2025 CVEs (page 68)
Page 68 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-13977 | Medium | 6.4 | 2025-12-17 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple attac… |
CVE-2025-14303 | Medium | 6.8 | 2025-12-17 | Certain motherboard models developed by MSI has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical… |
CVE-2025-14302 | Medium | 6.8 | 2025-12-17 | Certain motherboard models developed by GIGABYTE has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated phys… |
CVE-2025-14801 | Low | 2.4 | 2025-12-17 | A security vulnerability has been detected in xiweicheng TMS up to 2.28.0. This affects the function createComment of the file /admin/blog/comment/create. Such… |
CVE-2025-11369 | Medium | 4.3 | 2025-12-17 | The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to unauthorized access of data due to a missin… |
CVE-2025-11009 | Medium | 5.1 | 2025-12-17 | Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GT Designer3 Version1 (GOT2000) all versions and Mitsubishi Electric GT Designe… |
CVE-2025-53524 | High | 7.8 | 2025-12-17 | Fuji Electric Monitouch V-SFT-6 is vulnerable to an out-of-bounds write while processing a specially crafted project file, which may allow an attacker to exe… |
CVE-2025-14701 | High | 7.1 | 2025-12-17 | An input neutralization vulnerability in the Server MOTD component of Crafty Controller allows a remote, unauthenticated attacker to perform stored XSS via ser… |
CVE-2025-14700 | Critical | 9.9 | 2025-12-17 | An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code exe… |
CVE-2025-34288 | Medium | 6.7 | 2025-12-16 | Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file pe… |
CVE-2025-14766 | High | 8.8 | 2025-12-16 | Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2025-14765 | High | 8.8 | 2025-12-16 | Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2025-68274 | High | 7.5 | 2025-12-16 | SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnera… |
CVE-2025-64520 | Medium | 6.5 | 2025-12-16 | GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can re… |
CVE-2025-53619 | High | 7.4 | 2025-12-16 | An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead t… |
CVE-2025-53618 | High | 7.4 | 2025-12-16 | An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead t… |
CVE-2025-52582 | High | 7.4 | 2025-12-16 | An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can… |
CVE-2025-48429 | High | 7.4 | 2025-12-16 | An out-of-bounds read vulnerability exists in the RLECodec::DecodeByStreams functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to… |
CVE-2025-14466 | Medium | 5.3 | 2025-12-16 | A vulnerability in the web interface of the Güralp Fortimus Series, Minimus Series and Certimus Series allows an unauthenticated attacker with network access t… |
CVE-2025-8872 | Medium | 6.5 | 2025-12-16 | On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may… |
CVE-2025-65834 | Critical | 9.8 | 2025-12-16 | Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and heig… |
CVE-2025-13532 | Medium | 6.2 | 2025-12-16 | Insecure defaults in the Server Agent component of Fortra's Core Privileged Access Manager (BoKS) can result in the selection of weak password hash algorithms… |
CVE-2025-68270 | Critical | 9.9 | 2025-12-16 | The Open edX Platform is a learning management platform. Prior to commit 05d0d0936daf82c476617257aa6c35f0cd4ca060, CourseLimitedStaffRole users are able to acc… |
CVE-2025-68156 | High | 7.5 | 2025-12-16 | Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including `flatten`, `min`, `max`… |
CVE-2025-68155 | High | 7.5 | 2025-12-16 | @vitejs/plugin-rs provides React Server Components (RSC) support for Vite. Prior to version 0.5.8, the `/__vite_rsc_findSourceMapURL` endpoint in `@vitejs/plug… |
CVE-2025-68154 | High | 8.1 | 2025-12-16 | systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the `fsSize()` function in systeminformation is vulnerable… |
CVE-2025-68150 | Medium | 6.5 | 2025-12-16 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.2 and 9.1.1-alpha.1, the Instagra… |
CVE-2025-68146 | Medium | 6.3 | 2025-12-16 | filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local attacker… |
CVE-2025-65593 | High | 8.8 | 2025-12-16 | nopCommerce 4.90.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Schedule Tasks functionality. |
CVE-2025-65592 | Medium | 6.1 | 2025-12-16 | nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality. Malicious payloads inserted into the "Product Name" and… |
CVE-2025-65591 | Medium | 5.4 | 2025-12-16 | nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Currencies functionality. |
CVE-2025-65590 | Medium | 5.4 | 2025-12-16 | nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Management area. |
CVE-2025-14553 | | 2025-12-16 | Exposure of password hashes through an unauthenticated API response in TP-Link Tapo app on iOS and Android for Tapo cameras, allowing attackers to brute force… | |
CVE-2025-68142 | Medium | 5.3 | 2025-12-16 | PyMdown Extensions is a set of extensions for the `Python-Markdown` markdown project. Versions prior to 10.16.1 have a ReDOS bug found within the figure captio… |
CVE-2025-65589 | Medium | 6.1 | 2025-12-16 | nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Attributes functionality. |
CVE-2025-65581 | Medium | 5.3 | 2025-12-16 | An open redirect vulnerability exists in the Account module in Volosoft ABP Framework >= 5.1.0 and < 10.0.0-rc.2. Improper validation of the returnUrl paramete… |
CVE-2025-62864 | Critical | 9.8 | 2025-12-16 | Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC cal… |
CVE-2025-62863 | Critical | 9.8 | 2025-12-16 | Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC cal… |
CVE-2025-52196 | High | 7.5 | 2025-12-16 | Server-Side Request Forgery (SSRF) vulnerability in Ctera Portal 8.1.x (8.1.1417.24) allows remote attackers to induce the server to make arbitrary HTTP reques… |
CVE-2025-46296 | Medium | 5.4 | 2025-12-16 | An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features s… |
CVE-2025-46295 | Critical | 9.8 | 2025-12-16 | Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input into the text-substi… |
CVE-2025-46294 | Medium | 5.3 | 2025-12-16 | To enhance security, the FileMaker Server 22.0.4 installer now includes an option to disable IIS short filename enumeration by setting NtfsDisable8dot3NameCrea… |
CVE-2025-33235 | High | 7.8 | 2025-12-16 | NVIDIA Resiliency Extension for Linux contains a vulnerability in the checkpointing core, where an attacker may cause a race condition. A successful exploit of… |
CVE-2025-33226 | High | 7.8 | 2025-12-16 | NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. A successful exploit o… |
CVE-2025-33225 | High | 8.4 | 2025-12-16 | NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names. A successful explo… |
CVE-2025-33212 | High | 7.3 | 2025-12-16 | NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a user loads a malicious… |
CVE-2025-33210 | Critical | 9.0 | 2025-12-16 | NVIDIA Isaac Lab contains a deserialization vulnerability. A successful exploit of this vulnerability might lead to code execution. |
CVE-2025-68130 | | 2025-12-16 | tRPC allows users to build and consume fully typesafe APIs without schemas or code generation. Starting in version 10.27.0 and prior to versions 10.45.3 and 11… | |
CVE-2025-68116 | High | 8.9 | 2025-12-16 | FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 2.7.1 are vulnerable to Stored Cross-Site Scripting (XSS) due to unsafe handling… |
CVE-2025-63414 | Critical | 10.0 | 2025-12-16 | A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an unauthenticated remote attacker to achieve arbitrary command execution. By… |
CVE-2025-62862 | Medium | 4.6 | 2025-12-16 | Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC cal… |
CVE-2025-59935 | Medium | 6.5 | 2025-12-16 | GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.21, an unauthenticated user can store an XSS payl… |
CVE-2025-50401 | Critical | 9.8 | 2025-12-16 | Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter password. |
CVE-2025-50398 | Critical | 9.8 | 2025-12-16 | Mercury D196G d196gv1-cn-up_2020-01-09_11.21.44 is vulnerable to Buffer Overflow in the function sub_404CAEDC via the parameter fac_password. |
CVE-2025-37164 | Critical | 10.0 | 2025-12-16 | A remote code execution issue exists in HPE OneView. |
CVE-2025-29231 | Medium | 6.1 | 2025-12-16 | A stored cross-site scripting (XSS) vulnerability in the page_save component of Linksys E5600 V1.1.0.26 allows attackers to execute arbitrary web scripts or HT… |
CVE-2025-68322 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: parisc: Avoid crash due to unaligned access in unwinder Guenter Roeck reported this kerne… | |
CVE-2025-68321 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allocations Driver authors often forget to ad… |
CVE-2025-68320 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: lan966x: Fix sleeping in atomic context The following warning was seen when we try to con… |
CVE-2025-68319 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire su_mutex before navigating configs hierarchy There is a race between… | |
CVE-2025-68318 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL The AXI crossbar of TH1520 h… | |
CVE-2025-68317 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zctx: check chained notif contexts Send zc only links ubuf_info for requests com… |
CVE-2025-68316 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix invalid probe error return value After DME Link Startup, the error r… | |
CVE-2025-68315 | Critical | 9.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to detect potential corrupted nid in free_nid_list As reported, on-disk footer… |
CVE-2025-68314 | High | 8.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: make sure last_fence is always updated Update last_fence in the vm-bind path ins… |
CVE-2025-68313 | High | 7.1 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit reg… |
CVE-2025-68312 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: usbnet: Prevents free active kevent The root cause of this issue are: 1. When probing the… | |
CVE-2025-68311 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: ip22zilog: Use platform device for probing After commit 84a9582fd203 ("seria… | |
CVE-2025-68310 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump Do not block PCI conf… | |
CVE-2025-68309 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: PCI/AER: Fix NULL pointer access by aer_info The kzalloc(GFP_KERNEL) may return NULL, so… | |
CVE-2025-68308 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: leaf: Fix potential infinite loop in command parsers The `kvaser_usb_lea… | |
CVE-2025-68307 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs The driver l… | |
CVE-2025-68306 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface When perfor… | |
CVE-2025-68305 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind There is a potential… | |
CVE-2025-68304 | High | 8.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: lookup hci_conn on RX path on protocol side The hdev lock/lookup/unl… |
CVE-2025-68303 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel: punit_ipc: fix memory corruption This passes the address of the poin… |
CVE-2025-68302 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: fix potential NULL dereference in sxgbe_rx() Currently, when skb is null, the… |
CVE-2025-68301 | Critical | 9.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic driver can receive… |
CVE-2025-68300 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: fs/namespace: fix reference leak in grab_requested_mnt_ns lookup_mnt_ns() already takes a… | |
CVE-2025-68299 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix delayed allocation of a cell's anonymous key The allocation of a cell's anonymou… | |
CVE-2025-68298 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref In btusb_mtk_setu… | |
CVE-2025-68297 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash in process_v2_sparse_read() for encrypted directories The crash in proces… | |
CVE-2025-68296 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup Protect vga_switcheroo_cl… | |
CVE-2025-68295 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix memory leak in cifs_construct_tcon() When having a multiuser mount with… | |
CVE-2025-68294 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: io_uring/net: ensure vectored buffer node import is tied to notification When support for… |
CVE-2025-68293 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix NULL pointer deference when splitting folio Commit c010d47f107f ("mm… | |
CVE-2025-68292 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mm/memfd: fix information leak in hugetlb folios When allocating hugetlb folios for memfd… | |
CVE-2025-68291 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). … | |
CVE-2025-68290 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard re… | |
CVE-2025-68289 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_eem: Fix memory leak in eem_unwrap The existing code did not handle the fa… | |
CVE-2025-68288 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: usb: storage: Fix memory leak in USB bulk transport A kernel memory leak was identified b… | |
CVE-2025-68287 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths This p… | |
CVE-2025-68286 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check NULL before accessing [WHAT] IGT kms_cursor_legacy's long-nonblock… |
CVE-2025-68285 | Critical | 9.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in have_mon_and_osd_map() The wait loop in __ceph_o… |
CVE-2025-68284 | Critical | 9.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() The len fiel… |
CVE-2025-68283 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: libceph: replace BUG_ON with bounds check for map->max_osd OSD indexes come from untruste… |
CVE-2025-68282 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: fix use-after-free in usb_gadget_state_work A race condition during gad… | |
CVE-2025-68269 | Medium | 5.4 | 2025-12-16 | In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote projects over SSH |
CVE-2025-68268 | Medium | 5.4 | 2025-12-16 | In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings page |
CVE-2025-68267 | Medium | 6.5 | 2025-12-16 | In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installation token |