Skip to content
OpenAdvisories

Archive

19 December 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-68613 Exploited Public exploit Scanner template EPSS 99%

    n8n Vulnerable to Remote Code Execution via Expression Injection

    n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions…

    KEV Mar 11, 2026
  • Critical 9.3
    CVE-2025-34433 Public exploit

    AVideo < 20.1 Unauthenticated RCE via Predictable Installation Salt

    AVideo versions 14.3.1 prior to 20.1 contain an unauthenticated remote code execution vulnerability caused by predictable generation of an installation salt using PHP uniqid(). The installation timestamp is exposed via a public endpoint, and a derived hash id…

  • Critical 9.3
    CVE-2025-14733 Exploited · Ransomware Public exploit EPSS 29%

    WatchGuard Firebox iked Out of Bounds Write Vulnerability

    An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when co…

    KEV Dec 19, 2025