CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...6.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6835, mt6878, mt6886, mt6897, mt6899, mt6982, mt6985, mt6986, mt6986d, mt6989, mt6990, mt6991, mt8676, mt8678, mt8755, mt8893 +3 more +5 moreIn gnss service, there is a possible out of bounds write due to an incorrect bounds check. This...6.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6835, mt6878, mt6886, mt6897, mt6899, mt6982, mt6985, mt6986, mt6986d, mt6989, mt6990, mt6991, mt8676, mt8678, mt8755, mt8893 +3 more +5 moreIn gnss service, there is a possible out of bounds write due to an incorrect bounds check. This...6.7 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...6.7 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...6.7 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...6.7 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...5.3 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...5.3 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...5.3 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...4.2 Medium
- google android, mediatek, inc. mt2718, mt6989, mt6991, mt8370, mt8390, mt8395, mt8676, mt8678, mt87920 +1 moreIn apusys, there is a possible memory corruption due to use after free. This could lead to local...4.2 Medium
- google android, mediatek, inc. mt6899, mt6991, mt8793 +1 moreIn pda, there is a possible escalation of privilege due to use after free. This could lead to...4.2 Medium
- google android, mediatek, inc. mt2718, mt6761, mt6765, mt6768, mt6781, mt6853, mt6877, mt6886, mt6893, mt6897, mt6899, mt6983, mt6989, mt6991, mt8113, mt8163, mt8168, mt8169, mt8183, mt8186, mt8188, mt8195, mt8196, mt8321, mt8365, mt8385, mt8390, mt8391, mt8512, mt8516, mt8519, mt8676, mt8678, mt8695, mt8696, mt8698, mt8755, mt8766, mt8768, mt8771, mt8775, mt8781, mt8786, mt8788e, mt8791t, mt8792, mt8793, mt8796, mt8797, mt8798, mt8873, mt8883, mt8893 +1 moreIn clkdbg, there is a possible escalation of privilege due to use after free. This could lead to...4.2 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt7603, mt7615, mt7622, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...8.0 High
- mediatek software development kit, mediatek, inc. mt7902, mt7920, mt7921, mt7922, mt7925, mt7927 +1 moreIn wlan STA driver, there is a possible out of bounds read due to a race condition. This could...4.7 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...7.8 High
- mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...7.8 High
- mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...7.8 High
- google android, linuxfoundation yocto, mediatek, inc. mt2737, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6990, mt6991, mt8188, mt8195, mt8676, mt8678, mt8696 +2 more +4 moreIn preloader, there is a possible escalation of privilege due to an insecure default value. This...6.7 Medium
- mediatek software development kit, mediatek, inc. mt7902, mt7920, mt7921, mt7922, mt7925, mt7927 +1 moreIn wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check....7.8 High
- mediatek lr12a, nr15, nr16 +1 more +3 moreIn ims service, there is a possible out of bounds write due to a missing bounds check. This could...7.5 High
- mediatek lr12a, nr15, nr16 +3 more +5 moreIn Modem, there is a possible out of bounds write due to an incorrect bounds check. This could...7.5 High
- mediatek lr12a, nr15, nr16 +3 more +5 moreIn Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead...8.1 High
- alaminopu clubmemberClubmember <= 0.2 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- revokee associados amazon pluginAssociados Amazon Plugin <= 0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- redq reuse builderReuse Builder <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- augustinfotech bootstrap multi-language responsive portfolioMulti-language Responsive Portfolio WordPress <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- bestiadurmiente visit counterVisit Counter 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- tanvirahmed1984 simple user capabilitiesSimple User Capabilities <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation9.8 Critical
- lumiblog footnotes made easyFootnotes Made Easy <= 3.0.7 - Unauthenticated Stored Cross-Site Scripting7.2 High
- sidngr import export for woocommerceImport Export For WooCommerce <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update4.3 Medium
- shakhi nari accountantNari Accountant <= 1.0.12 - Authenticated (Editor+) Stored Cross-Site Scripting4.4 Medium
- carticon wp carticonWP Carticon <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- impacttechlab elegance menuElegance Menu <= 1.9 - Authenticated (Contributor+) Local File Inclusion7.5 High
- sugiartha mapmapMapMap <= 1.1 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting6.1 Medium
- bondnono linkedin resumeLinkedIn Resume <= 2.00 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- aitool ai auto tool content writing assistant (gemini writer, chatgpt ) all in oneAi Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One 2.0.7 - 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Post Creation4.3 Medium
- erinmorelli em beer managerEM Beer Manager <= 3.2.3 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- centangle centangle-teamCentangle Team Showcase <= 1.0.0 - Cross-Site Request Forgery To Plugin's Settings Modification And Stored Cross-Site Scripting6.1 Medium
- lmbbox lmb^box smileysLMB^Box Smileys <= 3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- hupe13 extensions for leaflet mapExtensions for Leaflet Map <= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- tanvirahmed1984 simple user capabilitiesSimple User Capabilities <= 1.0 - Missing Authorization to Unauthenticated Capability Reset5.3 Medium
- beycanpress crypto payment gateway with payeer for woocommerceCrypto Payment Gateway with Payeer for WooCommerce <= 1.0.3 - Unauthenticated Payment Bypass7.5 High
- samhoamt sh contextual helpSH Contextual Help <= 3.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- codebangers all in one time clock lite – tracking employee time has never been easierAll in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0.3 - Missing Authorization to Page Creation and Information Exposure6.5 Medium
- socialmedialtd wpcf7 stop wordsSocial Media WPCF7 Stop Words <= 1.1.3 - Cross-Site Request Forgery to Settings Update5.4 Medium
- kris iv free quotationFree Quotation <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- domiinodev dominokitDominoKit <= 1.1.0 - Missing Authorization to Unauthenticated Settings Update5.3 Medium
- mahype pagerank toolsPagerank Tools <= 1.1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- litonice13 content locker for elementor, image comparison addon for elementor, image hover effects for elementor +1 more +3 moreMultiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload8.8 High
- Show moreLoading…