Skip to content
OpenAdvisories

Archive

9 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /9 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2025-67586 Public exploit

    WordPress Highlight and Share plugin <= 5.2.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through <= 5.2.0.

    Ronald Huereca Highlight and Share
  • Medium 6.1
    CVE-2025-66470 Public exploit

    NiceGUI Stored/Reflected XSS in ui.interactive_image via unsanitized SVG content

    NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are subject to a XSS vulnerability through the ui.interactive_image component of NiceGUI. The component renders SVG content using Vue's v-html directive without any sanitization. This allows att…

    zauberzeug nicegui nicegui PyPI
  • Medium 5.4
    CVE-2025-65300 Public exploit

    A stored Cross-Site Scripting (XSS) vulnerability exists in the Coohom SaaS Platform feVersion=1760060603897 (2025-10-2…