CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- kubevirtKubeVirt Vulnerable to Arbitrary Host File Read and Write8.5 High
- ibm db2IBM denial of service5.1 Medium
- ibm db2IBM Db2 denial of service6.2 Medium
- zephyrproject-rtos zephyrBluetooth: peripheral: Invalid handling of malformed connection request6.5 Medium
- ibm db2IBM Db2 privilege escalation7.4 High
- ibm db2IBM Db2 improper account lockout6.3 Medium
- ibm db2IBM Db2 denial of service5.3 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting5.4 Medium
- ibm db2IBM Db2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query6.5 Medium
- amazon ion-cAn uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be…6.9 Medium
- campcodes school file management, school file management system +1 moreCampcodes School File Management update_user.php sql injection5.1 Medium
- autodesk shared componentsPRT File Parsing Memory Corruption Vulnerability7.8 High
- openwebui open webui, open-webui +1 moreOpen WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events7.3 High
- projectworlds online notes sharing platformprojectworlds Online Notes Sharing Platform userprofile.php unrestricted upload5.3 Medium
- ge vernova smallworldSmallworld SWMFS Improper Authentication9.3 Critical
- ge vernova smallworldSmallworld SWMFS Arbitrary File Ops5.3 Medium
- dedebizDedeBIZ spec_add.php sql injection5.1 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE8.7 High
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 55.3 Medium
- qnap qumagieQuMagie9.5 Critical
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 51.3 Low
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 51.3 Low
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 54.9 Medium
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 54.9 Medium
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 51.2 Low
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 50.6 Low
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 54.9 Medium
- qnap systems inc. notification centerNotification Center7.2 High
- qnap qulog centerQuLog Center2.2 Low
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 52.2 Low
- qnap qsync centralQsync Central4.0 Medium
- qnap download stationDownload Station2.3 Low
- qnap qumagieQuMagie7.8 High
- qnap download stationDownload Station2.2 Low
- qnap qulog centerQuLog Center1.2 Low
- dedebizDedeBIZ freelist_main.php sql injection5.1 Medium
- dedebizDedeBIZ templets_one_edit.php sql injection5.1 Medium
- code-projects responsive hotel sitecode-projects Responsive Hotel Site roombook.php sql injection5.1 Medium
- monsta limited of new zealand ftp, monstaftp monsta ftp +1 moreMonsta FTP <= 2.11 Unauthenticated Arbitrary File Upload9.3 Critical
- code-projects responsive hotel sitecode-projects Responsive Hotel Site reservation.php sql injection5.1 Medium
- code-projects responsive hotel sitecode-projects Responsive Hotel Site newsletterdel.php sql injection5.1 Medium
- gg soft software services inc. paperworkSQLi in GG Soft's PaperWork8.8 High
- No product listednewbee-mall-plus seckillExecution executeSeckill authorization6.3 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System admin_class.php delete_house sql injection5.1 Medium
- sequoia-pgp sequoiaSequoia PGP has Subtraction Overflow when aes_key_unwrap function is provided ciphertext that is too short5.3 Medium
kernelTuxCare,kernel-abi-stablelistsTuxCare,kernel-coreTuxCare +54 more +56 moreUpdate of kernelNo score- dial centrosnetSQL injection in DIAL's CentrosNet9.3 Critical
- buffalo inc. wsr-1800ax4, wsr-1800ax4-kh, wsr-1800ax4b +1 more +3 moreUse of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router ...5.3 Medium
- curl, curl wcurl +1 morewcurl path traversal with percent-encoded slashes4.6 Medium
- yydevelopment page & post notesPage & Post Notes <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Note Update/Deletion4.3 Medium
- Show moreLoading…