Skip to content
OpenAdvisories

Archive

8 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /8 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Low 2.7
    CVE-2025-36102

    IBM Controller Validation Bypass

    IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user to bypass validation, passing user input into the application as trusted data, due to client-side enforcement of server-side security.

    IBM Cognos Controller Controller
  • Low 2.4
    CVE-2025-14244

    GreenCMS Menu Management CustomController.class.php cross site scripting

    A flaw has been found in GreenCMS 2.3.0603. Affected by this issue is some unknown functionality of the file /Admin/Controller/CustomController.class.php of the component Menu Management Page. This manipulation of the argument Link causes cross site scripting…

  • Low 3.5
    CVE-2025-14228

    Yealink SIP-T21P E2 Local Directory cross site scripting

    A weakness has been identified in Yealink SIP-T21P E2 52.84.0.15. Impacted is an unknown function of the component Local Directory Page. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made a…

    Yealink SIP-T21P E2
  • Low 3.3
    CVE-2025-66334

    Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may …

    Huawei HarmonyOS Network devices
  • Low 3.3
    CVE-2025-66333

    Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may …

    Huawei HarmonyOS Network devices
  • Low 3.3
    CVE-2025-66332

    Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may …

    Huawei HarmonyOS Network devices
  • Low 3.3
    CVE-2025-66331

    Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may …

    Huawei HarmonyOS Network devices
  • Low 3.5
    CVE-2025-14221 Public exploit

    SourceCodester Online Banking System page cross site scripting

    A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The…

    SourceCodester Online Banking System
  • Low 3.3
    CVE-2025-60912

    phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality. The gen…

  • Low 3.5
    CVE-2025-65228

    A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R. Elettronica TLK302T te…