Skip to content
OpenAdvisories

Archive

11 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /11 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.2
    CVE-2025-67780 Public exploit

    SpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 (e.g., on Mini1_prod2) allow administrative actions via u…

    SpaceX Starlink Dish
  • Critical 9.3
    CVE-2024-58290 Public exploit

    Xhibiter NFT Marketplace 1.10.2 SQL Injection via Collections Endpoint

    Xhibiter NFT Marketplace 1.10.2 contains a SQL injection vulnerability in the collections endpoint that allows attackers to manipulate database queries through the 'id' parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection …

    Elements Xhibiter NFT Marketplace
  • Critical 9.3
    CVE-2024-58286 Public exploit

    dizqueTV 1.5.3 Remote Code Execution via FFMPEG Executable Path

    dizqueTV 1.5.3 contains a remote code execution vulnerability that allows attackers to inject arbitrary commands through the FFMPEG Executable Path settings. Attackers can modify the executable path with shell commands to read system files like /etc/passwd by…

    vexorian dizqueTV
  • Medium 5.3
    CVE-2025-64702 Public exploit

    quic-go HTTP/3 QPACK Header Expansion DoS

    quic-go is an implementation of the QUIC protocol in Go. Versions 0.56.0 and below are vulnerable to excessive memory allocation through quic-go's HTTP/3 client and server implementations by sending a QPACK-encoded HEADERS frame that decodes into a large head…

    quic-go quic-go k3s k3s-static Debian Ubuntu Wolfi Go
  • High 7.5
    CVE-2025-55184 Public exploit Scanner template EPSS 64%

    Denial of Service Vulnerability in React Server Components

    A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-d…

    Meta react-server-dom-webpack react-server-dom-parcel react-server-dom-turbopack npm
  • Medium 5.3
    CVE-2025-55183 Public exploit EPSS 62%

    Source Code Exposure Vulnerability in React Server Components

    An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-…

    Meta react-server-dom-turbopack react-server-dom-webpack react-server-dom-parcel npm
  • Critical 9.1
    CVE-2025-13780 Public exploit

    Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)

    pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the s…

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • Medium 6.1
    CVE-2025-55816 Public exploit

    HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.

    hoteldruid hoteldruid Debian Ubuntu