CVEs published in December 2025
5,238 vulnerabilities, 419 critical, 24 exploited.
- libmingBuffer overflow vulnerability in function dcputchar in decompile.c in libming 0.4.8.7.5 High
- libmingBuffer overflow vulnerability in function strcat in asan_interceptors.cpp in libming 0.4.8.7.5 High
- gnu binutilsAn issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows...7.5 High
- gnu binutilsAn issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26...7.5 High
- gnu binutilsAn issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26...7.5 High
- gnu binutilsAn issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows...7.5 High
- gnu binutilsA buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26...7.5 High
- gnu binutilsAn issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26...2.5 Low
- jsishA type confusion in jsish 2.0 allows incorrect control flow during execution of the OP_NEXT...9.8 Critical
- xxyopen novelDOM-based Cross-Site Scripting (XSS) vulnerability in 201206030 novel V3.5.0 allows remote...6.1 Medium
- antimof uxplayUxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially...6.5 Medium
- machsol machpanelReflected Cross site scripting (xss) in machsol machpanel 8.0.32 allows attackers to execute...6.1 Medium
- machsol machpanelFile upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell.9.8 Critical
- pangolinAn issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate...9.8 Critical
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src...8.8 High
- vvveb vvvebjsgivanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.9.8 Critical
- vvveb vvvebjsgivanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.7.5 High
- vvveb vvvebjsgivanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.9.8 Critical
- vvveb vvvebjsA critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server...9.1 Critical
- tenda wh450, wh450 firmware +1 moreTenda WH450 RouteStatic stack-based overflow8.6 High
- tenda wh450, wh450 firmware +1 moreTenda WH450 PPTPUserSetting stack-based overflow8.6 High
- tenda wh450, wh450 firmware +1 moreTenda WH450 PPTPServer stack-based overflow8.6 High
- omec-project upfomec-project UPF PFCP Session Establishment Request messages_session.go handleSessionEstablishmentRequest null pointer dereference5.3 Medium
- floooh sokolfloooh sokol sokol_gfx.h _sg_pipeline_desc_defaults stack-based overflow4.8 Medium
- pbootcmsPbootCMS Header handle.php get_user_ip less trusted source6.9 Medium
- pbootcmsPbootCMS SQLite Database pbootcms.db file access6.3 Medium
- h-moses moga-mallh-moses moga-mall PmsProductController.java addProduct unrestricted upload5.3 Medium
- talelin lin-cmsTaleLin Lin-CMS Tests Folder config.py password in configuration file6.3 Medium
- px4 px4-autopilot, dronecode px4 drone autopilot +1 morePX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow4.8 Medium
- rawchen ecmsrawchen ecms Add New Product updateProductServlet.java updateProductServlet cross site scripting4.8 Medium
- cmseasyCmsEasy Backend Template Management template_admin.php savetemp_action code injection5.1 Medium
- sohu cachecloudSohuTV CacheCloud UserManageController.java doUserList cross site scripting4.8 Medium
- sohu cachecloudSohuTV CacheCloud TotalManageController.java doTotalList cross site scripting4.8 Medium
- dayrui xunruicmsdayrui XunRuiCMS JSONP Callback Init.php dr_exit_msg cross site scripting5.3 Medium
- gnupgIn GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where...7.8 High
- eyoucmsEyouCMS Backend Template Management FilemanagerLogic.php sql injection5.1 Medium
- 9786 phpok3w9786 phpok3w show.php sql injection6.9 Medium
- haloHalo Configuration actuator information disclosure2.3 Low
- saiftheboss7 onlinemcqexamsaiftheboss7 onlinemcqexam quesadd.php sql injection6.9 Medium
- trendnet tew-822dre, tew-822dre firmware +1 moreTRENDnet TEW-822DRE formWsc sub_43ACF4 command injection5.3 Medium
- prasathmani tinyfilemanager, tiny file manager +1 moreprasathmani TinyFileManager tinyfilemanager.php path traversal5.1 Medium
- trendnet tew-800mb, tew-800mb firmware +1 moreTRENDnet TEW-800MB NTPSyncWithHost.cgi sub_F934 command injection8.7 High
- trendnet tew-800mb, tew-800mb firmware +1 moreTRENDnet TEW-800MB Management wizardset do_setWizard_asp command injection8.7 High
- joey-zhou xiaozhi-esp32-server-javajoey-zhou xiaozhi-esp32-server-java Cookie AuthenticationInterceptor.java tryAuthenticateWithCookies improper authentication5.3 Medium
- yourmaileyes moocyourmaileyes MOOC Submission MainController.java subreview cross site scripting5.1 Medium
- zspace z4pro+, z4pro\+ firmware +1 moreZSPACE Z4Pro+ HTTP POST Request close zfilev2_api_CloseSafe command injection5.3 Medium
- zspace z4pro+, z4pro\+ firmware +1 moreZSPACE Z4Pro+ HTTP POST Request open zfilev2_api_open command injection5.3 Medium
- zspace z4pro+, z4pro\+ firmware +1 moreZSPACE Z4Pro+ HTTP POST Request status zfilev2_api_SafeStatus command injection5.3 Medium
- shanyu sycmsshanyu SyCms Administrative Panel FileManageController.class.php addPost code injection5.1 Medium
- chenjinchuang lin-cms-tp5ChenJinchuang Lin-CMS-TP5 File Upload LocalUploader.php upload code injection5.3 Medium
- Show moreLoading…