CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript: WebAssembly component7.5 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU component9.8 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU component9.8 Critical
- mozilla firefoxSpoofing issue in Firefox3.4 Low
- mozilla firefox, thunderbird +1 moreUse-after-free in the Audio/Video component8.8 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Core & HTML component6.1 Medium
- mozilla firefox, thunderbird +1 moreRace condition in the Graphics component7.5 High
- zephyrproject-rtos zephyrUserspace privilege escalation vulnerability on Cortex M8.2 High
- ivanti endpoint managerInsecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4...7.1 High
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit2.7 Low
- premierturk information technologies inc. excavation management information systemImproper Access Control in Premierturk's Excavation Management Information System8.1 High
- rockwell automation studio 5000 ® simulation interfaceStudio 5000 ® Simulation Interface Local Code Execution8.9 High
- rockwell automation studio 5000® simulation interface™Studio 5000 ® Simulation Interface SSRF8.9 High
- netscaler adc, gateway +1 moreCross-Site Scripting (XSS)5.9 Medium
- rockwell automation verve asset managerVerve Asset Manager Access Control Vulnerability8.4 High
- rockwell automation factorytalk® datamosaix™ private cloudFactoryTalk® DataMosaix™ Private Cloud – Persistent XSS8.6 High
- zohocorp manageengine opmanagerStored XSS6.5 Medium
- rockwell automation factorytalk® datamosaix™ private cloudFactoryTalk® DataMosaix™ Private Cloud – Authentication Bypass7.6 High
- zohocorp manageengine applications managerCommand Injection8.8 High
- zohocorp manageengine analytics plusSQL Injection9.8 Critical
- turkguven software technologies inc. perfektiveAuthentication Bypass in Turkguven's Perfektive7.3 High
- fairsketch rise crm framework, rise ultimate project manager +1 moreMultiple vulnerabilities in Fairsketch's RISE CRM Framework5.1 Medium
- fairsketch rise crm framework, rise ultimate project manager +1 moreMultiple vulnerabilities in Fairsketch's RISE CRM Framework5.1 Medium
- fairsketch rise crm framework, rise ultimate project manager +1 moreMultiple vulnerabilities in Fairsketch's RISE CRM Framework5.1 Medium
- fairsketch rise crm framework, rise ultimate project manager +1 moreMultiple vulnerabilities in Fairsketch's RISE CRM Framework5.1 Medium
- bytecodealliance wasmtimeWasmtime provides unsound API access to a WebAssembly shared linear memory1.8 Low
- fairsketch rise crm framework, rise ultimate project manager +1 moreMultiple vulnerabilities in Fairsketch's RISE CRM Framework5.1 Medium
- fairsketch rise crm framework, rise ultimate project manager +1 moreMultiple vulnerabilities in Fairsketch's RISE CRM Framework5.1 Medium
- aryom software high technology systems inc. kvknetReflected XSS in Aryom's KVKNET6.1 Medium
- creativethemeshq blocksy companionBlocksy Companion <= 2.1.19 - Authenticated (Author+) Arbitrary File Upload via SVG Upload Bypass8.8 High
- themefic hydra booking — appointment scheduling & booking calendarHydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Missing Payment Verification to Unauthenticated Payment Bypass5.3 Medium
- techlabpro1 classified listing – ai-powered classified ads & business directory pluginClassified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering4.3 Medium
- themefic hydra booking — appointment scheduling & booking calendarHydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generat…5.3 Medium
- leopardhost tnc toolbox: web performanceTNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover10.0 Critical
- zohocorp manageengine exchange reporter plusStored XSS7.3 High
- zohocorp manageengine exchange reporter plusStored XSS7.3 High
- zohocorp manageengine exchange reporter plusStored XSS7.3 High
- qnap photo stationPhoto Station9.8 Critical
- bitdefender endpoint security tools for mac, endpoint security +1 moreImproper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac6.8 Medium
- zohocorp manageengine exchange reporter plusStored XSS7.3 High
- axis communications ab osThe VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator...6.4 Medium
- axis communications ab osIt was possible to upload files with a specific name to a temporary directory, which may result...3.1 Low
- axis communications ab osThe VAPIX API port.cgi did not have sufficient input validation, which may result in process...4.3 Medium
- axis communications ab optimizerAXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially...8.4 High
- axis osAn ACAP configuration file has improper permissions and lacks input validation, which could...6.7 Medium
- axis osAn ACAP configuration file has improper permissions, which could allow command injection and...6.7 Medium
- axis communications ab osA 3rd-party component exposed its password in process arguments, allowing for low-privileged...6.0 Medium
- axis osA malicious ACAP application can gain access to admin-level service account credentials used by...6.6 Medium
- axis osACAP applications can gain elevated privileges due to improper input validation, potentially...6.7 Medium
- Show moreLoading…