CVEs published in December 2025
5,238 vulnerabilities, 419 critical, 24 exploited.
- churchcrm crmFrappe CRM vulnerable to authenticated XSS via website field5.4 Medium
- d-link dwr-m920, dlink dwr-m920 firmware +1 moreD-Link DWR-M920 formParentControl sub_423848 buffer overflow8.7 High
- d-link dwr-m920, dlink dwr-m920 firmware +1 moreD-Link DWR-M920 formLtefotaUpgradeQuectel sub_415328 command injection5.3 Medium
- d-link dwr-m920, dlink dwr-m920 firmware +1 moreD-Link DWR-M920 formLtefotaUpgradeFibocom sub_4155B4 command injection5.3 Medium
- d-link dwr-m920, dlink dwr-m920 firmware +1 moreD-Link DWR-M920 formFilter sub_42261C stack-based overflow8.7 High
- d-link dwr-m920, dlink dwr-m920 firmware +1 moreD-Link DWR-M920 formDefRoute sub_464794 buffer overflow8.7 High
- campcodes complete online beauty parlor management system, online beauty parlor management system +1 moreCampcodes Complete Online Beauty Parlor Management System search-invoices.php cross site scripting4.8 Medium
- njtech greencmsGreenCMS File DataController.class.php path traversal5.1 Medium
- gitoxidelabs gix-date, gitoxide, red hat logging subsystem for red hat openshift +3 more +5 moreGix-date: gix-date: undefined behavior due to invalid string generation7.1 High
- code-projects refugee food management systemcode-projects Refugee Food Management System addusers.php sql injection6.9 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System refugeesreport.php sql injection6.9 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System refugeesreport2.php sql injection6.9 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System viewtakenfd.php sql injection6.9 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System served.php sql injection6.9 Medium
- code-projects refugee food management systemcode-projects Refugee Food Management System pagenateRefugeesList.php sql injection6.9 Medium
- tenda wh450, wh450 firmware +1 moreTenda WH450 HTTP Request webExcptypemanFilte stack-based overflow8.6 High
- tenda wh450, wh450 firmware +1 moreTenda WH450 qossetting stack-based overflow8.6 High
- tenda wh450, wh450 firmware +1 moreTenda WH450 HTTP Request VirtualSer stack-based overflow8.6 High
- welltend bpmflowwebkitWELLTEND TECHNOLOGY｜ BPMFlowWebkit - Arbitrary File Upload9.3 Critical
- welltend bpmflowwebkitWELLTEND TECHNOLOGY｜ BPMFlowWebkit - Arbitrary File Read8.7 High
- tenda wh450, wh450 firmware +1 moreTenda WH450 HTTP Request SetIpBind stack-based overflow8.6 High
- sun.net wmproSunnet｜WMPro - Arbitrary File Upload9.3 Critical
- open5gsOpen5GS PFCP Session Establishment Request rule-match.c ogs_pfcp_pdr_rule_find_by_packet assertion6.9 Medium
- sun.net wmproSunnet｜WMPro - Arbitrary File Read8.7 High
- sohu cachecloudSohuTV CacheCloud AppController.java appCommandAnalysis cross site scripting5.1 Medium
- unknown yamaps for wordpress pluginYaMaps < 0.6.40 - Contributor+ Stored XSS5.9 Medium
- unknown plugin organizerPlugin Organizer < 10.2.4 - Subscriber+ SQLi8.6 High
- sohu cachecloudSohuTV CacheCloud AppManageController.java doAppAuditList cross site scripting5.1 Medium
- gmission web faxData Exposure in Gmission Web FAX6.8 Medium
- gmission web faxPrivilege Escalation in Gmission Web FAX8.4 High
- gmission web faxAccount Takeover in Gmission Web FAX8.5 High
- sohu cachecloudSohuTV CacheCloud InstanceController.java advancedAnalysis cross site scripting5.1 Medium
- sohu cachecloudSohuTV CacheCloud RedisConfigTemplateController.java preview cross site scripting5.1 Medium
- sohu cachecloudSohuTV CacheCloud ServerController.java index cross site scripting5.1 Medium
- advaya softech gems erp portalAdvaya Softech GEMS ERP Portal Error Message home.jsp cross site scripting5.3 Medium
- biggidroid simple php cmsBiggiDroid Simple PHP CMS editsite.php sql injection5.1 Medium
- angeljudesuarez student management systemitsourcecode Student Management System statistical.php sql injection6.9 Medium
- smartertools smartermailUpload Arbitrary Files10.0 Critical
- admerc online cake ordering systemitsourcecode Online Cake Ordering System detailtransac.php sql injection6.9 Medium
- admerc online cake ordering systemitsourcecode Online Cake Ordering System updatesupplier.php sql injection6.9 Medium
- admerc online cake ordering systemitsourcecode Online Cake Ordering System updatecustomer.php sql injection6.9 Medium
- innorix wpUnrestricted File Upload and RCE in Innorix WP8.5 High
- innorix wpArbitrary File Download through Path Traversal in Innorix WP6.9 Medium
- tenda wh450, wh450 firmware +1 moreTenda WH450 SafeMacFilter stack-based overflow8.6 High
quickjsOSS-FuzzUNKNOWN WRITE in fuzz_regexpNo score- kings information & network co. kess enterpriseData Exposure in Kings Information & Network KESS Enterprise8.6 High
- tenda wh450, wh450 firmware +1 moreTenda WH450 SafeEmailFilter stack-based overflow8.6 High
- kuwfi ac900 firmwareA stack-based buffer overflow exists in the GoAhead-Webs HTTP daemon on KuWFi 4G LTE AC900...9.8 Critical
- nagios xiIn NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any...8.8 High
- nagios xiNagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin...7.5 High
- Show moreLoading…