CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- galetteGalette is vulnerable to Cross-site Scripting5.3 Medium
- glpi-project glpi-inventory-pluginGLPI Inventory Plugin is Vulnerable to Unauthenticated SQL Injection7.5 High
- nvidia nvappNVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can...8.2 High
- nvidia runaiNVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper...6.2 Medium
keystoneUbuntukeystone vulnerabilityNo scoregithub.com/kgateway-dev/kgatewayGo,github.com/kgateway-dev/kgateway/v2Go +1 moreKgateway transformation policy template can emit files from the container6.3 Medium- survision license plate recognition cameraMissing Authentication for Critical Function Survision License Plate Recognition Camera9.3 Critical
- kgateway-dev kgatewaykgateway is missing xDS authorization5.3 Medium
- salesforce agentforce vibes extension, agentforce vibes +1 moreIncorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce...5.3 Medium
- salesforce agentforce vibes extension, agentforce vibes +1 moreImproper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce...5.3 Medium
- salesforce agentforce vibes extension, agentforce vibes +1 moreImproper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce...6.5 Medium
- salesforce mulesoft anypoint code builderIncorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft...5.3 Medium
- salesforce mulesoft anypoint code builderImproper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft...5.3 Medium
- salesforce mulesoft anypoint code builderImproper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft...6.5 Medium
- radiometrics vizairMissing Authentication for Critical Function in Radiometrics VizAir10.0 Critical
- radiometrics vizairInsufficiently Protected Credentials in Radiometrics VizAir10.0 Critical
- radiometrics vizairMissing Authentication for Critical Function in Radiometrics VizAir10.0 Critical
io.github.ascopes:protobuf-maven-pluginMavenProtobuf Maven Plugin protocDigest is ignored when using protoc from PATH1.0 Low- 3scale-sre marin3rMARIN3R: Cross-Namespace Vulnerability in the Operator8.7 High
- octoprintOctoPrint is vulnerable to XSS through Action Command Notifications and Prompts4.6 Medium
- linuxfoundation runcrunc: LSM labels can be bypassed with malicious config using dummy procfs files7.3 High
- linuxfoundation runccontainer escape due to /dev/console mount and related races8.4 High
- linuxfoundation runcrunc container escape via "masked path" abuse due to mount race conditions7.3 High
- webcomics dosageDosage vulnerable to Directory Traversal through crafted HTTP responses8.8 High
- openstack keystoneOpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.7.5 High
- jon4hz jellysweepJellysweep uses uncontrolled data in image cache API endpoint8.9 High
- rboatright meetinglistMeetingList <= 0.11 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- fahad mahmood easy upload files during checkoutEasy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File Upload9.8 Critical
dspyPyPIInsecure configuration in DSPy lead to arbitrary file read when running untrusted code inside the sandbox5.9 Medium- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
- canaldenuncia canaldenuncia.appMissing Authorization vulnerability in CanalDenuncia.app8.7 High
govulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo score- hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 moreShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'9.8 Critical
- themeisle orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & moreOrbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy6.4 Medium
- cfmoto rideIDOR vulnerability in the CFMOTO RIDE API8.5 High
- google android, mediatek, inc. mt6789, mt6835, mt6855, mt6878, mt6879, mt6886, mt6897, mt6899, mt6983, mt6985, mt6989, mt6991, mt8169, mt8188, mt8195, mt8196, mt8781, mt8796 +1 moreIn charger, there is a possible out of bounds write due to a missing bounds check. This could...6.7 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 moreIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This...6.7 Medium
- Show moreLoading…