CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- softaculous page builder: pagelayer – drag and drop website builderPage Builder: Pagelayer – Drag and Drop website builder <= 2.0.5 - Authenticated (Author+) Insecure Direct Object Reference4.3 Medium
- supsysticcom data tables generator by supsysticData Tables Generator by Supsystic <= 1.10.45 - Authenticated (Admin+) Arbitrary File Deletion6.5 Medium
- directusDirectus's conceal fields are searchable if read permissions enabled6.5 Medium
- asus dsl-ac51, dsl-ac51 firmware, dsl-ac750 +3 more +5 moreAn authentication bypass vulnerability has been identified in certain DSL series routers, may...9.3 Critical
- privatebinPrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users3.9 Low
- bitfoundation bitplatformBitplatform Boilerplate has cross-site scripting vulnerability5.3 Medium
- group-office group officeAn issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote...8.8 High
- totolink a950rg firmwareA command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c...6.5 Medium
- dlink dir-882 firmwareA command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02...6.5 Medium
- dlink dir-882 firmwareA command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02...6.5 Medium
- totolink a950rg firmwareA buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c...6.5 Medium
- dlink dir-882 firmwareA command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02...7.3 High
- dlink dir-882 firmwareA command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02...7.3 High
- linksys re7000 firmwareA stack-based buffer overflow vulnerability exists in the makeRequest.cgi binary of Linksys...8.4 High
- linksys e7350 firmwareA stack-based buffer overflow vulnerability exists in the mtk_dut binary of Linksys E7350 routers...5.9 Medium
- linksys e1200 firmwareA stack-based buffer overflow exists in the validate_static_route function of the httpd binary on...7.5 High
- linksys e1200 firmwareA stack-based buffer overflow exists in the get_merge_mac function of the httpd binary on Linksys...6.5 Medium
- linksys e1200 firmwareA stack-based buffer overflow vulnerability exists in the libshared.so library of Cisco Linksys...8.4 High
- linksys e1200 firmwareA stack-based buffer overflow exists in the httpd binary of Linksys E1200 v2 routers (Firmware...8.8 High
- linksys e1200 firmwareA stack-based buffer overflow exists in the get_merge_ipaddr function of the httpd binary on...8.8 High
- linksys e1200 firmwareAn unauthenticated command injection vulnerability exists in the Start_EPI function of the httpd...5.4 Medium
- totolink lr1200gb firmware, nr1800x firmware +1 moreA stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130)...6.5 Medium
- totolink lr1200gb firmwareAn unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router...6.5 Medium
- totolink a720r firmware, lr1200gb firmware, nr1800x firmware +2 moreA local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi...5.1 Medium
- totolink a720r firmwareA stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630...5.1 Medium
- totolink lr1200gb firmware, nr1800x firmware +1 moreA stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130)...6.5 Medium
- totolink a720r firmwareA command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu...6.5 Medium
- totolink a720r firmwareA command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu...6.5 Medium
- dlink dir-816 firmwareA stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR...8.8 High
- dlink dir-823g firmwareA command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0...5.4 Medium
- dlink dir-878 firmwareA stack buffer overflow vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin...6.8 Medium
- dlink dir-878 firmwareAn unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware...6.5 Medium
- dlink dir-878 firmwareAn unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware...6.5 Medium
- dlink dir-823g firmwareA command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0...5.4 Medium
- alagaai s-cw2503c-h firmwareA vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware...6.8 Medium
- lichess lilaLichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c (2025-06-02) contains a...6.5 Medium
- keyfactor signserverKeyfactor SignServer before 7.3.1 has Incorrect Access Control, issue 3 of 3.6.5 Medium
- keyfactor signserverKeyfactor SignServer before 7.3.1 has Incorrect Access Control, issue 2 of 3.5.3 Medium
- keyfactor signserverKeyfactor SignServer before 7.3.1 has Incorrect Access Control, issue 1 of 3.5.3 Medium
- code-projects responsive hotel sitecode-projects Responsive Hotel Site usersetting.php sql injection5.1 Medium
- code-projects responsive hotel sitecode-projects Responsive Hotel Site usersettingdel.php sql injection5.1 Medium
- frappe learning, lms +1 moreFrappe LMS revoking access did not show immediate effect as roles were cached1.2 Low
- frappe learning, lms +1 moreFrappe user was able to access the submission of other students1.3 Low
- filebrowserFileBrowser has Insecure Direct Object Reference (IDOR) in Share Deletion Function7.2 High
- dbl technology (dbltek) goip-1DBLTek GoIP-1 vGHSFVT-1.1-67-5 Unauthenticated LFI8.7 High
- seiko epson epson stylus sx510wEpson Stylus SX510W Printer Remote Power Off DoS8.7 High
- fiberhome an5506-04-fa, hg6245d +1 moreFIberHome AN5506-04-FA / HG6245D Routers Remote Stack Overflow9.3 Critical
- irai automgenIRAI AUTOMGEN <= 8.0.0.7 Use-After-Free Remote DoS6.9 Medium
- jvc (jvckenwood) ip-camera (vn-t216vpru)JVC VN-T IP-Camera Directory Traversal via check.cgi8.7 High
- shenzhen longjing technology co. ltd. bems apiLongjing Technology BEMS API <= 1.21 Remote Arbitrary File Download8.7 High
- Show moreLoading…