Skip to content
OpenAdvisories

Archive

16 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /16 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2025-14765 Public exploit

    Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap…

    Google Chrome chromium chromium Browsers Debian Wolfi
  • Critical 9.8
    CVE-2025-46295 Public exploit

    Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications pas…

    Claris FileMaker Server
  • Critical 9.0
    CVE-2025-33210 Public exploit

    NVIDIA Isaac Lab contains a deserialization vulnerability. A successful exploit of this vulnerability might lead to cod…

    NVIDIA Isaac Lab
  • High 8.9
    CVE-2025-68116 Public exploit

    FileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handling

    FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 2.7.1 are vulnerable to Stored Cross-Site Scripting (XSS) due to unsafe handling of browser-renderable user uploads when served through the sharing and download endpoints. An attack…

    error311 FileRise
  • Critical 10.0
    CVE-2025-37164 Exploited Public exploit Scanner template EPSS 90%

    A remote code execution issue exists in HPE OneView.

    Hewlett Packard Enterprise (HPE) HPE OneView
    KEV Jan 7, 2026
  • High 8.5
    CVE-2025-68055 Public exploit

    WordPress Hydra Booking plugin <= 1.1.32 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Hydra Booking hydra-booking allows SQL Injection.This issue affects Hydra Booking: from n/a through <= 1.1.32.

    themefic Hydra Booking
  • Medium 6.5
    CVE-2025-65427 Public exploit

    An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implem…

  • Critical 9.1
    CVE-2025-65318 Public exploit

    When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system with…