CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
number_prefixcrates.ionumber_prefix crate is unmaintainedNo scorehexchatcrates.iohexchat crate has a Use After Free vulnerability7.2 High- siemens ps/iges parasolid translator component, simcenter femap, solid edge +2 moreA vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29...7.3 High
- siemens mendix richtextA vulnerability has been identified in Mendix RichText (All versions >= V4.0.0 < V4.6.1)....6.8 Medium
- code-projects nero social networking sitecode-projects Nero Social Networking Site friendsphoto.php sql injection6.9 Medium
- m-files serverDenial of Service condition in M-Files Server7.1 High
- g33kyrash online-banking-systemg33kyrash Online-Banking-System index.php sql injection6.9 Medium
- iqbolshoh php-business-websiteIqbolshoh php-business-website about.php unrestricted upload5.1 Medium
- campcodes school fees payment management systemCampcodes School Fees Payment Management System ajax.php sql injection5.3 Medium
- campcodes school fees payment management systemCampcodes School Fees Payment Management System ajax.php sql injection5.3 Medium
- campcodes school fees payment management systemCampcodes School Fees Payment Management System manage_course.php sql injection6.9 Medium
- campcodes school fees payment management systemCampcodes School Fees Payment Management System ajax.php sql injection6.9 Medium
- campcodes school fees payment management systemCampcodes School Fees Payment Management System ajax.php sql injection5.3 Medium
- campcodes school fees payment management systemCampcodes School Fees Payment Management System ajax.php sql injection5.3 Medium
- dromara datacompareDromara dataCompare JDBC URL DbconfigServiceImpl.java DbConfig injection5.3 Medium
- digiwin easyflow gpDigiwin｜EasyFlow GP - Denial of service8.7 High
- jkev dental clinic appointment reservation systemSourceCodester Dental Clinic Appointment Reservation System success.php sql injection5.3 Medium
- digiwin easyflow gpDigiwin｜EasyFlow GP - Insufficiently Protected Credentials6.9 Medium
- digiwin easyflow gpDigiwin｜EasyFlow GP - Insufficiently Protected Credentials6.9 Medium
- wwwlike vlifewwwlike vlife VLifeApi SysFileApi.java create path traversal6.9 Medium
- boldgrid w3 total cacheW3 Total Cache < 2.8.13 - Unauthenticated Command Injection9.0 Critical
- kddi corporation 'デジラアプリ' app for iosImproper certificate validation vulnerability exists in 'デジラアプリ' App for iOS prior to ver.80.10...2.3 Low
- lsfusion platformlsfusion platform ZipUtils.java unpackFile path traversal5.3 Medium
- oretnom23 online magazine management systemSourceCodester Online Magazine Management System view_magazine.php sql injection5.3 Medium
- oretnom23 online magazine management systemSourceCodester Online Magazine Management System categories.php sql injection5.3 Medium
- lsfusion platformlsfusion platform UploadFileRequestHandler.java UploadFileRequestHandler path traversal6.9 Medium
- thinplusThinPLUS｜ThinPLUS - OS Command Injection9.3 Critical
- lsfusion platformlsfusion platform DownloadFileRequestHandler.java DownloadFileRequestHandler path traversal6.9 Medium
- cht tenderdoctransferChunghwa Telecom｜TenderDocTransfer - Arbitrary File Copy and Paste7.0 High
- cht tenderdoctransferChunghwa Telecom｜TenderDocTransfer - Arbitrary File Delete7.0 High
- campcodes supplier management systemCampcodes Supplier Management System edit_product.php sql injection5.3 Medium
- beims contractor webUnsanitized parameter input leading to SQL Injection vulnerability9.4 Critical
- campcodes supplier management systemCampcodes Supplier Management System edit_unit.php sql injection5.3 Medium
crypton-x509-storeHackage,x509-storeHackage +1 morePrivate key leak via inherited file descriptorNo score- tenda ac20, ac20 firmware +1 moreTenda AC20 WifiExtraSet buffer overflow8.7 High
- code-projects inventory management systemitsourcecode Inventory Management System index.php sql injection6.9 Medium
- projectworlds advanced library management systemprojectworlds Advanced Library Management System borrow.php sql injection5.3 Medium
- projectworlds advanced library management systemprojectworlds Advanced Library Management System book_search.php sql injection5.3 Medium
arrowOSS-FuzzHeap-use-after-free in apache::thrift::protocol::TCompactProtocolT<apache::thrift::transport::TMemoryBuNo score- projectworlds advanced library management systemprojectworlds Advanced Library Management System add_member.php sql injection5.3 Medium
- tinexta infocert gosign desktopGoSign Desktop through 2.4.1 disables TLS certificate validation when configured to use a proxy...3.2 Low
- openrapid rapidcmsOpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.6.1 Medium
- cnblogs pdfpatcherPDFPatcher executable does not validate user-supplied file paths, allowing directory traversal...6.2 Medium
- cnblogs pdfpatcherPDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML...7.1 High
- luotengyuan myscreentoolsMyScreenTools v2.2.1.0 contains a critical OS command injection vulnerability in the GIF...8.1 High
- testmanagement qatraqQaTraq 6.9.2 allows authenticated users to upload arbitrary files via the "Add Attachment"...8.8 High
- testmanagement qatraqQaTraq 6.9.2 ships with administrative account credentials which are enabled in default...9.8 Critical
- remyandrade ai font matcherCross-Site Scripting (XSS) vulnerability exists in SourceCodester AI Font Matcher (nid=18425,...6.1 Medium
- freebox mini 4k firmware, one firmware, v5 crystal firmware +2 more +4 moreFreebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution...3.5 Low
- kashipara school management systemkashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via ...6.1 Medium
- Show moreLoading…