CVEs published in December 2025
5,238 vulnerabilities, 419 critical, 24 exploited.
- utt 进取 512w, 512w firmware +1 moreUTT 进取 512W Endpoint formNatStaticMap strcpy buffer overflow9.3 Critical
- servify-express.js servify express, aarondoran servify-express +1 moreServify Express does not enforce rate limiting when parsing JSON8.7 High
- carmelo rental management systemcode-projects Rental Management System Log Transaction.java crlf injection5.3 Medium
- pgadmin 4, pgadmin.org pgadmin 4 +1 moreRemote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)9.1 Critical
- microsoft windows admin centerWindows Admin Center Elevation of Privilege Vulnerability7.8 High
- github enterprise serverInsufficient HTML Sanitization Allows User-Controlled DOM Elements to Overwrite Server-Initialized Data Islands and Trigger Unintended Server-Side POST Requests8.6 High
- remyandrade real estate property listing appSourceCodester Real Estate Property Listing App property.php unrestricted upload5.1 Medium
- campcodes retro basketball shoes online storeCampcodes Retro Basketball Shoes Online Store admin_running.php sql injection6.9 Medium
- wolfsslPotential non-constant time compiled code with Clang LLVM1.0 Low
- d-link dir-803, dlink dir-803 firmware +1 moreD-Link DIR-803 Configuration getcfg.php information disclosure6.9 Medium
- projectworlds advanced library management systemprojectworlds Advanced Library Management System view_book.php sql injection6.9 Medium
- azuracastAzuraCast Vulnerable to Pre-Auth File Deletion & Admin RCE3.1 Low
- linuxfoundation gardenctl, gardener gardenctl-v2 +1 moregardenctl is vulnerable to Command Injection when used with non‑POSIX shells8.0 High
- quic-goquic-go HTTP/3 QPACK Header Expansion DoS5.3 Medium
- libbiosig project libbiosigSeveral stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of...9.8 Critical
- libbiosig project libbiosigSeveral stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of...9.8 Critical
- libbiosig project libbiosigSeveral stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of...9.8 Critical
- libbiosig project libbiosigSeveral stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of...9.8 Critical
- libbiosig project libbiosigSeveral stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of...9.8 Critical
- libbiosig project libbiosigSeveral stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of...9.8 Critical
- tenda ch22, ch22 firmware +1 moreTenda CH22 L7Im frmL7ImForm buffer overflow8.7 High
- devolutions serverAuthentication Bypass by Spoofing vulnerability in HYPR Server allows Identity Spoofing.This...7.1 High
- baowzh hflybaowzh hfly upload_json.php unrestricted upload5.3 Medium
- baowzh hflybaowzh hfly download path traversal5.3 Medium
- baowzh hflybaowzh hfly delfile path traversal5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 path traversal was possible via file upload3.8 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute4.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's...2.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local...3.1 Low
- baowzh hflybaowzh hfly advtext add cross site scripting5.1 Medium
- powerjobPowerJob Network Request PingPongUtils.java checkConnectivity server-side request forgery5.3 Medium
- netiket information technologies ltd. co. applylogicIDOR in Netiket''s ApplyLogic7.6 High
- connectwise screenconnectImproper server-side validation in ScreenConnect extension framework9.1 Critical
- fortinet fortianalyzer, fortimanager, fortios +1 more +3 moreA key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2,...5.9 Medium
- yalantis ucropYalantis uCrop AndroidManifest.xml UCropActivity improper export of android application components4.8 Medium
- yalantis ucropYalantis uCrop URL com.yalantis.ucrop.task.BitmapLoadTask.java downloadFile server-side request forgery5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +15 more +17 moreLibsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)8.2 High
- aksis computer services and consulting inc. axonboardIDOR in Aksis Computer's AxOnboard7.6 High
- campcodes supplier management systemCampcodes Supplier Management System add_unit.php sql injection6.9 Medium
- campcodes supplier management systemCampcodes Supplier Management System add_distributor.php sql injection6.9 Medium
- teamviewer dex, digital employee experience +1 morePrivilege Escalation via Process Hijacking in 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction6.5 Medium
- teamviewer dex, digital employee experience +1 morePrivilege Escalation via Uncontrolled Search Path in 1E-Nomad-SetWorkRate instruction6.5 Medium
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-ConfigMgrConsoleExtensions Instructions6.8 Medium
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Nomad-PauseNomadJobQueue Instruction6.8 Medium
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-PatchInsights-Deploy Instruction6.8 Medium
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Explorer-TachyonCore-LogoffUser Instruction6.8 Medium
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Explorer-TachyonCore-FindFileBySizeAndHash Instruction7.2 High
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Nomad-GetCmContentLocations Instruction7.2 High
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Explorer-TachyonCore-CheckSimpleIoC Instruction7.2 High
- teamviewer dex, digital employee experience +1 moreCommand Injection in 1E-Explorer-TachyonCore-DevicesListeningOnAPort Instruction7.2 High
- Show moreLoading…