Skip to content
OpenAdvisories

Archive

30 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /30 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

87 results · Clear filters · Feed

  • Medium 6.1
    CVE-2025-14312

    Advance WP Query Search Filter <= 1.0.10 - Reflected XSS via counter

    The Advance WP Query Search Filter WordPress plugin through 1.0.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

    Web / CMS
  • Medium 5.0
    CVE-2025-15222

    Dromara Sa-Token SaSerializerTemplateForJdkUseBase64.java ObjectInputStream.readObject deserialization

    A vulnerability has been found in Dromara Sa-Token up to 1.44.0. This issue affects the function ObjectInputStream.readObject of the file SaSerializerTemplateForJdkUseBase64.java. Such manipulation leads to deserialization. The attack can be executed remotely…

    dromara Sa-Token
  • Medium 4.3
    CVE-2025-15220

    SohuTV CacheCloud LoginController.java init cross site scripting

    A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This affects the function init of the file src/main/java/com/sohu/cache/web/controller/LoginController.java. The manipulation results in cross site scripting. The attack may be launched remotely. …

    SohuTV CacheCloud
  • Medium 4.3
    CVE-2025-15213

    code-projects Student File Management System File Download download.php improper authorization

    A vulnerability has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /download.php of the component File Download Handler. The manipulation of the argument store_id leads to improper autho…

    code-projects Student File Management System
  • Medium 6.3
    CVE-2025-15212

    code-projects Refugee Food Management System regfood.php sql injection

    A vulnerability was detected in code-projects Refugee Food Management System 1.0. This issue affects some unknown processing of the file /home/regfood.php. Performing manipulation of the argument a results in sql injection. Remote exploitation of the attack i…

    code-projects Refugee Food Management System
  • Medium 6.3
    CVE-2025-15211

    code-projects Refugee Food Management System refugee.php sql injection

    A flaw has been found in code-projects Refugee Food Management System 1.0. Impacted is an unknown function of the file /home/refugee.php. Executing manipulation of the argument refNo/Fname/Lname/sex/age/contact/nationality_nid can lead to sql injection. The a…

    code-projects Refugee Food Management System
  • Medium 6.5
    CVE-2025-65925 Public exploit

    An issue was discovered in Zeroheight (SaaS) prior to 2025-06-13. A legacy user creation API pathway allowed accounts t…