Skip to content
OpenAdvisories

Archive

7 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /7 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-14205

    code-projects Chamber of Commerce Membership Management System Your Info membership_profile.php cross site scripting

    A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is an unknown function of the file /membership_profile.php of the component Your Info Handler. Performing manipulation of the argument Full Name/Address/…

    code-projects Chamber of Commerce Membership Management System
  • Low 2.4
    CVE-2025-14201

    alokjaiswal Hotel-Management-services-using-MYSQL-and-php dishsub.php cross site scripting

    A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f. Affected by this vulnerability is an unknown functionality of the file /dishsub.php. The manipulation of the argument item.n…

    alokjaiswal Hotel-Management-services-using-MYSQL-and-php
  • Low 3.5
    CVE-2025-14200

    alokjaiswal Hotel-Management-services-using-MYSQL-and-php Request Pending usersub.php cross site scripting

    A vulnerability has been found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f. Affected is an unknown function of the file /usersub.php of the component Request Pending Page. The manipulation leads …

    alokjaiswal Hotel-Management-services-using-MYSQL-and-php
  • Low 3.5
    CVE-2025-14194

    code-projects Employee Profile Management System view_personnel.php cross site scripting

    A vulnerability was identified in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file /view_personnel.php. The manipulation of the argument per_address/dr_school/other_school leads to cross site scripti…

    code-projects Employee Profile Management System
  • Low 3.5
    CVE-2025-14186

    Grandstream GXP1625 Network Status api.values.post cross site scripting

    A security flaw has been discovered in Grandstream GXP1625 1.0.7.4. The impacted element is an unknown function of the file /cgi-bin/api.values.post of the component Network Status Page. Performing manipulation of the argument vpn_ip results in basic cross si…

    Grandstream GXP1625