars Tracking System)
- [CVE-2025-14950](https://cve.now/CVE-2025-14950.md): code-projects Scholars Tracking System delete\_post.php sql injection (CVSS 6.9, code-projects Scholars Tracking System)
- [CVE-2025-14946](https://cve.now/CVE-2025-14946.md): Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri (CVSS 4.8, Red Hat libnbd · Red Hat Enterprise Linux +1)
- [CVE-2025-14881](https://cve.now/CVE-2025-14881.md): Insecure direct object reference (CVSS 3.8, pretix)
- [CVE-2025-14882](https://cve.now/CVE-2025-14882.md): Insecure direct object reference (CVSS 3.8, pretix-offlinesales · pretix)
- [CVE-2025-1928](https://cve.now/CVE-2025-1928.md): Improper Authentication in Restajet's Online Food Delivery System (CVSS 9.1, Restajet Information Technologies Online Food Delivery Syst…)
- [CVE-2025-1927](https://cve.now/CVE-2025-1927.md): CSRF in Restajet's Online Food Delivery System (CVSS 7.1, Restajet Information Technologies Online Food Delivery Syst…)
- [CVE-2025-1885](https://cve.now/CVE-2025-1885.md): Open Redirect in Restajet's Online Food Delivery System (CVSS 5.4, Restajet Information Technologies Online Food Delivery Syst…)
- [CVE-2025-14847](https://cve.now/CVE-2025-14847.md): Zlib compressed protocol header length confusion may allow memory read (CVSS 8.7, KEV, MongoDB Server)
- [CVE-2025-14455](https://cve.now/CVE-2025-14455.md): Image Photo Gallery Final Tiles Grid \<= 3.6.7 - Missing Authorization to Authenticated (Contributor+) Gallery Management (CVSS 5.4, wpchill Image Photo Gallery Final Tiles Grid)
- [CVE-2025-12361](https://cve.now/CVE-2025-12361.md): myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program \<= 2.9.7.1 - Missing Authorization to Sensitive Information Exposure (CVSS 4.3, saadiqbal Points Management System For Gamification, Ranks,…)
- [CVE-2025-66524](https://cve.now/CVE-2025-66524.md): Apache NiFi: Deserialization of Untrusted Data in GetAsanaObject Processor (CVSS 7.5, Apache Software Foundation Apache NiFi · org.apache.nifi:ni…)
- [CVE-2025-11747](https://cve.now/CVE-2025-11747.md): Colibri Page Builder \<= 1.0.345 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, extendthemes Colibri Page Builder)
- [CVE-2025-14151](https://cve.now/CVE-2025-14151.md): SlimStat Analytics \<= 5.3.2 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, veronalabs SlimStat Analytics)
- [CVE-2025-66522](https://cve.now/CVE-2025-66522.md): Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Digital IDs Common Name Field (CVSS 6.3, Foxit Software pdfonline.foxit.com)
- [CVE-2025-66521](https://cve.now/CVE-2025-66521.md): Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Trusted Certificates Feature (CVSS 6.3, Foxit Software pdfonline.foxit.com)
- [CVE-2025-66520](https://cve.now/CVE-2025-66520.md): Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Portfolio SVG Handling (CVSS 6.3, Foxit Software pdfonline.foxit.com)
- [CVE-2025-66519](https://cve.now/CVE-2025-66519.md): Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Layer Import Functionality (CVSS 6.3, Foxit Software pdfonline.foxit.com)
- [CVE-2025-66502](https://cve.now/CVE-2025-66502.md): Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Page Templates Feature (CVSS 6.3, Foxit Software pdfonline.foxit.com)
- [CVE-2025-66501](https://cve.now/CVE-2025-66501.md): Foxit pdfonline.foxit.com Stored Cross-Site Scripting in eSign Predefined Text Feature (CVSS 6.3, Foxit Software pdfonline.foxit.com)
- [CVE-2025-66500](https://cve.now/CVE-2025-66500.md): Foxit webplugins.foxit.com Stored Cross-Site Scripting via postMessage Vulnerability (CVSS 6.3, Foxit Software webplugins.foxit.com)
- [CVE-2025-66499](https://cve.now/CVE-2025-66499.md): Foxit PDF Reader PDF Parsing Heap-Based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Reader · Foxit Software Foxit PDF…)
- [CVE-2025-66498](https://cve.now/CVE-2025-66498.md): Foxit PDF Reader 3D Annotation Out-of-Bounds Memory Access Vulnerability (CVSS 5.3, Foxit Software Foxit PDF Reader · Foxit Software Foxit PDF…)
- [CVE-2025-66497](https://cve.now/CVE-2025-66497.md): Foxit PDF Reader 3D Annotation Out-of-Bounds Memory Access Vulnerability (CVSS 5.3, Foxit Software Foxit PDF Reader · Foxit Software Foxit PDF…)
- [CVE-2025-66496](https://cve.now/CVE-2025-66496.md): Foxit PDF Reader 3D Annotation Out-of-Bounds Memory Access Vulnerability (CVSS 5.3, Foxit Software Foxit PDF Reader · Foxit Software Foxit PDF…)
- [CVE-2025-66495](https://cve.now/CVE-2025-66495.md): Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Reader · Foxit Software Foxit PDF…)
- [CVE-2025-66494](https://cve.now/CVE-2025-66494.md): Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Reader · Foxit Software Foxit PDF…)
- [CVE-2025-66493](https://cve.now/CVE-2025-66493.md): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Foxit Software Foxit PDF Editor · Foxit Software Foxit PDF…)
- [CVE-2025-13008](https://cve.now/CVE-2025-13008.md): Session Token Disclosure in M-Files Web (CVSS 8.6, M-Files Server)
- [CVE-2025-13999](https://cve.now/CVE-2025-13999.md): HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request Forgery (CVSS 7.2, bplugins HTML5 Audio Player – The Ultimate No-Code Podcast,…)
- [CVE-2025-14449](https://cve.now/CVE-2025-14449.md): BA Book Everything \<= 1.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode (CVSS 6.4, bookingalgorithms BA Book Everything)
- [CVE-2025-13754](https://cve.now/CVE-2025-13754.md): Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin \<= 1.6.9.16 - Missing Authorization to Unauthenticated Sensitive Information Exposure (CVSS 5.3, croixhaug Appointment Booking Calendar — Simply Schedule Ap…)
- [CVE-2025-66174](https://cve.now/CVE-2025-66174.md): There is an improper authentication vulnerability in some Hikvision DVR products. (CVSS 6.5, Hikvision DS-7104HGHI-F1 · Hikvision DS-7204HGHI-F1)
- [CVE-2025-66173](https://cve.now/CVE-2025-66173.md): There is a privilege escalation vulnerability in some Hikvision DVR products. (CVSS 6.2, Hikvision DS-7104HGHI-F1 · Hikvision DS-7204HGHI-F1)
- [CVE-2025-14267](https://cve.now/CVE-2025-14267.md): Unintended temporary cached data included in a structure only copy intended to be empty of data (CVSS 5.6, M-Files Server)
- [CVE-2025-13307](https://cve.now/CVE-2025-13307.md): Ocean Modal Window \< 2.3.3 - Editor+ Remote Code Execution via Modal Conditions (CVSS 7.2, Ocean Modal Window)
- [CVE-2025-14546](https://cve.now/CVE-2025-14546.md): Versions of the package fastapi-sso before 0.19.0 are vulnerable to Cross-site Request Forgery (CSRF) due to the improper validation of the (CVSS 6.9, fastapi-sso)
- [CVE-2025-14940](https://cve.now/CVE-2025-14940.md): code-projects Scholars Tracking System delete\_user.php sql injection (CVSS 6.9, code-projects Scholars Tracking System)
- [CVE-2025-14939](https://cve.now/CVE-2025-14939.md): code-projects Online Appointment Booking System deletemanager.php sql injection (CVSS 5.1, code-projects Online Appointment Booking System)
- [CVE-2025-13941](https://cve.now/CVE-2025-13941.md): Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability (CVSS 8.8, Foxit Software Foxit PDF Reader · Foxit Software Foxit PDF…)
- [CVE-2025-52692](https://cve.now/CVE-2025-52692.md): Bypass Authentication (CVSS 8.8, Linksys E9450-SG)
- [CVE-2025-14910](https://cve.now/CVE-2025-14910.md): Edimax BR-6208AC FTP Daemon Service handle\_retr path traversal (CVSS 5.3, Edimax BR-6208AC)
- [CVE-2025-14909](https://cve.now/CVE-2025-14909.md): JeecgBoot SysUserOnlineController.java SysUserOnlineController user session (CVSS 5.3, JeecgBoot)
- [CVE-2025-14908](https://cve.now/CVE-2025-14908.md): JeecgBoot Multi-Tenant Management SysTenantController.java improper authentication (CVSS 5.3, JeecgBoot)
- [CVE-2025-11774](https://cve.now/CVE-2025-11774.md): Malicious Code Execution Vulnerability in the Software Keyboard Function of GENESIS64, ICONICS Suite, Mobile HMI, and MC Works64 (CVSS 8.2, Mitsubishi Electric GENESIS64 · Mitsubishi Electric Icon… +5)
- [CVE-2025-14900](https://cve.now/CVE-2025-14900.md): CodeAstro Real Estate Management System Administrator Endpoint userdelete.php sql injection (CVSS 5.1, CodeAstro Real Estate Management System)
- [CVE-2025-14899](https://cve.now/CVE-2025-14899.md): CodeAstro Real Estate Management System Administrator Endpoint stateadd.php sql injection (CVSS 5.1, CodeAstro Real Estate Management System)
- [CVE-2025-14733](https://cve.now/CVE-2025-14733.md): WatchGuard Firebox iked Out of Bounds Write Vulnerability (CVSS 9.3, KEV, WatchGuard Fireware OS)
- [CVE-2025-50681](https://cve.now/CVE-2025-50681.md): igmpproxy 0.4 before commit 2b30c36 allows remote attackers to cause a denial of service (application crash) via a crafted IGMPv3 membership (CVSS 7.5)
- [CVE-2025-63665](https://cve.now/CVE-2025-63665.md): An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON pay (CVSS 9.8)
- [CVE-2025-66905](https://cve.now/CVE-2025-66905.md): The Takes web framework's TkFiles take thru 2.0-SNAPSHOT fails to canonicalize HTTP request paths before resolving them against the filesyst (CVSS 7.5)
- [CVE-2025-66906](https://cve.now/CVE-2025-66906.md): Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges. (CVSS 6.1)
- [CVE-2025-66908](https://cve.now/CVE-2025-66908.md): Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an improper file type validation vulnerability in the OCR image upload functio (CVSS 5.3)
- [CVE-2025-66909](https://cve.now/CVE-2025-66909.md): Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerability. (CVSS 7.5)
- [CVE-2025-66910](https://cve.now/CVE-2025-66910.md): Turms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in the administrator authentication system. (CVSS 6.0)
- [CVE-2025-66911](https://cve.now/CVE-2025-66911.md): Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. (CVSS 6.5)
- [CVE-2025-67442](https://cve.now/CVE-2025-67442.md): EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. (CVSS 7.6)
- [CVE-2025-67842](https://cve.now/CVE-2025-67842.md): The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via the subdomain (CVSS 6.4, Mintlify Platform)
- [CVE-2025-67843](https://cve.now/CVE-2025-67843.md): A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attac (CVSS 8.3, Mintlify Platform)
- [CVE-2025-67844](https://cve.now/CVE-2025-67844.md): The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the re (CVSS 5.0, Mintlify Platform)
- [CVE-2025-67845](https://cve.now/CVE-2025-67845.md): A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inj (CVSS 6.4, Mintlify Platform)
- [CVE-2025-67846](https://cve.now/CVE-2025-67846.md): The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrad (CVSS 4.9, Mintlify Platform)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-12-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.