CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- sogexiaSogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to...9.1 Critical
- xuxueli xxl-apiA stored cross-site scripting (XSS) in the Business Line Management module of Xxl-api v1.3.0...6.1 Medium
- xuxueli xxl-apiA Cross-Site Request Forgery (CSRF) in xxl-api v1.3.0 allows attackers to arbitrarily add users...6.5 Medium
- centralsquare community developmentCross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields.6.1 Medium
- latchset kdcproxy, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 morePython-kdcproxy: remote dos via unbounded tcp upstream buffering5.9 Medium
- latchset kdcproxy, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 morePython-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv8.6 High
- openprinting cups-filters, libcupsfilters +1 more[BIGSLEEP-434612419] CUPS-Filters has heap-buffer-overflow write in `cfImageLut()`3.7 Low
- salmen simple faucet scriptA Cross-Site Request Forgery (CSRF) vulnerability in Salmen2/Simple-Faucet-Script v1.07 via...8.8 High
- wellsky harmonyA SQL injection vulnerability exists in the login functionality of WellSky Harmony version 4.1.0...9.8 Critical
- rarlab winrarCross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7...6.1 Medium
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Out-of-bounds Read (CWE-125)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- siemens software center, solid edge se2025 +1 moreA vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge...8.5 High
- siemens logo! 12/24rce, logo! 12/24rceo, logo! 230rce +13 more +15 moreA vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO!...7.1 High
- siemens logo! 12/24rce, logo! 12/24rceo, logo! 230rce +13 more +15 moreA vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO!...7.2 High
- siemens logo! 12/24rce, logo! 12/24rceo, logo! 230rce +13 more +15 moreA vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO!...8.6 High
- siemens altair grid engineA vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected...8.5 High
- siemens altair grid engineA vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected...6.8 Medium
- siemens solid edge se2025A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11)....8.7 High
- siemens spectrum power 4A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The...5.6 Medium
- siemens spectrum power 4A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The...8.7 High
- siemens spectrum power 4A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The...8.5 High
- siemens spectrum power 4A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The...8.5 High
- siemens spectrum power 4A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The...8.5 High
- grafana labs databricks datasource pluginIncorrect oauth passthrough in Grafana Databricks Datasource2.1 Low
- grafana labs snowflake datasource pluginIncorrect oauth passthrough in Grafana Snowflake Datasource2.1 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibvirt: denial of service in xml parsing5.5 Medium
- adobe format pluginsFormat Plugins | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe format pluginsFormat Plugins | Out-of-bounds Read (CWE-125)7.8 High
- adobe format pluginsFormat Plugins | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe format pluginsFormat Plugins | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe format pluginsFormat Plugins | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe format pluginsFormat Plugins | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe format pluginsFormat Plugins | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe format pluginsFormat Plugins | Use After Free (CWE-416)5.5 Medium
- adobe format pluginsFormat Plugins | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe pass, pass authentication +1 moreAdobe Pass | Incorrect Authorization (CWE-863)7.1 High
- microsoft nuance powerscribe 360, nuance powerscribe 360 version 4.0.1, nuance powerscribe 360 version 4.0.2 +19 more +21 moreNuance PowerScribe 360 Information Disclosure Vulnerability8.1 High
- microsoft visual studio codeGitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability5.0 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 24h2 +1 more +3 moreWindows Administrator Protection Elevation of Privilege Vulnerability7.8 High
- microsoft visual studio code copilot chat extension, github copilot chat +1 moreMicrosoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability6.8 Medium
- microsoft visual studio code copilot chat extension, github copilot chat +1 moreAgentic AI and Visual Studio Code Remote Code Execution Vulnerability8.8 High
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +30 more +32 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft visual studio 2022 version 17.14, visual studio 2022 +1 moreVisual Studio Remote Code Execution Vulnerability6.7 Medium
- microsoft dynamics 365 field service (online), dynamics 365 +1 moreDynamics 365 Field Service (online) Spoofing Vulnerability8.7 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreMicrosoft SQL Server Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows License Manager Information Disclosure Vulnerability5.5 Medium
- Show moreLoading…