Protect Web Society

CVE-2025-64699 - SevenCs ORCA G2 Local Privilege Escalation (DoS) Vulnerability

CVE ID : CVE-2025-64699 Published : Dec. 31, 2025, 4:15 p.m. | 1 hour, 7 minutes ago Descriptio…

CVE-2025-68618 - Magick's failure to limit the depth of SVG file reads caused a DoS attack.

CVE ID : CVE-2025-68618 Published : Dec. 30, 2025, 4:14 p.m. | 1 hour, 5 minutes ago Descriptio…

CVE-2025-65570 - Jsish Type Confusion Vulnerability Allows Code Execution

CVE ID : CVE-2025-65570 Published : Dec. 29, 2025, 3:16 p.m. | 2 hours ago Description : A typ…

CVE-2025-65442 - Novel V3.5.0 DOM-based XSS

CVE ID : CVE-2025-65442 Published : Dec. 29, 2025, 3:16 p.m. | 2 hours ago Description : DOM-b…

CVE-2025-60458 - UxPlay RTSP Double Free Denial of Service

CVE ID : CVE-2025-60458 Published : Dec. 29, 2025, 3:16 p.m. | 2 hours ago Description : UxPla…

CVE-2025-57462 - Machsol Machpanel Reflected XSS

CVE ID : CVE-2025-57462 Published : Dec. 29, 2025, 3:16 p.m. | 2 hours ago Description : Refle…

CVE-2025-68973 - GnuPG Out-of-Bounds Write Vulnerability

CVE ID : CVE-2025-68973 Published : Dec. 28, 2025, 4:19 p.m. | 53 minutes ago Description : In…

CVE-2025-15143 - EyouCMS Backend Template Management FilemanagerLogic.php sql injection

CVE ID : CVE-2025-15143 Published : Dec. 28, 2025, 4:15 p.m. | 56 minutes ago Description : A …

CVE-2025-15142 - 9786 phpok3w show.php sql injection

CVE ID : CVE-2025-15142 Published : Dec. 28, 2025, 4:15 p.m. | 56 minutes ago Description : A …

CVE-2025-15141 - Halo Configuration actuator information disclosure

CVE ID : CVE-2025-15141 Published : Dec. 28, 2025, 3:15 p.m. | 1 hour, 56 minutes ago Descripti…

CVE-2025-14177 - Information Leak of Memory in getimagesize

CVE ID : CVE-2025-14177 Published : Dec. 27, 2025, 8:15 p.m. | 55 minutes ago Description : In…

CVE-2025-15109 - jackq XCMS upload.php unrestricted upload

CVE ID : CVE-2025-15109 Published : Dec. 27, 2025, 6:32 p.m. | 39 minutes ago Description : A …

CVE-2025-15108 - PandaXGO PandaX JWT Secret config.yml hard-coded key

CVE ID : CVE-2025-15108 Published : Dec. 27, 2025, 4:32 p.m. | 38 minutes ago Description : A …

CVE-2025-67349 - FluentCMS Cross-Site Scripting (XSS) Vulnerability

CVE ID : CVE-2025-67349 Published : Dec. 26, 2025, 3:15 p.m. | 1 hour, 51 minutes ago Descripti…

CVE-2025-66947 - Krishanmuraiji SMS SQL Injection Delay Attack

CVE ID : CVE-2025-66947 Published : Dec. 26, 2025, 3:15 p.m. | 1 hour, 51 minutes ago Descripti…

CVE-2025-65885 - Nokia Delight Symbian Belle Local File Injection Vulnerability

CVE ID : CVE-2025-65885 Published : Dec. 26, 2025, 3:15 p.m. | 1 hour, 51 minutes ago Descripti…

CVE-2025-25341 - Libxmljs XML Denial-of-Service Vulnerability

CVE ID : CVE-2025-25341 Published : Dec. 26, 2025, 3:15 p.m. | 1 hour, 51 minutes ago Descripti…

CVE-2025-15084 - youlaitech youlai-mall Order Payment OrderController.java orderService.payOrder access control

CVE ID : CVE-2025-15084 Published : Dec. 25, 2025, 7:15 p.m. | 44 minutes ago Description : A …

CVE-2025-15083 - TOZED ZLT M30s UART on-chip debug and test interface with improper access control

CVE ID : CVE-2025-15083 Published : Dec. 25, 2025, 5:32 p.m. | 28 minutes ago Description : A …

CVE-2025-15082 - TOZED ZLT M30s Web Management proc_post information disclosure

CVE ID : CVE-2025-15082 Published : Dec. 25, 2025, 5:15 p.m. | 44 minutes ago Description : A …

CVE-2024-35322 - MyNET Reflected Cross-Site Scripting (XSS) Vulnerability

CVE ID : CVE-2024-35322 Published : Dec. 24, 2025, 4:15 p.m. | 1 hour, 41 minutes ago Descripti…

CVE-2025-48864 - Apache HTTP Server Cross-Site Scripting

CVE ID : CVE-2025-48864 Published : Dec. 23, 2025, 4:16 p.m. | 1 hour, 40 minutes ago Descripti…

CVE-2025-48863 - Apache HTTP Server Cross-Site Scripting

CVE ID : CVE-2025-48863 Published : Dec. 23, 2025, 4:16 p.m. | 1 hour, 40 minutes ago Descripti…

CVE-2025-45493 - Netgear EX8000 Stack Command Injection

CVE ID : CVE-2025-45493 Published : Dec. 23, 2025, 4:16 p.m. | 1 hour, 40 minutes ago Descripti…

CVE-2024-10398 - Apache Struts Deserialization RCE

CVE ID : CVE-2024-10398 Published : Dec. 23, 2025, 4:16 p.m. | 1 hour, 40 minutes ago Descripti…

CVE-2025-68327 - usb: renesas_usbhs: Fix synchronous external abort on unbind

CVE ID : CVE-2025-68327 Published : Dec. 22, 2025, 5:16 p.m. | 40 minutes ago Description : In…

CVE-2025-68326 - drm/xe/guc: Fix stack_depot usage

CVE-2025-67443 - Schlix CMS Cross Site Scripting (XSS)

CVE ID : CVE-2025-67443 Published : Dec. 22, 2025, 5:15 p.m. | 40 minutes ago Description : Sc…

CVE-2025-10021 - Open Design Alliance Drawings SDK Uninitialized Variable Use leading to Denial of Service and Potential Arbitrary Code Execution

CVE ID : CVE-2025-10021 Published : Dec. 22, 2025, 4:15 p.m. | 1 hour, 40 minutes ago Descripti…

CVE-2025-15002 - SeaCMS mysqli.class.php sql injection

CVE ID : CVE-2025-15002 Published : Dec. 21, 2025, 11:15 p.m. | 40 minutes ago Description : A…

CVE-2025-12700 - Apache Struts Remote Code Execution

CVE ID : CVE-2025-12700 Published : Dec. 20, 2025, 11:15 p.m. | 40 minutes ago Description : R…

CVE-2025-34290 - Versa SASE Client for Windows < 7.9.5 Arbitrary Folder Deletion Leading to Local Privilege Escalation

CVE ID : CVE-2025-34290 Published : Dec. 20, 2025, 8:15 p.m. | 1 hour, 40 minutes ago Descripti…

CVE-2025-67045 - Apache HTTP Server Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-67045 Published : Dec. 19, 2025, 4:15 p.m. | 1 hour, 39 minutes ago Descripti…

CVE-2025-67044 - Apache HTTP Server Remote Code Execution Vulnerability

CVE ID : CVE-2025-67044 Published : Dec. 19, 2025, 4:15 p.m. | 1 hour, 39 minutes ago Descripti…

CVE-2025-67043 - Apache Unvalidated Input Vulnerability

CVE ID : CVE-2025-67043 Published : Dec. 19, 2025, 4:15 p.m. | 1 hour, 39 minutes ago Descripti…

CVE-2025-66906 - Turms Admin API CSRF Privilege Escalation

CVE ID : CVE-2025-66906 Published : Dec. 19, 2025, 4:15 p.m. | 1 hour, 39 minutes ago Descripti…

CVE-2025-14823 - Certificate Signing Extension Returns Encrypted Values

CVE ID : CVE-2025-14823 Published : Dec. 18, 2025, 4:15 p.m. | 1 hour, 39 minutes ago Descripti…

CVE-2025-43873 - iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - setFaultDebounce

CVE ID : CVE-2025-43873 Published : Dec. 17, 2025, 4:16 p.m. | 1 hour, 38 minutes ago Descripti…

CVE-2025-14727 - NGINX Ingress Controller vulnerability

CVE ID : CVE-2025-14727 Published : Dec. 17, 2025, 4:16 p.m. | 1 hour, 38 minutes ago Descripti…

CVE-2024-29371 - Apache Jose4j DoS

CVE ID : CVE-2024-29371 Published : Dec. 17, 2025, 4:16 p.m. | 1 hour, 38 minutes ago Descripti…

CVE-2024-29370 - "Python-Jose: JSON Web Encryption Denial-of-Service Vulnerability"

CVE ID : CVE-2024-29370 Published : Dec. 17, 2025, 4:16 p.m. | 1 hour, 38 minutes ago Descripti…

CVE-2023-53894 - phpfm 1.7.9 Authentication Bypass via Type Juggling Vulnerability

CVE ID : CVE-2023-53894 Published : Dec. 16, 2025, 5:16 p.m. | 38 minutes ago Description : ph…

CVE-2023-53900 - Spip 4.1.10 Admin Account Spoofing via Malicious SVG Upload

CVE ID : CVE-2023-53900 Published : Dec. 16, 2025, 5:06 p.m. | 48 minutes ago Description : Sp…

CVE-2023-53896 - D-Link DAP-1325 Hardware A1 Unauthenticated Configuration Download

CVE ID : CVE-2023-53896 Published : Dec. 16, 2025, 5:06 p.m. | 48 minutes ago Description : D-…

CVE-2025-68322 - parisc: Avoid crash due to unaligned access in unwinder

CVE ID : CVE-2025-68322 Published : Dec. 16, 2025, 4:16 p.m. | 1 hour, 38 minutes ago Descripti…

CVE-2025-66843 - Grav Stored Cross-Site Scripting (XSS)

CVE ID : CVE-2025-66843 Published : Dec. 15, 2025, 4:15 p.m. | 1 hour, 38 minutes ago Descripti…

CVE-2025-60786 - IceScrum Zip Slip Arbitrary Code Execution

CVE ID : CVE-2025-60786 Published : Dec. 15, 2025, 4:15 p.m. | 1 hour, 38 minutes ago Descripti…

CVE-2024-44599 - FNT Command Directory Traversal Vulnerability

CVE ID : CVE-2024-44599 Published : Dec. 15, 2025, 4:15 p.m. | 1 hour, 38 minutes ago Descripti…

CVE-2024-44598 - FNT Command Code Execution Vulnerability

CVE ID : CVE-2024-44598 Published : Dec. 15, 2025, 4:15 p.m. | 1 hour, 38 minutes ago Descripti…

CVE-2025-14673 - gmg137 snap7-rs client.rs as_ct_write heap-based overflow

CVE ID : CVE-2025-14673 Published : Dec. 14, 2025, 5:32 p.m. | 21 minutes ago Description : A …

CVE-2025-14672 - gmg137 snap7-rs s7_micro_client.cpp opWriteArea heap-based overflow

CVE ID : CVE-2025-14672 Published : Dec. 14, 2025, 5:15 p.m. | 38 minutes ago Description : A …

CVE-2025-14668 - campcodes Advanced Online Examination System loginExe.php sql injection

CVE ID : CVE-2025-14668 Published : Dec. 14, 2025, 5:15 p.m. | 38 minutes ago Description : A …

CVE-2025-14667 - itsourcecode COVID Tracking System page sql injection

CVE ID : CVE-2025-14667 Published : Dec. 14, 2025, 4:15 p.m. | 1 hour, 38 minutes ago Descripti…

CVE-2025-67863 - Apache HTTP Server Unvalidated User-Input

CVE ID : CVE-2025-67863 Published : Dec. 13, 2025, 4:16 p.m. | 1 hour, 36 minutes ago Descripti…

CVE-2025-13733 - BuhoNTFS 1.3.2 - Local Privilege Escalation

CVE ID : CVE-2025-13733 Published : Dec. 12, 2025, 4:15 p.m. | 1 hour, 37 minutes ago Descripti…

CVE-2025-55313 - Foxit PDF and Editor Arbitrary Code Execution Vulnerability

CVE ID : CVE-2025-55313 Published : Dec. 11, 2025, 4:16 p.m. | 1 hour, 36 minutes ago Descripti…

CVE-2025-34416 - MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPO.DLL

CVE ID : CVE-2025-34416 Published : Dec. 10, 2025, 4:16 p.m. | 1 hour, 36 minutes ago Descripti…

CVE-2025-63739 - Xinhu Rainrock RockOA PHP Configuration File Modification

CVE ID : CVE-2025-63739 Published : Dec. 9, 2025, 5:15 p.m. | 36 minutes ago Description : An …

CVE-2025-48621 - Android DefaultTransitionHandler Tapjacking Vulnerability

CVE ID : CVE-2025-48621 Published : Dec. 8, 2025, 5:16 p.m. | 36 minutes ago Description : In …

CVE-2025-14197 - Verysync 微力同步 Web Administration f96956469e7be39d information disclosure

CVE ID : CVE-2025-14197 Published : Dec. 7, 2025, 4:15 p.m. | 1 hour, 36 minutes ago Descriptio…

CVE-2025-40267 - io_uring/rw: ensure allocated iovec gets cleared for early failure

CVE ID : CVE-2025-40267 Published : Dec. 6, 2025, 10:15 p.m. | 1 hour, 35 minutes ago Descripti…

CVE-2025-14141 - UTT 进取 520W formArpBindConfig strcpy buffer overflow

CVE ID : CVE-2025-14141 Published : Dec. 6, 2025, 4:15 p.m. | 1 hour, 35 minutes ago Descriptio…

CVE-2025-66511 - Nextcloud Calendar app used predictable proposal participant tokens

CVE ID : CVE-2025-66511 Published : Dec. 5, 2025, 5:16 p.m. | 32 minutes ago Description : Nex…

CVE-2025-40259 - scsi: sg: Do not sleep in atomic context

CVE ID : CVE-2025-40259 Published : Dec. 4, 2025, 4:16 p.m. | 1 hour, 29 minutes ago Descriptio…

CVE-2025-7044 - Privilege Escalation in MAAS via Websocket Request Manipulation

CVE ID : CVE-2025-7044 Published : Dec. 3, 2025, 4:16 p.m. | 1 hour, 26 minutes ago Description…

CVE-2025-59703 - Entrust nShield Connect XC, nShield 5c, and nShield HSMi Physical Proximity F14 Attack Vulnerability

CVE ID : CVE-2025-59703 Published : Dec. 2, 2025, 4:15 p.m. | 1 hour, 22 minutes ago Descriptio…

CVE-2025-58113 - PDF-XChange Editor Out-of-Bounds Read Vulnerability

CVE ID : CVE-2025-58113 Published : Dec. 2, 2025, 4:15 p.m. | 1 hour, 22 minutes ago Descriptio…

CVE-2025-13877 - nocobase JWT Service jwt-service.ts hard-coded key

CVE ID : CVE-2025-13877 Published : Dec. 2, 2025, 4:15 p.m. | 1 hour, 22 minutes ago Descriptio…

CVE-2025-12630 - Upload.am File Hosting VPN < 1.0.1 - Contributor+ Arbitrary Option Disclosure

CVE ID : CVE-2025-12630 Published : Dec. 2, 2025, 4:15 p.m. | 1 hour, 22 minutes ago Descriptio…

CVE-2025-54849 - Socomec DIRIS Digiware M-70 Modbus TCP/RTU Denial of Service Vulnerability

CVE ID : CVE-2025-54849 Published : Dec. 1, 2025, 4:15 p.m. | 1 hour, 19 minutes ago Descriptio…

CVE-2025-54848 - Socomec DIRIS Digiware M-Modbus TCP/RTU Denial of Service Vulnerability

CVE ID : CVE-2025-54848 Published : Dec. 1, 2025, 4:15 p.m. | 1 hour, 19 minutes ago Descriptio…

CVE-2025-3500 - Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation

CVE ID : CVE-2025-3500 Published : Dec. 1, 2025, 4:15 p.m. | 1 hour, 19 minutes ago Description…