CVEs published in December 2025
5,238 vulnerabilities, 419 critical, 24 exploited.
- ruijie rg-ew1800gx pro firmware, rg-ew300n firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117...8.8 High
- ruijie rg-bcr600w firmwareOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute...8.8 High
- ruijie rg-eap602 firmware, rg-ew1200g pro firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4...8.8 High
- ruijie rg-ew300 pro firmware, x30 pro firmware +1 moreOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to...8.8 High
- ruijie rg-eap602 firmware, rg-ew300 pro firmware, x30 pro firmware +2 moreOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to...8.8 High
- ruijie rg-ew300t firmware, x30 pro firmware +1 moreOS Command Injection vulnerability in Ruijie X30 PRO V1 X30-PRO-V1_09241521 allowing attackers to...8.8 High
- ruijie rg-ew1800gx firmware, rg-ew300r firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing...8.8 High
- ruijie rg-ew1200g pro firmware, rg-ew1200r firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4...8.8 High
- ruijie m18-ew firmware, rg-ew300g pro firmware +1 moreOS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers...8.8 High
- ruijie rg-bcr860 firmwareOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute...8.8 High
- ruijie rg-bcr600w firmwareOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute...8.8 High
- ruijie rg-ew1200 firmware, rg-x60 firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200...8.8 High
- ruijie rg-ew1200 firmware, rg-ew300 pro firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200...8.8 High
- ruijie reyee os, rg-eap602 firmware, rg-est310 v2 firmware +1 more +3 moreOS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117...8.8 High
- ruijie reyee os, rg-eap602 firmware, rg-est310 v2 firmware +1 more +3 moreOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to...8.8 High
- ruijie rg-bcr600w firmwareOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute...8.8 High
- ruijie be50 firmware, rg-ew1300g firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1300G EW1300G V1.00/V2.00/V4.00 allowing...8.8 High
- ruijie rg-rap2200\(e\) firmware, ruijienetworks reyee os +1 moreOS Command Injection vulnerability in Ruijie RG-RAP2200(E) 247 2200 allowing attackers to execute...8.8 High
- digitaldruid hoteldruidHotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php...6.1 Medium
- foxit pdf editor, pdf reader +1 moreAn issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before...7.8 High
- foxit pdf editor, pdf reader +1 moreAn issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before...7.8 High
- foxit pdf editor, pdf reader +1 moreAn issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2....7.8 High
- foxit pdf editor, pdf reader +1 moreAn issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before...6.5 Medium
- foxit pdf editor, pdf reader +1 moreAn issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before...7.3 High
- foxit pdf editor, pdf reader +1 moreAn issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before...6.7 Medium
- foxit pdf editor, pdf reader +1 moreAn issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A...6.7 Medium
- foxit pdf editor, pdf reader +1 moreAn issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2....3.3 Low
- telepedia tableprogresstrackingTableProgressTracking's missing CSRF protection allows unauthorized state changes3.5 Low
- elastic endpointFreePBX Endpoint Manager's Weak Default Password Allows Unauthenticated Access in Endpoint Module REST API6.9 Medium
- auth0 nextjs-auth0Auth0 Next.js SDK has Improper Validation of Query Parameters5.7 Medium
- okta java management sdk, okta-sdk-java +1 moreRace condition in the Okta Java SDK8.4 High
- auth0 nextjs-auth0Auth0 Next.js SDK has Improper Request Caching Lookup5.4 Medium
- okta java management sdk, okta-sdk-java +1 moreImproper Memory Cleanup in the Okta Java SDK5.3 Medium
- chyrpChyrp 2.5.2 Stored Cross-Site Scripting Vulnerability via Post Title5.3 Medium
- popojicmsPopojiCMS 2.0.1 Remote Command Execution via Authenticated Metadata Settings8.6 High
- wbce cmsWBCE CMS 1.6.2 Remote Code Execution via Elfinder File Upload8.7 High
- s9y serendipitySerendipity 2.5.0 Remote Code Execution via Authenticated Media Upload8.6 High
- dotclearDotclear 2.29 Remote Code Execution via Authenticated File Upload8.7 High
- cmsimpleCMSimple 5.15 Remote Command Execution via Extensions Configuration8.6 High
- apprain, apprain cmf +1 moreappRain CMF 4.0.5 Authenticated Remote Code Execution via Filemanager Upload8.6 High
- db elettronica telecomunicazioni spa screen sft dab series - compact radio dab transmitter, dbbroadcast sft dab 600\/c firmware +1 moreScreen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness8.7 High
- db elettronica telecomunicazioni spa screen sft dab series - compact radio dab transmitter, dbbroadcast sft dab 600\/c firmware +1 moreScreen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness7.1 High
- db elettronica telecomunicazioni spa screen sft dab series - compact radio dab transmitter, dbbroadcast sft dab 015\/c firmware, sft dab 050\/c firmware +3 more +5 moreScreen SFT DAB 1.9.3 Authentication Bypass via IP Session Management5.1 Medium
- db elettronica telecomunicazioni spa screen sft dab series - compact radio dab transmitter, dbbroadcast sft dab 015\/c firmware, sft dab 050\/c firmware +3 more +5 moreScreen SFT DAB 1.9.3 Authentication Bypass via Admin Password Change8.6 High
- ubicod co., ltd. | medivision inc. medivision digital signage, medivision digital signage firmware +1 moreUBICOD Medivision Digital Signage 1.5.1 Authorization Bypass via User Privileges9.3 Critical
- ubicod co., ltd. | medivision inc. medivision digital signage, medivision digital signage firmware +1 moreUBICOD Medivision Digital Signage 1.5.1 Cross-Site Request Forgery via User Management8.6 High
- all-dynamics digital signage systemAll-Dynamics Digital Signage System 2.0.2 Cross-Site Request Forgery via User Management8.6 High
- howfor qihang media web digital signageQiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Disclosure8.7 High
- howfor qihang media web digital signageQiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Deletion8.8 High
- howfor qihang media web digital signageQiHang Media Web Digital Signage 3.0.9 Unauthenticated Remote Code Execution9.3 Critical
- Show moreLoading…