CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 moreDell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability7.3 High
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 moreDell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability7.3 High
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 moreDell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability7.3 High
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 moreDell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability7.3 High
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 moreDell ControlVault3 CvManager_SBI buffer overflow vulnerability8.8 High
- d-link dir-825m, dwr-m920, dwr-m921 +7 more +9 moreD-Link DWR-M920/DWR-M921/DWR-M960/DWR-M961/DIR-825M formPingDiagnosticRun buffer overflow8.7 High
- techlabpro1 classified listing – ai-powered classified ads & business directory pluginClassified Listing – Classified ads & Business Directory Plugin <= 5.0.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description5.4 Medium
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 moreDell ControlVault3 CvManager buffer overflow vulnerability8.8 High
- carmelogarcia courier management systemcode-projects Courier Management System search-edit.php sql injection5.3 Medium
- nixos nixpkgsNixOS has hardcoded credentials in Onlyoffice module5.3 Medium
- carmelogarcia courier management systemcode-projects Courier Management System add-new-officer.php sql injection5.1 Medium
- itsourcecode web-based internet laboratory management systemitsourcecode Web-Based Internet Laboratory Management System controller.php sql injection6.9 Medium
- ibm storage virtualizeIBM Storage Virtualize Information Disclosure7.5 High
- itsourcecode web-based internet laboratory management systemitsourcecode Web-Based Internet Laboratory Management System controller.php sql injection6.9 Medium
- ibm planning analytics local, planning analytics workspace +1 moreIBM Planning Analytics Information Disclosure4.3 Medium
- ibm planning analytics local, planning analytics workspace +1 moreIBM Planning Analytics Local Directory Traversal8.0 High
- itsourcecode web-based internet laboratory management systemitsourcecode Web-Based Internet Laboratory Management System controller.php sql injection6.9 Medium
- itsourcecode web-based internet laboratory management systemitsourcecode Web-Based Internet Laboratory Management System controller.php sql injection6.9 Medium
- flowiseFlowise - Authentication Bypass via Unprotected Registration Endpoint9.3 Critical
- itsourcecode web-based internet laboratory management systemitsourcecode Web-Based Internet Laboratory Management System controller.php sql injection6.9 Medium
- nagios log serverNagios Log Server < 2026R1.0.1 Local Privilege Escalation via Writable Scripts and Sudo Rules8.5 High
- nagios log serverNagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries8.6 High
- maxum rumpus, pcman ftp server +1 moreCWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')4.8 Medium
- maxum rumpus, pcman ftp server +1 moreCWE-20 Improper Input Validation4.5 Medium
- maxum rumpus, pcman ftp server +1 moreMultiple CWE-352 Cross-Site Request Forgery (CSRF)4.5 Medium
- isaacs glob, node-glob +1 moreglob CLI: Command injection via -c/--cmd executes matches with shell:true7.5 High
- maxum rumpus, pcman ftp server +1 moreMultiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site...4.8 Medium
- maxum rumpus, pcman ftp server +1 moreCWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6.8 Medium
- dependencytrack frontend@dependencytrack/frontend Vulnerable to Persistent Cross-Site-Scripting via Welcome Message4.8 Medium
- espressif esp-idfESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability6.9 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSet7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibvirt: information disclosure via world-readable vm snapshots5.5 Medium
- campcodes supplier management systemCampcodes Supplier Management System confirm_order.php sql injection6.9 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR7.5 High
- phpmyfaqphpMyFAQ has Authenticated SQL Injection in Configuration Update Functionality7.2 High
- nettec as digi on-prem managerAuthenticated SQL injection in API - Digi On-Prem Manager8.8 High
- code-projects simple food ordering systemcode-projects Simple Food Ordering System saveorder.php sql injection5.3 Medium
- 1000projects design & development of student database management system, design \& development of student database management system +1 more1000projects Design & Development of Student Database Management System SubjectDetails.php sql injection5.3 Medium
- tenda ch22, ch22 firmware +1 moreTenda CH22 PPTPUserSetting fromPptpUserSetting buffer overflow8.7 High
- silabs.com rs9116wDoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packets7.1 High
- angeljudesuarez online voting systemitsourcecode Online Voting System index.php sql injection5.3 Medium
- angeljudesuarez online voting systemitsourcecode Online Voting System ajax.php sql injection5.3 Medium
- angeljudesuarez online voting systemitsourcecode Online Voting System login.php sql injection6.9 Medium
- codeastro simple inventory systemCodeAstro Simple Inventory System Login index.php sql injection6.9 Medium
- code-projects nero social networking sitecode-projects Nero Social Networking Site profilefriends.php sql injection5.3 Medium
- projectworlds advanced library management systemprojectworlds Advanced Library Management System borrowed_book_search.php sql injection5.3 Medium
rand_oscrates.iorand_os crate is unmaintainedNo scoreopentelemetry-jaegercrates.ioopentelemetry-jaeger crate is unmaintainedNo scorecargo-asmcrates.iocargo-asm crate is unmaintainedNo scoregcccrates.iogcc crate is unmaintainedNo score- Show moreLoading…