CVEs published in December 2025
5,238 vulnerabilities, 419 critical, 24 exploited.
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- 1panel-dev 1panel1Panel CSRF Panel Name Modification5.1 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)4.8 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- ibexa userIbexa User Bundle is missing password change validation8.5 High
- zitadelZitadel Discloses the Total Number of Instance Users5.3 Medium
- windscribe, windscribe for linux desktop app +1 moreWindscribe for Linux 'changeMTU' local privilege escalation7.3 High
- canonical apportUbuntu Apport Insecure File Permissions Vulnerability1.9 Low
- acquia content hub, drupal acquia content hub +1 moreAcquia Content Hub - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2025-1258.1 High
- miniflux project miniflux, miniflux v2 +1 moreMiniflux 2 has an Open Redirect via protocol-relative `redirect_url`5.3 Medium
- d-link dcs-f5614-l1D-Link CCTV camera model DCS-F5614-L1 Missing Authentication for Critical Function9.3 Critical
- jenkins redpen - pipeline reporter for jira, jenkins project redpen - pipeline reporter for jira plugin +1 moreJenkins Redpen - Pipeline Reporter for Jira Plugin has a path traversal vulnerability4.3 Medium
- jenkins hashicorp vault, jenkins project hashicorp vault plugin +1 moreJenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials4.3 Medium
- jenkins coverage, jenkins project coverage plugin +1 moreJenkins Coverage Plugin has a stored cross-site scripting (XSS) vulnerability5.4 Medium
- jenkins git client, jenkins project git client plugin +1 moreJenkins Git client Plugin has an OS command injection vulnerability on agents in Git client Plugin5.0 Medium
- jenkinsJenkins has a CSRF vulnerability on the login form3.5 Low
- jenkinsJenkins's build authorization token is stored and displayed in plain text4.3 Medium
- jenkinsJenkins's build authorization token is stored and displayed in plain text4.3 Medium
- Show moreLoading…