Skip to content
OpenAdvisories

Archive

7 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /7 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2025-14196

    H3C Magic B1 aspForm sub_44de0 buffer overflow

    A weakness has been identified in H3C Magic B1 up to 100R004. The affected element is the function sub_44de0 of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploi…

    H3C Magic B1
  • High 7.3
    CVE-2025-14192

    RashminDungrani online-banking auth_login.php sql injection

    A vulnerability was found in RashminDungrani online-banking up to 2337ad552ea9d385b4e07b90e6f32d011b7c68a2. This affects an unknown part of the file /site/dist/auth_login.php. Performing manipulation of the argument Username results in sql injection. The atta…

    RashminDungrani online-banking
  • High 8.8
    CVE-2025-14191

    UTT 进取 512W formP2PLimitConfig strcpy buffer overflow

    A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formP2PLimitConfig. Such manipulation of the argument except leads to buffer overflow. It is possible to launch the attack remo…

    UTT 进取 512W
  • High 7.3
    CVE-2025-14190

    Chanjet TPlus sql injection

    A flaw has been found in Chanjet TPlus up to 20251121. Affected by this vulnerability is an unknown functionality of the file /tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanySettingController,Ufida.T.SM.UIP.ashx?method=Load. This manipulation of the argument curren…

    Chanjet TPlus
  • High 7.3
    CVE-2025-14189

    Chanjet CRM jxf_dump_table_demo.php sql injection

    A vulnerability was detected in Chanjet CRM up to 20251121. Affected is an unknown function of the file /tools/jxf_dump_table_demo.php. The manipulation of the argument gblOrgID results in sql injection. The attack may be performed from remote. The exploit is…

    Chanjet CRM
  • High 7.2
    CVE-2025-14188

    UGREEN DH2100+ nas_svr create handler_file_backup_create command injection

    A security vulnerability has been detected in UGREEN DH2100+ up to 5.3.0.251125. This impacts the function handler_file_backup_create of the file /v1/file/backup/create of the component nas_svr. The manipulation of the argument path leads to command injection…

    UGREEN DH2100+
  • High 7.2
    CVE-2025-14187

    UGREEN DH2100+ nas_svr create handler_file_backup_create buffer overflow

    A weakness has been identified in UGREEN DH2100+ up to 5.3.0.251125. This affects the function handler_file_backup_create of the file /v1/file/backup/create of the component nas_svr. Executing a manipulation of the argument path can lead to buffer overflow. T…

    UGREEN DH2100+