CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- axeltechnology puma firmwareThe Axel Technology puma devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken...9.1 Critical
- sound4 first firmwareThe Sound4 FIRST web-based management interface is vulnerable to Remote Code Execution (RCE) via...7.2 High
- itel iso-fm firmwareThe ITEL ISO FM SFN Adapter (firmware ISO2 2.0.0.0, WebServer 2.0) is vulnerable to session...7.5 High
- axeltechnology wolf1ms firmware, wolf2ms firmware +1 moreThe Axel Technology WOLF1MS and WOLF2MS devices (firmware versions 0.8.5 to 1.0.3) are vulnerable...9.8 Critical
- bridgetech vbc serverAn issue was discovered in bridgetech VBC Server & Element Manager, firmware version 6.5.0-10 , 6...6.5 Medium
- qvidium opera11 firmwareThe QVidium Opera11 device (firmware version 2.9.0-Ax4x-opera11) is vulnerable to Remote Code...9.8 Critical
- gatesair flexiva lx1000 firmware, flexiva lx100 firmware, flexiva lx300 firmware +1 more +3 moreGatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX600, and...6.5 Medium
- bridgetech vbc serverStored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware...6.1 Medium
- newtec celoxa504 firmware, celoxa820 firmware +1 moreThe Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is...9.8 Critical
- elcaradio bp1000 firmware, star1000 firmware, star150 firmware +3 more +5 moreThe ELCA Star Transmitter Remote Control firmware 1.25 for STAR150, BP1000, STAR300, STAR2000,...7.5 High
- bridgetech vb288 firmwareAn issue was discovered in bridgetech VB288 Objective QoE Content Extractor, firmware version 5.6...7.5 High
- rvr tex1002lcd firmware, tex100lcd\/s firmware, tex150lcd\/s firmware +8 more +10 moreThe R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to...9.8 Critical
- dasannetworks ds2924 firmwareAn authentication bypass issue was discovered in Dasan Switch DS2924 web based interface,...9.8 Critical
- bridgetech nomad portable firmware, vb120 firmware, vb220 firmware +2 more +4 moreAn issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe,...7.5 High
- lanol filecodeboxA vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote...7.5 High
- lanol filecodeboxA stored cross-site scripting (XSS) vulnerability is found in the text sharing feature of...5.4 Medium
- lanol filecodeboxA path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary file writes...7.5 High
- openvpnImproper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an...4.6 Medium
- maykinmedia open forms, open-formulieren open-forms +1 moreOpen Forms prefill data in read-only components can be tampered4.3 Medium
- emby, embysupport emby.security +1 moreEmby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboard8.4 High
- piwigoPiwigo is vulnerable to one-click account takeover by modifying the password-reset link8.1 High
- mongodb c driver, php driver +1 moreBulk write with options may read invalid memory6.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking 100 series cellular bridge +1 moreAuthenticated Command Injection Vulnerability Leading to Arbitrary Remote Command Execution6.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking 100 series cellular bridge +1 moreUnauthenticated Remote Denial-of-Service (DoS) Vulnerability in Web Management Interface7.5 High
- arubanetworks airwave, hewlett packard enterprise (hpe) hpe aruba networking management software (airwave) +1 moreAuthenticated Command Injection Vulnerability in HPE Aruba Networking Management Software (AirWave) CLI7.2 High
- xwiki pro macros, xwikisas xwiki-pro-macros +1 moreXWiki view file macro: User can view content of office file without view rights on the attachment6.8 Medium
- hcl software connectionsHCL Connections is vulnerable to sensitive information disclosure3.5 Low
- hewlett packard enterprise (hpe) hpe aruba networking aos-cx, hpe arubaos-cx +1 moreAuthenticated Broken Access Control (BAC) in REST API Configuration Service5.3 Medium
- hewlett packard enterprise (hpe) hpe aruba networking aos-cx, hpe arubaos-cx +1 moreAuthenticated Session Hijacking Allows Unauthorized Access in Network Switching Software5.8 Medium
- hewlett packard enterprise (hpe) hpe aruba networking aos-cx, hpe arubaos-cx +1 moreAuthenticated Command Injection allows Unauthorized Command Execution in AOS-CX6.7 Medium
- hewlett packard enterprise (hpe) hpe aruba networkign aos-cx, hpe arubaos-cx +1 moreAuthenticated Command Injection allows Unauthorized Command Execution in AOS-CX6.7 Medium
- librenmsLibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint5.5 Medium
- hpe arubaos-cx, hewlett packard enterprise (hpe) hpe aruba networking aos-cx +1 moreArubaOS-CX Platform-Level Denial-of-Service Vulnerability6.8 Medium
- hewlett packard enterprise (hpe) hpe aruba networking aos-cx, hpe arubaos-cx +1 moreAuthenticated Privilege Escalation Allows Unauthorized Access in Network Management Interface7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: use-after-free in net_set_vlan4.9 Medium
- authlib joserfcjoserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads9.2 Critical
- librenmsLibreNMS has Weak Password Policy3.7 Low
- librenmsLibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`6.2 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: missing unregister call for normal_exit command may lead to use-after-free4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: missing unregister call for normal commands may lead to use-after-free4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 10.0 extended update support +23 more +25 moreGrub2: missing unregister call for gettext command may lead to use-after-free7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: grub2: out-of-bounds write via malicious usb device4.8 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: use-after-free in grub_file_close()4.9 Medium
- getkirby kirbyKirby CMS has cross-site scripting (XSS) in the changes dialog5.1 Medium
- xwikisas application-admintoolsXWiki AdminTools application doesn't set permissions on the AdminTools space5.3 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreA stack-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4...6.9 Medium
- fortinet fortiadcAn Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0...6.3 Medium
- fortinet fortios, fortisase, siemens ruggedcom ape1808 +2 moreA stack-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4...6.9 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn Improper Privilege Management vulnerability [CWE-269] in Fortinet FortiOS 7.6.0 through 7.6.3,...1.7 Low
- fortinet fortisandboxAn Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5...5.0 Medium
- Show moreLoading…