CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- ozeki ltd. sms gatewayOzeki SMS Gateway <= 10.3.208 Unauthenticated Arbitrary File Read8.7 High
- tec-it datenverarbeitung gmbh, austria tbarcodeTEC-IT TBarCode SDK 11.15 Remote File Create6.9 Medium
- tinycontrol lan controllerTinycontrol LAN Controller v3 (LK3) Remote DoS8.7 High
- ucancode.net software e-xd++ visualization enterprise suiteUCanCode E-XD++ Visualization Enterprise Suite Untrusted Pointer Dereference RCE8.6 High
- linuxmedia: iris: fix module removal if firmware download failedNo score
- linuxmedia: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()5.6 Medium
- linuxnetfilter: nft_objref: validate objref and objrefmap expressions7.8 High
- linuxbtrfs: avoid potential out-of-bounds in btrfs_encode_fh()7.8 High
- linuxsctp: Fix MAC comparison to be constant-time8.1 High
- linuxlistmount: don't call path_put() under namespace semaphore7.8 High
- linuxipmi: Rework user message limit handling7.8 High
- linuxkernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths7.8 High
- linuxSquashfs: reject negative file sizes in squashfs_read_inode()7.1 High
- linuxpage_pool: Fix PP_MAGIC_MASK to avoid crashing on some 32-bit arches7.8 High
- linuxext4: avoid potential buffer over-read in parse_apply_sb_mount_options()7.8 High
- linuxmedia: mc: Clear minor number before put deviceNo score
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morefs: quota: create dedicated workqueue for quota_release_work5.7 Medium
- linuxmount: handle NULL values in mnt_ns_release()6.8 Medium
- linuxcpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()7.0 High
- linuxxtensa: simdisk: add input size check in proc_write_simdiskNo score
- linuxRevert "ipmi: fix msg stack when IPMI is disconnected"7.3 High
- linuxdrm/amdkfd: Fix kfd process ref leaking when userptr unmappingNo score
- linuxext4: guard against EA inode refcount underflow in xattr update7.8 High
- linuxnet: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx_read_raw_eepromNo score
- linuxpwm: berlin: Fix wrong register in suspend/resumeNo score
- linuxnet/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()7.5 High
- linuxtcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().8.1 High
- linuxice: ice_adapter: release xa entry on adapter allocation failure7.6 High
- linuxKVM: arm64: Fix debug checking for np-guests using huge mappingsNo score
- linuxbpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}7.5 High
- linuxcrypto: skcipher - Fix reqsize handling7.8 High
- linuxx86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNPNo score
- linuxmailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loopNo score
- linuxext4: verify orphan file size is not too big7.1 High
- linuxpid: Add a judgment for ns null in pid_nr_ns7.3 High
- sensiolabs httpfoundation, symfony +1 moreSymfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass7.3 High
- enalean tuleapTuleap missing CSRF protections in the File Release System4.6 Medium
- duckdbDuckDB Encryption Crypto implementation is vulnerable6.9 Medium
- ibm qradar security information and event management, qradar security information and event manager +1 moreIBM QRadar SIEM Information Disclosure6.5 Medium
- ibm openpagesIBM OpenPages Host Header Injection5.4 Medium
- dinukanavaratna dee storeDinukaNavaratna Dee Store authorization6.9 Medium
emacsTuxCare,emacs-commonTuxCare,emacs-elTuxCare +3 more +5 moreUpdate of emacsNo score- evervault, evervault evervault-go +1 moreEvervault Go SDK: Incomplete PCR Validation in Enclave Attestation for non-Evervault hosted Enclaves8.7 High
- angeljudesuarez online voting systemitsourcecode Online Voting System index.php unrestricted upload5.3 Medium
- drupal, drupal core +1 moreDrupal core - Moderately critical - Information disclosure - SA-CORE-2025-0083.7 Low
- drupal, drupal core +1 moreDrupal core - Moderately critical - Defacement - SA-CORE-2025-0074.3 Medium
- dell data lakehouseDell Data Lakehouse, versions prior to 1.6.0.0, contain(s) an Improper Access Control...9.1 Critical
- oretnom23 survey application systemSourceCodester Survey Application System view_survey.php sql injection6.9 Medium
- oretnom23 alumni management systemSourceCodester Alumni Management System manage_career.php sql injection5.3 Medium
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of...8.8 High
- Show moreLoading…