Skip to content
OpenAdvisories

Archive

16 December 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.8
    CVE-2025-14765 Public exploit

    Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap…

  • High 8.9
    CVE-2025-68116 Public exploit

    FileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handling

    FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 2.7.1 are vulnerable to Stored Cross-Site Scripting (XSS) due to unsafe handling of browser-renderable user uploads when served through the sharing and download endpoints. An attack…

  • High 8.5
    CVE-2025-68055 Public exploit

    WordPress Hydra Booking plugin <= 1.1.32 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Hydra Booking hydra-booking allows SQL Injection.This issue affects Hydra Booking: from n/a through <= 1.1.32.