CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- sonicwall email security, email security appliance 5000 firmware, email security appliance 5050 firmware +3 more +5 moreA Path Traversal vulnerability has been identified in the Email Security appliance allows an...5.3 Medium
- sonicwall email security, email security appliance 5000 firmware, email security appliance 5050 firmware +3 more +5 moreDownload of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance...9.8 Critical
squidTuxCareUpdate of squidNo score- redhat ansible automation platform, red hat ansible automation platform 2.5, ansible automation platform 2.5 for rhel 8 +5 more +7 moreAap-gateway: improper path validation in gateway allows credential exfiltration6.7 Medium
- google cloud lookerLooker account compromise via punycode homograph attack9.2 Critical
- tp-link system inc. tl-wr940n v6UPnP DOS in TL-WR940N V67.1 High
- hcl software glovius cloudHCL Glovius Cloud is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability6.8 Medium
- kaspersky endpoint security, industrial cybersecurity for linux nodes +1 moreKaspersky has fixed a security issue in Kaspersky Endpoint Security for Linux (any version with...5.1 Medium
- famethemes onepress, galaxyweblinks gallery with thumbnail slider, lightgalleryteam lightgallery wp +5 more +7 moreMultiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library6.4 Medium
- unknown attention-barAttention Bar <= 0.7.2.1 - Admin+ SQLi6.8 Medium
- userelements ultimate member widgets for elementor – wordpress user directoryUltimate Member Widgets for Elementor <= 2.3 - Missing Authorization to Unauthenticated Information Exposure5.3 Medium
- code-projects online shop projectSourceCodester Online Shop Project action.php sql injection6.9 Medium
- code-projects online shop projectSourceCodester Online Shop Project register.php cross site scripting5.1 Medium
- code-projects online shop projectcode-projects Online Shop Project login.php sql injection6.9 Medium
- tenda ac21, ac21 firmware +1 moreTenda AC21 SetSysTimeCfg stack-based overflow8.7 High
- tenda ac21, ac21 firmware +1 moreTenda AC21 SetIpMacBind stack-based overflow8.7 High
- macrozheng mallmacrozheng mall delete access control5.3 Medium
- utt 进取 750w, 750w firmware +1 moreUTT 进取 750W formPdbUpConfig system command injection6.9 Medium
- dreampie restyDreampie Resty HttpClient HttpClient.java request path traversal6.3 Medium
- jameschz hush, hush framework +1 morejameschz Hush Framework HTTP Host Header Util.php http headers for scripting syntax6.9 Medium
- muse group musehubMuse Group MuseHub Windows Service Muse.Updater.exe unquoted search path7.3 High
- campcodes supplier management systemCampcodes Supplier Management System add_product.php sql injection5.1 Medium
- tenda ac21 firmwareTenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform...4.3 Medium
- tenda ac21 firmwareTenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform...4.3 Medium
- tenda ac21 firmwareTenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform...4.3 Medium
- tenda ac21 firmwareTenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform...4.3 Medium
- tenda ac21 firmwareTenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the...4.3 Medium
- snipeitapp snipe-itSnipe-IT has Cross-site Scripting vulnerability in CSV import workflow6.1 Medium
- thinkphpThe fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows...7.5 High
- thinkphpThe read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24...9.8 Critical
- swi-prolog swishStored cross site scripting (xss) vulnerability in SWISH prolog thru 2.2.0 allowing attackers to...6.1 Medium
- 2dogz bloginAn issue was discovered in weijiang1994 university-bbs (aka Blogin) in commit...9.8 Critical
- quark cloud driveQuark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability. This vulnerability stems from the...9.8 Critical
- qlik senseQlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/...7.5 High
- phppgadmin project phppgadminphppgadmin contains an incorrect access control vulnerability6.1 Medium
- phppgadmin project phppgadminphppgadmin contains a SQL injection vulnerability6.5 Medium
- phppgadmin project phppgadminphppgadmin contains a SQL injection vulnerability6.5 Medium
- phppgadmin project phppgadminphppgadmin vulnerable to Cross-site Scripting6.1 Medium
- perfood couchauth@perfood/couch-auth may expose session tokens, passwords6.5 Medium
- ilevia eve x1 server firmwareAn issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 -...9.8 Critical
- ilevia eve x1 server firmwareCross Site Scripting vulnerability in Ilevia EVE X1 Server Firmware Version<= 4.7.18.0.eden:Logic...6.1 Medium
- vishalmathur institute-of-current-studentsInstitute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the...9.8 Critical
- fs s3150-8t2f firmwareFS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless...7.5 High
- campcodes retro basketball shoes online storeCampcodes Retro Basketball Shoes Online Store admin_product.php unrestricted upload5.1 Medium
- darkseid sports club management systemfreeprojectscodes Sports Club Management System change_s_pwd.php sql injection6.9 Medium
- angeljudesuarez human resource management systemitsourcecode Human Resource Management System NoticeStore.php sql injection6.9 Medium
- angeljudesuarez human resource management systemitsourcecode Human Resource Management System EventStore.php sql injection6.9 Medium
- icret easyimages, easyimages2.0 project easyimages2.0 +1 moreicret EasyImages SVG Image upload.php cross site scripting5.1 Medium
- 7-zip7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability7.0 High
- opentext™ ucmdbCross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB2.3 Low
- Show moreLoading…