CVEs published in December 2025
5,238 vulnerabilities, 419 critical, 24 exploited.
- howfor qihang media web digital signageQiHang Media Web Digital Signage 3.0.9 Cleartext Credentials Disclosure8.7 High
- eibiz i-media server digital signageEIBIZ i-Media Server Digital Signage 3.8.0 Unauthenticated Configuration Disclosure8.7 High
- eibiz i-media server digital signageEibiz i-Media Server Digital Signage 3.8.0 Unauthenticated User Creation Vulnerability9.3 Critical
- eibiz i-media server digital signageEibiz i-Media Server Digital Signage 3.8.0 Directory Traversal Vulnerability8.7 High
- eibiz i-media server digital signageEibiz i-Media Server Digital Signage 3.8.0 Unauthenticated Privilege Escalation9.3 Critical
- spenetix ag fusion digital signageSpinetiX Fusion Digital Signage 3.4.8 Username Enumeration via Login Script6.9 Medium
- spenetix ag fusion digital signageSpinetiX Fusion Digital Signage 3.4.8 Unauthenticated Database Backup Disclosure8.7 High
- spenetix ag fusion digital signageSpinetiX Fusion Digital Signage 3.4.8 Cross-Site Request Forgery via User Creation6.9 Medium
- sony electronics inc. ipela network camera, sony snc-dh120t firmware +1 moreSony IPELA Network Camera 1.82.01 Remote Stack Buffer Overflow via ftpclient.cgi9.3 Critical
- brightsign, llc brightsign digital signage diagnostic web serverBrightSign Digital Signage Diagnostic Web Server 8.2.26 Unauthenticated SSRF6.9 Medium
- spenetix ag fusion digital signageSpinetiX Fusion Digital Signage 3.4.8 Authenticated Path Traversal via File Operations8.8 High
- pegasystems pega infinityPega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration where during user authentication process, a difference in response time could allow a remote unauthenticated use…5.3 Medium
- wbce cmsWBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups[] Parameter9.4 Critical
- zoom roomsZoom Rooms for Windows - Software Downgrade Protection Mechanism Failure7.8 High
- zoom roomsZoom Rooms for macOS - External Control of File Name or Path5.0 Medium
- mayuri-chan pyroforkPyrofork has a Path Traversal in download_media Method6.5 Medium
- formioFormio improperly authorized permission elevation through specially crafted request path8.7 High
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)9.3 Critical
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)9.3 Critical
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- mailenableMailEnable < 10.54 Cleartext Credential Storage in AUTH.TAB8.4 High
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)9.3 Critical
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- Show moreLoading…