๐ Security Vulnerability Index
Critical and High-Severity Vulnerabilities (CVSS > 7.0)
CVE-2025-66203: StreamVault is Vulnerable to Authenticated Remote Code Execution (RCE) via ytdlpargs Configuration Injection
CRITICAL - 9.9/10Published: 27 Dec 2025
CVE-2025-54322: Xspeeder SXZOS Remote Code Execution Vulnerability
CRITICAL - 10.0/10Published: 27 Dec 2025
CVE-2025-15089: UTT ่ฟๅ 512W APSecurity strcpy buffer overflow
CRITICAL - 9.0/10Published: 26 Dec 2025
Published: 26 Dec 2025
CVE-2025-15092: UTT ่ฟๅ 512W ConfigExceptMSN strcpy buffer overflow
CRITICAL - 9.0/10Published: 26 Dec 2025
Published: 26 Dec 2025
CVE-2025-13915: Authentication bypass in IBM API Connect
CRITICAL - 9.8/10Published: 26 Dec 2025
CVE-2025-68665: LangChain serialization injection vulnerability enables secret extraction
HIGH - 8.6/10Published: 24 Dec 2025
CVE-2025-68667: continuwuity Has an Unintended Proxy or Intermediary and Improper Input Validation
CRITICAL - 9.9/10Published: 24 Dec 2025
Published: 24 Dec 2025
CVE-2025-68696: httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage
HIGH - 8.8/10Published: 24 Dec 2025
CVE-2025-68664: LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
CRITICAL - 9.3/10Published: 24 Dec 2025
Published: 24 Dec 2025
Published: 24 Dec 2025
Published: 24 Dec 2025
CVE-2025-8769: MegaSys Computer Technologies Telenium Online Web Application Improper Input Validation
CRITICAL - 9.8/10Published: 24 Dec 2025
Published: 24 Dec 2025
CVE-2019-25255: VideoFlow Digital Video Protection DVP 2.10 Authenticated Remote Code Execution
HIGH - 8.7/10Published: 24 Dec 2025
CVE-2019-25257: LogicalDOC Enterprise 7.7.4 Authenticated Command Execution via Binary Path Manipulation
HIGH - 8.7/10Published: 24 Dec 2025
CVE-2019-25249: devolo dLAN 500 AV Wireless+ 3.1.0-1 Remote Code Execution via htmlmgr
CRITICAL - 9.8/10Published: 24 Dec 2025
Published: 24 Dec 2025
Published: 24 Dec 2025
Published: 25 Dec 2025
Published: 23 Dec 2025
CVE-2025-68476: KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential
HIGH - 8.2/10Published: 23 Dec 2025
CVE-2025-65856: Xiongmai XM530 IP Camera Authentication Bypass
CRITICAL - 9.8/10Published: 23 Dec 2025
Published: 23 Dec 2025
Published: 23 Dec 2025
CVE-2025-67109: Eclipse Cyclone DDS Certificate Verification Bypass
CRITICAL - 10.0/10Published: 23 Dec 2025
Published: 23 Dec 2025
CVE-2025-67108: eProsima Fast-DDS Data Validation Vulnerability
CRITICAL - 10.0/10Published: 23 Dec 2025
Published: 23 Dec 2025
CVE-2025-33222: NVIDIA Isaac Launchable Hard-Coded Credential Disclosure
CRITICAL - 9.8/10Published: 23 Dec 2025