Skip to content
OpenAdvisories

Archive

3 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /3 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-20384 Public exploit

    Unauthenticated Log Injection in Splunk Enterprise

    In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Standards Institute (ANSI) escape codes int…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.4
    CVE-2025-13401 Public exploit

    Autoptimize <= 3.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the LCP Image to preload metabox in all versions up to, and including, 3.1.13 due to insufficient input sanitization and output escaping on user-supplied image attributes in…

    optimizingmatters Autoptimize Web / CMS
  • Medium 5.3
    CVE-2025-12585 Public exploit

    MxChat – AI Chatbot for WordPress <= 2.5.5 - Unauthenticated Information Exposure

    The MxChat – AI Chatbot for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.5 via upload filenames. This makes it possible for unauthenticated attackers to extract session values that ca…

    mxchat MxChat – AI Chatbot & Content Generation for WordPress Web / CMS
  • Medium 5.1
    CVE-2025-50361 Public exploit

    Buffer Overflow was found in SmallBASIC community SmallBASIC with SDL Before v12_28, and commit sha:298a1d495355959db36…

  • Medium 6.5
    CVE-2025-65345 Public exploit

    alexusmai laravel-file-manager is vulnerable to Directory Traversal

    alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.

    alexusmai/laravel-file-manager Packagist