CVEs published December 7, 2025
23 CVEs were published on December 7, 2025: 0 critical, 4 high.
- Published
- 23
- Critical
- 0
- High
- 4
- Medium
- 19
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- code-projects Employee Profile Management System
- 3
- Verysync 微力同步
- 3
- alokjaiswal Hotel-Management-services-using-MYSQL-and-php
- 2
- SGAI Space1 NAS N1211DS
- 2
- UGREEN DH2100+
- 2
- Chanjet CRM
- 1
- Chanjet TPlus
- 1
- code-projects Chamber of Commerce Membership Management Sys…
- 1
- code-projects Question Paper Generator
- 1
- Grandstream GXP1625
- 1
High 4
- CVE-2025-14196H3C Magic B1 aspForm sub_44de0 buffer overflowH3C Magic B1
- CVE-2025-14191UTT 进取 512W formP2PLimitConfig strcpy buffer overflowUTT 进取
- CVE-2025-14188UGREEN DH2100+ nas_svr create handler_file_backup_create command injectionUGREEN DH2100+
- CVE-2025-14187UGREEN DH2100+ nas_svr create handler_file_backup_create buffer overflowUGREEN DH2100+
Medium, low and unrated 19
- CVE-2025-14205code-projects Chamber of Commerce Membership Management System Your Info membership_profile.php cross site scriptingcode-projects Chamber of Commerce Membership Management Sys…
- CVE-2025-14204TykoDev cherry-studio-TykoFork OAuth Server Discovery oauth-authorization-server redirectToAuthorization os command injectionTykoDev cherry-studio-TykoFork
- CVE-2025-14203code-projects Question Paper Generator selectquestionuser.php sql injectioncode-projects Question Paper Generator
- CVE-2025-14201alokjaiswal Hotel-Management-services-using-MYSQL-and-php dishsub.php cross site scriptingalokjaiswal Hotel-Management-services-using-MYSQL-and-php
- CVE-2025-14200alokjaiswal Hotel-Management-services-using-MYSQL-and-php Request Pending usersub.php cross site scriptingalokjaiswal Hotel-Management-services-using-MYSQL-and-php
- CVE-2025-14199Verysync 微力同步 Web Administration text.txt unrestricted uploadVerysync 微力同步
- CVE-2025-14198Verysync 微力同步 Web Administration download information disclosureVerysync 微力同步
- CVE-2025-14197Verysync 微力同步 Web Administration f96956469e7be39d information disclosureVerysync 微力同步
- CVE-2025-14195code-projects Employee Profile Management System add_file_query.php unrestricted uploadcode-projects Employee Profile Management System
- CVE-2025-14194code-projects Employee Profile Management System view_personnel.php cross site scriptingcode-projects Employee Profile Management System
- CVE-2025-14193code-projects Employee Profile Management System view_personnel.php sql injectioncode-projects Employee Profile Management System
- CVE-2025-14192RashminDungrani online-banking auth_login.php sql injectionRashminDungrani online-banking
- CVE-2025-14190Chanjet TPlus sql injectionChanjet TPlus
- CVE-2025-14189Chanjet CRM jxf_dump_table_demo.php sql injectionChanjet CRM
- CVE-2025-14186Grandstream GXP1625 Network Status api.values.post cross site scriptingGrandstream GXP1625
- CVE-2025-14185Yonyou U8 Cloud AppServletService.class sql injectionYonyou U8 Cloud
- CVE-2025-14184SGAI Space1 NAS N1211DS gsaiagent JSONAPI NGNIX_UPLOAD command injectionSGAI Space1 NAS N1211DS
- CVE-2025-14183SGAI Space1 NAS N1211DS gsaiagent JSONAPI GET_USER_INFO credentials storageSGAI Space1 NAS N1211DS
- CVE-2025-14182Sobey Media Convergence System upload path traversalSobey Media Convergence System