Skip to content
OpenAdvisories

Archive

22 December 2025

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • High 7.3
    CVE-2025-14018 Public exploit

    Unquoted Service Path in NetBT Consultancy's e-Fatura

    Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries. This issue affects e-Fatura: before 1.2.15.

  • High 8.8
    CVE-2025-68645 Exploited Public exploit Scanner template EPSS 51%

    A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1…

    KEV Jan 22, 2026
  • Critical 9.8
    CVE-2025-65856 Public exploit

    Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21…

  • High 8.8
    CVE-2025-65817 Public exploit

    LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in start_app.sh.

  • Medium 6.1
    CVE-2025-65270 Public exploit

    Reflected cross-site scripting (XSS) vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote…

  • High 7.5
    CVE-2025-65857 Public exploit

    An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The Get…

  • Medium 6.1
    CVE-2025-65790 Public exploit

    A reflected cross-site scripting (XSS) vulnerability exists in FuguHub 8.1 when serving SVG files through the /fs/ file…