CVEs published in December 2025
5,238 vulnerabilities, 419 critical, 24 exploited.
- error311 fileriseFileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handling8.9 High
- glpi-project glpiGLPI Vulnerable to Unauthenticated Stored XSS on the Inventory page6.5 Medium
- hewlett packard enterprise (hpe) hpe oneview, oneview +1 moreA remote code execution issue exists in HPE OneView.10.0 Critical
- rti connext professionalExposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic.8.3 High
- linuxparisc: Avoid crash due to unaligned access in unwinder5.7 Medium
- linuxpage_pool: always add GFP_NOWARN for ATOMIC allocations7.5 High
- linuxlan966x: Fix sleeping in atomic context7.5 High
- linuxnetconsole: Acquire su_mutex before navigating configs hierarchyNo score
- linuxclk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICALNo score
- linuxio_uring/zctx: check chained notif contexts7.8 High
- linuxscsi: ufs: core: Fix invalid probe error return valueNo score
- linuxf2fs: fix to detect potential corrupted nid in free_nid_list9.8 Critical
- linuxdrm/msm: make sure last_fence is always updated8.8 High
- linuxx86/CPU/AMD: Add RDSEED fix for Zen57.1 High
- linuxusbnet: Prevents free active kevent5.4 Medium
- linuxtty: serial: ip22zilog: Use platform device for probingNo score
- linuxs390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump7.8 High
- linuxPCI/AER: Fix NULL pointer access by aer_info7.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote...5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings page5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub...6.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tab5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test2.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall page3.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project...2.7 Low
- hp poly tcos, poly videoos, hp inc poly eagleeye cube +15 more +17 morePoly Video - Sensitive Data Might Be Written to Log File8.1 High
- hcltechsw hcl devops deploy, hcl launch, hcl software devops deploy / launch +2 moreHCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability5.0 Medium
- linuxcan: kvaser_usb: leaf: Fix potential infinite loop in command parsers5.1 Medium
- linuxcan: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs4.1 Medium
- linuxBluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interfaceNo score
- linuxBluetooth: hci_sock: Prevent race in socket write iter and sock bind7.8 High
- linuxBluetooth: hci_core: lookup hci_conn on RX path on protocol side8.8 High
- linuxplatform/x86: intel: punit_ipc: fix memory corruption7.8 High
- linuxnet: sxgbe: fix potential NULL dereference in sxgbe_rx()7.5 High
- linuxnet: atlantic: fix fragment overflow handling in RX path9.8 Critical
- linuxfs/namespace: fix reference leak in grab_requested_mnt_nsNo score
- linuxafs: Fix delayed allocation of a cell's anonymous keyNo score
- linuxBluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL derefNo score
- linuxceph: fix crash in process_v2_sparse_read() for encrypted directories6.8 Medium
- linuxdrm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup7.8 High
- linuxsmb: client: fix memory leak in cifs_construct_tcon()4.8 Medium
- linuxio_uring/net: ensure vectored buffer node import is tied to notification7.8 High
- linuxmm/huge_memory: fix NULL pointer deference when splitting folio7.8 High
- linuxmm/memfd: fix information leak in hugetlb foliosNo score
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moremptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().7.5 High
- linuxmost: usb: fix double free on late probe failure5.4 Medium
- linuxusb: gadget: f_eem: Fix memory leak in eem_unwrap4.1 Medium
- linuxusb: storage: Fix memory leak in USB bulk transport4.6 Medium
- linuxusb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths7.8 High
- Show moreLoading…