Skip to content
OpenAdvisories

Archive

18 December 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2025-68325 Public exploit

    net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop

    In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop In cake_drop(), qdisc_tree_reduce_backlog() is used to update the qlen and backlog of the qdisc hierarchy. Its caller, cake_enqu…

  • Medium 6.6
    CVE-2025-40602 Exploited Public exploit

    A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance managem…

    KEV Dec 17, 2025
  • High 8.8
    CVE-2025-14364 Public exploit

    Demo Importer Plus <= 2.0.8 - Missing Authorization to Authenticated (Subscriber+) Site Reset and Privilege Escalation

    The Demo Importer Plus plugin for WordPress is vulnerable to unauthorized modification of data, loss of data, and privilege escalation due to a missing capability check on the Ajax::handle_request() function in all versions up to, and including, 2.0.8. This m…

  • High 7.2
    CVE-2025-68461 Exploited Public exploit EPSS 27%

    Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the an…

    KEV Feb 20, 2026