Skip to content
OpenAdvisories

Archive

8 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /8 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-66204 Public exploit

    WBCE CMS allows brute-force protection bypass using X-Forwarded-For header

    WBCE CMS is a content management system. Version 1.6.4 contains a brute-force protection bypass where an attacker can indefinitely reset the counter by modifying `X-Forwarded-For` on each request, gaining unlimited password guessing attempts, effectively bypa…

    WBCE WBCE_CMS
  • Critical 9.4
    CVE-2025-65964 Public exploit

    n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook

    n8n is an open source workflow automation platform. Versions 0.123.1 through 1.119.1 do not have adequate protections to prevent RCE through the project's pre-commit hooks. The Add Config operation allows workflows to set arbitrary Git configuration values, i…

    n8n-io n8n n8n npm
  • High 7.8
    CVE-2025-48583 Public exploit

    In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the…

    Google Android Android
  • Low 3.5
    CVE-2025-14221 Public exploit

    SourceCodester Online Banking System page cross site scripting

    A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The…

    SourceCodester Online Banking System
  • High 8.8
    CVE-2025-65271 Public exploit

    Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary t…