| CVE-2025-65878 |
仓库管理系统任意文件读取漏洞 |
高危 |
7.5 |
2025-12-05 |
| CVE-2025-65730 |
GoAway硬编码JWT签名密钥导致认证绕过 |
高危 |
8.8 |
2025-12-05 |
| CVE-2025-65082 |
Apache HTTP Server环境变量覆盖导致CGI程序安全绕过 |
中危 |
6.5 |
2025-12-05 |
| CVE-2025-65036 |
XWiki Remote Macros权限绕过导致远程代码执行漏洞 |
高危 |
8.3 |
2025-12-05 |
| CVE-2025-64057 |
Fanvil x210 V2 目录遍历漏洞 |
高危 |
8.3 |
2025-12-05 |
| CVE-2025-64056 |
Fanvil x210 V2 固件文件上传漏洞 |
中危 |
4.3 |
2025-12-05 |
| CVE-2025-64054 |
Fanvil x210 反射型XSS漏洞 |
严重 |
9.6 |
2025-12-05 |
| CVE-2025-64053 |
Fanvil x210 缓冲区溢出漏洞导致远程代码执行 |
高危 |
7.5 |
2025-12-05 |
| CVE-2025-64052 |
Fanvil x210 V2 远程代码执行漏洞 |
中危 |
5.1 |
2025-12-05 |
| CVE-2025-62223 |
Microsoft Edge for iOS UI欺骗漏洞 |
中危 |
4.3 |
2025-12-05 |
| CVE-2025-59775 |
Apache HTTP Server SSRF漏洞导致Windows NTLM哈希泄露 |
高危 |
7.5 |
2025-12-05 |
| CVE-2025-58098 |
Apache HTTP Server SSI #exec cmd命令注入漏洞 (CVE-2025-5... |
高危 |
8.3 |
2025-12-05 |
| CVE-2025-55753 |
Apache HTTP Server ACME证书续期整数溢出漏洞 |
高危 |
7.5 |
2025-12-05 |
| CVE-2025-46603 |
Dell CloudBoost虚拟设备不当限制过度认证尝试漏洞 |
高危 |
7.0 |
2025-12-05 |
| CVE-2025-34291 |
Langflow CORS配置错误导致账户接管和RCE |
高危 |
8.8 |
2025-12-05 |
| CVE-2025-34266 |
Advantech WISE-DeviceOn Server 存储型XSS漏洞 |
中危 |
5.4 |
2025-12-05 |
| CVE-2025-34265 |
Advantech WISE-DeviceOn Server 存储型XSS漏洞 |
中危 |
5.4 |
2025-12-05 |
| CVE-2025-34264 |
Advantech WISE-DeviceOn Server 存储型XSS漏洞 |
中危 |
5.4 |
2025-12-05 |
| CVE-2025-34263 |
Advantech WISE-DeviceOn Server 存储型XSS漏洞 |
中危 |
5.4 |
2025-12-05 |
| CVE-2025-34262 |
Advantech WISE-DeviceOn Server存储型XSS漏洞 |
中危 |
5.4 |
2025-12-05 |
| CVE-2025-34261 |
Advantech WISE-DeviceOn Server 存储型XSS漏洞 |
中危 |
5.4 |
2025-12-05 |
| CVE-2025-34260 |
Advantech WISE-DeviceOn Server存储型XSS漏洞 |
中危 |
5.4 |
2025-12-05 |
| CVE-2025-34259 |
Advantech WISE-DeviceOn Server存储型XSS漏洞 |
中危 |
5.4 |
2025-12-05 |
| CVE-2025-34258 |
Advantech WISE-DeviceOn Server 存储型XSS漏洞 |
中危 |
5.4 |
2025-12-05 |
| CVE-2025-34257 |
Advantech WISE-DeviceOn Server 存储型XSS漏洞 |
中危 |
5.4 |
2025-12-05 |
| CVE-2025-34256 |
Advantech WISE-DeviceOn Server 硬编码JWT签名密钥漏洞 |
严重 |
9.8 |
2025-12-05 |
| CVE-2025-32901 |
KDE Connect Android拒绝服务漏洞 |
中危 |
4.3 |
2025-12-05 |
| CVE-2025-32900 |
KDE Connect广播UDP协议伪造设备信息漏洞 |
中危 |
4.3 |
2025-12-05 |
| CVE-2025-32899 |
KDE Connect Android伪造发现包导致设备解除配对 |
中危 |
4.3 |
2025-12-05 |
| CVE-2025-32898 |
KDE Connect验证码暴力破解漏洞 |
中危 |
4.7 |
2025-12-05 |