Skip to content
OpenAdvisories

Archive

15 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /15 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-14722

    vion707 DMadmin Backend AddonsController.class.php add cross site scripting

    A vulnerability was determined in vion707 DMadmin up to 3403cafdb42537a648c30bf8cbc8148ec60437d1. This impacts the function Add of the file Admin/Controller/AddonsController.class.php of the component Backend. Executing manipulation can lead to cross site scr…

    vion707 DMadmin
  • Low 1.0
    CVE-2025-64725

    Weblate has improper validation upon invitation acceptance

    Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

    WeblateOrg weblate weblate PyPI
  • Low 0.9
    CVE-2025-14714

    TCC Bypass via Inherited Permissions in Bundled Interpreter

    An Authentication Bypass vulnerability existed where the application bundled an interpreter (Python) that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle By executing the bundled interpreter…

    The Document Foundation LibreOffice
  • Low 3.1
    CVE-2025-14023

    LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-ap…

    LINE LINE client for iOS iOS
  • Low 3.4
    CVE-2025-14019

    LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific …

    LINE LINE client for Android Android
  • Low 3.7
    CVE-2025-14697

    Shenzhen Sixun Software Sixun Shanghui Group Business Management System ExportFiles file access

    A security flaw has been discovered in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3. Affected by this issue is some unknown functionality of the file /ExportFiles/. The manipulation results in files or directories accessib…

    Shenzhen Sixun Software Sixun Shanghui Group Business Management System
  • Low 2.5
    CVE-2025-55703

    An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an out…