Skip to content
OpenAdvisories

Archive

1 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /1 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-66401

    MCP Watch has a Critical Command Injection in cloneRepo allows Remote Code Execution (RCE) via malicious URL

    MCP Watch is a comprehensive security scanner for Model Context Protocol (MCP) servers. In 0.1.2 and earlier, the MCPScanner class contains a critical Command Injection vulnerability in the cloneRepo method. The application passes the user-supplied githubUrl …

    kapilduraphe mcp-watch mcp-watch npm
  • Critical 9.0
    CVE-2025-3500 Public exploit

    Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation

    Integer Overflow or Wraparound vulnerability in Avast Antivirus (25.1.981.6) on Windows allows Privilege Escalation.This issue affects Antivirus: from 25.1.981.6 before 25.3.

    Avast Antivirus
  • Critical 9.1
    CVE-2025-12106

    Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over…

    OpenVPN OpenVPN
  • Critical 9.6
    CVE-2025-63532

    A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the cancel.php component. The appli…

  • Critical 9.6
    CVE-2025-63535

    A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The applicat…

  • Critical 9.6
    CVE-2025-63525

    An issue was discovered in Blood Bank Management System 1.0 allowing authenticated attackers to perform actions with es…

  • Critical 10.0
    CVE-2025-63531

    A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. Th…

  • Critical 9.8
    CVE-2025-51683 Scanner template

    A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQ…

  • Critical 9.8
    CVE-2025-51682

    mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and g…

  • Critical 9.1
    CVE-2025-65836

    PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController.