Skip to content
OpenAdvisories

Archive

12 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /12 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.1
    CVE-2025-14611 Exploited Public exploit Scanner template EPSS 55%

    Gladinet CentreStack and TrioFox Hard Coded AES Keys

    Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusio…

    Gladinet CentreStack and TrioFox
    KEV Dec 15, 2025
  • Medium 5.5
    CVE-2025-43520 Exploited Public exploit

    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.…

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Mar 20, 2026
  • Critical 9.8
    CVE-2024-58299 Public exploit

    PCMan FTP Server 2.0 Remote Buffer Overflow via 'pwd' Command

    PCMan FTP Server 2.0 contains a buffer overflow vulnerability in the 'pwd' command that allows remote attackers to execute arbitrary code. Attackers can send a specially crafted payload during the FTP login process to overwrite memory and potentially gain sys…

    PCMan FTP Server
  • High 8.8
    CVE-2025-14174 Exploited Public exploit EPSS 43%

    Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perfo…

    Google Chrome chromium qtwebkit-source Browsers Debian Ubuntu Alpine Wolfi
    KEV Dec 12, 2025
  • Medium 5.1
    CVE-2025-67730 Public exploit

    Frappe authenticated users can execute XSS through form description fields

    Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Versions prior to 2.42.0 allow authenticated users to add malicious HTML and JavaScript through description fields in the Job, Course and Batch forms. This …

    Frappe Technologies lms
  • Medium 6.9
    CVE-2025-67727 Public exploit

    Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management

    Parse Server is an open source backend that can be deployed to any infrastructure that runs Node.js. In versions prior to 8.6.0-alpha.2, a GitHub CI workflow is triggered in a way that grants the GitHub Actions workflow elevated permissions, giving it access …

    parse-community parse-server