| 280123 | Mattermost Server 10.11.x < 10.11.8 / 10.12.x < 10.12.4 / 11.0.x <= 11.0.6 / 11.1.x <= 11.1.1 不當驗證 (MMSA-2025-00555) | high |
| 279436 | WatchGuard Firebox OS 11.x / 12.x < 12.3.1_Update4 12.4.x < 12.5.15 / 12.6.x < 12.11.6 / 2025.x < 2025.1.4 超出邊界寫入 (CVE-2025-14733) | critical |
| 279415 | PHP 8.1.x < 8.1.34 多個弱點 | high |
| 279274 | PHP 8.2.x < 8.2.30 多個弱點 | high |
| 279270 | PHP 8.4.x < 8.4.16 多個弱點 | high |
| 279128 | PHP 8.5.x < 8.5.1 多個弱點 | high |
| 279127 | PHP 8.3.x < 8.3.29 多個弱點 | high |
| 279000 | SonicWall SMA 1000 系列 <= 12.4.3-03093 / 12.5.x <= 12.5.0-02283 本機權限提升 (SNWLID-2025-0019) | medium |
| 278978 | Kibana 7.0.x < 8.19.8 / 9.0.x < 9.1.8 / 9.2.x < 9.2.2 XSS (ESA-2025-28) | medium |
| 278526 | Unraid < 6.8.1 多個弱點 | critical |
| 278130 | Jenkins 外掛程式多個弱點 (2025-12-10) | medium |
| 278129 | Jenkins LTS < 2.528.3/Jenkins 每週版 < 2.541 多個弱點 | medium |
| 278112 | WordPress Plugin 'Sneeit Framework' < 8.4 程式碼執行 | critical |
| 278111 | Mattermost Server 10.5.x <= 10.5.12 / 10.11.x <= 10.11.4 不當存取控制 (MMSA-2025-00517) | medium |
| 278110 | Mattermost Server 10.5.x <= 10.5.12 / 10.11.x <= 10.11.4 / 10.12.x <= 10.12.1 / 11.0.x <= 11.0.3 不當驗證 (MMSA-2025-00547) | critical |
| 278109 | Mattermost Server 10.5.x <= 10.5.12 / 10.11.x <= 10.11.4 / 10.12.x <= 10.12.1 / 11.0.x <= 11.0.2 多個弱點 (CVE-2025-12421、MMSA-2025-00526、CVE-2025-12756) | critical |
| 277601 | rConfig RCE (CVE-2020-10221) | high |
| 277585 | React Server Components 19.0 / 19.1.0 / 19.1.1 / 19.2.0 遠端程式碼執行 (React2Shell) | critical |
| 277584 | WatchGuard Firebox OS 2025.1 / 12.x < 12.11.4 / 12.5.x < 12.5.13 / 11.x 超出邊界寫入弱點 | critical |
| 277116 | Splunk Enterprise 9.2.0 < 9.2.10、9.3.0 < 9.3.8、9.4.0 < 9.4.6、10.0 < 10.0.2 (SVD-2025-1204) | medium |
| 277115 | Splunk Enterprise 9.2.0 < 9.2.10、9.3.0 < 9.3.8、9.4.0 < 9.4.6、10.0 < 10.0.1 (SVD-2025-1203) | medium |
| 277114 | Splunk Enterprise 9.2 < 9.2.10、9.3 < 9.3.8、9.4 < 9.4.6、10.0 < 10.0.2 (SVD-2025-1202) | medium |
| 277113 | Splunk Enterprise 9.2 < 9.2.10、9.3 < 9.3.8、9.4 < 9.4.6、10.0 < 10.0.2 (SVD-2025-1208) | medium |
| 277112 | Splunk Enterprise 9.2.0 < 9.2.10、9.3.0 < 9.3.8、9.4.0 < 9.4.6、10.0 < 10.0.2 (SVD-2025-1201) | medium |
| 277111 | Splunk Enterprise 9.2.0 < 9.2.10、9.3.0 < 9.3.8、9.4.0 < 9.4.6、10.0 < 10.0.2 (SVD-2025-1206) | medium |
| 277110 | Splunk Enterprise 9.2.0 < 9.2.10、9.3.0 < 9.3.8、9.4.0 < 9.4.6、10.0 < 10.0.2 (SVD-2025-1209) | high |
| 277109 | Splunk Enterprise 9.2.0 < 9.2.10、9.3.0 < 9.3.8、9.4.0 < 9.4.6、10.0 < 10.0.2 (SVD-2025-1205) | medium |
| 277106 | Splunk Enterprise 9.2.0 < 9.2.10、9.3.0 < 9.3.8、9.4.0 < 9.4.6、10.0 < 10.0.1 (SVD-2025-1207) | low |
| 276820 | Apache Roller < 6.1.5 密碼變更時的工作階段到期不足 (CVE-2025-24859) | high |
| 275872 | Kibana 8.12.x < 8.19.7 / 9.1.x < 9.1.7 / 9.2.x < 9.2.1 (ESA-2025-24) | medium |
| 275848 | Atlassian Confluence < 8.5.25 / 8.6.x < 9.2.7 / 9.3.x < 10.0.2 (CONFSERVER-100907) | high |
| 275845 | Mattermost Server < 11.0.0 多個弱點 (MMSA-2024-00337、 MMSA-2025-00493、 MMSA-2025-00540) | high |
| 275844 | Mattermost Server 10.5.x < 10.5.12 / 10.11.x 10.11.4 / 10.12.x < 10.12.1 / 11.0.0 多個弱點 (MMSA-2025-00541, MMSA-2025-00492) | medium |
| 275839 | Mattermost Server 10.5.x < 10.5.12 / 10.11.x 10.11.4 / 11.0.0 缺少授權 (MMSA-2025-00518) | medium |
| 275455 | ManageEngine OpManager 已儲存 XSS (CVE-2025-9227) | medium |
| 275434 | NetScaler ADC 和 NetScaler Gateway XSS (CTX695486) | medium |
| 275249 | Drupal 8.x/9.x/10.x < 10.4.9 / 10.5.x < 10.5.6 / 11.1.x < 11.1.9 / 11.2.x < 11.2.8 多個弱點 (drupal-2025-11-12) | critical |
| 275170 | Splunk Enterprise 9.2.0 < 9.2.9、9.3.0 < 9.3.7、9.4.0 < 9.4.5、10.0.0 < 10.0.1 (SVD-2025-1101) | low |
| 275169 | Splunk Enterprise 9.2.0 < 9.2.9、9.3.0 < 9.3.7、9.4.0 < 9.4.5、10.0.0 < 10.0.1 (SVD-2025-1102) | low |
| 275168 | Splunk Enterprise 9.2.0 < 9.2.9、9.3.0 < 9.3.7、9.4.0 < 9.4.5、10.0.0 < 10.0.1 (SVD-2025-1103) | high |
| 274363 | Gladinet CentreStack <= 16.7.10368.56560 本機檔案包含 | high |
| 272741 | MantisBT < 2.27.2 未經授權的洩漏 (GHSA-g582-8vwr-68h2) | medium |
| 272738 | Liferay Portal 7.4.0 < 7.4.3.120 密碼列舉 | medium |
| 272044 | ArcGIS Server 11.3 / 11.4 / 11.5 SQLi (CVE-2025-57870) | critical |
| 271969 | GitLab 17.1 <18.3.5/18.4 < 18.4.3/18.5 < 18.5.1 (CVE-2025-11702) | high |
| 271958 | Jenkins 外掛程式多個弱點 (2025-10-29) | high |
| 271923 | Dotnetnuke < 10.1.1 透過 SVG 上傳發生已儲存跨網站指令碼 (XSS) (CVE-2025-64094) | medium |
| 271814 | Arcserve UDP < 5.0 Update 4 目錄遊走 | critical |
| 271813 | Ghost Web 應用程式偵測 | info |
| 271812 | Ghost CMS 5.42.1 - 路徑遊走 (CVE-2023-32235) | high |
