Skip to content
OpenAdvisories

Archive

4 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /4 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.8
    CVE-2025-13543 Public exploit

    PostGallery <= 1.12.5 - Authenticated (Subscriber+) Arbitrary File Upload

    The PostGallery plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'PostGalleryUploader' class functions in all versions up to, and including, 1.12.5. This makes it possible for authenticated attackers, w…

    rtowebsites PostGallery Web / CMS
  • High 7.5
    CVE-2025-12097 Public exploit

    Relative Path Traversal Vulnerability in NI System Web Server

    There is a relative path traversal vulnerability in the NI System Web Server that may result in information disclosure.  Successful exploitation requires an attacker to send a specially crafted request to the NI System Web Server, allowing the attacker to rea…

    NI LabVIEW
  • High 7.5
    CVE-2025-65945 Public exploit

    auth0/node-jws improper HMAC signature verification vulnerability

    auth0/node-jws is a JSON Web Signature implementation for Node.js. In versions 3.2.2 and earlier and version 4.0.0, auth0/node-jws has an improper signature verification vulnerability when using the HS256 algorithm under specific conditions. Applications are …

    auth0 node-jws langfuse-3-worker renovate Wolfi npm
  • High 8.4
    CVE-2025-66516 Public exploit Scanner template EPSS 89%

    Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected

    Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. This CVE covers the…

    Apache Software Foundation Apache Tika PDF parser module Apache Tika parsers Apache Tika core Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2025-65637 Public exploit

    Logrus is vulnerable to DoS when using Entry.Writer()

    A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" a…

    kube-fluentd-operator cri-o podman kubeflow-profile-controller Debian Ubuntu Azure Linux Wolfi Go