CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- ibm concertIBM Concert Information Disclosure5.3 Medium
- vllmVLLM deserialization vulnerability leading to DoS and potential RCE8.8 High
- icam365 p201, qc021 +1 moreMissing Authentication for RTSP in iCam Cameras7.0 High
- icam365 p201, qc021 +1 moreMissing Authentication for ONVIF in iCam Cameras7.0 High
- medical informatics engineering enterprise healthMedical Informatics Engineering Enterprise Health stored cross site scripting via Demographic Information page4.8 Medium
- revive adserver, revive-adserver revive adserver +1 moreImproper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6...8.7 High
- revive adserver, revive-adserver revive adserver +1 moreImproper Neutralization of Input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a...6.3 Medium
- revive adserver, revive-adserver revive adserver +1 moreAuthorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in...8.8 High
- revive adserver, revive-adserver revive adserver +1 moreImproper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the...6.1 Medium
- revive adserver, revive-adserver revive adserver +1 moreImproper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes...3.5 Low
- revive adserver, revive-adserver revive adserver +1 moreDebug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and...4.3 Medium
- revive adserver, revive-adserver revive adserver +1 moreMissing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users...7.1 High
- revive adserver, revive-adserver revive adserver +1 moreInsecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and...4.3 Medium
- revive adserver, revive-adserver revive adserver +1 moreMissing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier...3.5 Low
- revive adserver, revive-adserver revive adserver +1 moreImproper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1...2.7 Low
- aquaplatform revive adserver, revive adserver +1 moreHackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability...6.5 Medium
- aquaplatform revive adserver, revive adserver +1 moreHackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of...5.4 Medium
- aquaplatform revive adserver, revive adserver +1 moreHackerOne community member Dao Hoang Anh (yoyomiski) has reported an uncontrolled resource...6.5 Medium
- abb ability edgeniusABB Ability Edgenius Authentication Bypass9.4 Critical
- simonhaenisch md-to-pdfmd-to-pdf is vulnerable to arbitrary JavaScript code execution when parsing front matter10.0 Critical
- langchain-ai langchainLangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates8.3 High
- dajiaji hpke-jshpke-js reuses AEAD nonces9.1 Critical
- dataeaseDataEase DB2 JNDI Vulnerability8.9 High
- osc ondemandOpen OnDemand RPM packages create world writable locations6.9 Medium
- osc ondemandOpen OnDemand allowlist bypass using symlinks in directory downloads (TOCTOU)4.3 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 is vulnerable to password reset link manipulation6.8 Medium
- lite xl xl, lite-xl lite xl +1 moreCVE-2025-121217.3 High
- lite xl xl, lite-xl lite xl +1 moreCVE-2025-121207.3 High
- google zxArbitrary node_modules Directory Deletion in Google zx5.6 Medium
- soplanningStored XSS in SOPlanning5.1 Medium
- soplanningPrivilege Escalation via Incorrect Authorization in SOPlanning8.7 High
- soplanningStored XSS in SOPlanning5.1 Medium
- soplanningStored XSS in SOPlanning5.1 Medium
- soplanningStored XSS in SOPlanning5.1 Medium
- soplanningStored XSS in SOPlanning5.1 Medium
- soplanningPredictable Generation of Password Recovery Token8.7 High
- soplanningBroken Access Control in SOPlanning5.3 Medium
- basis international ltd. bbjBASIS BBj < 25.00 Unauthenticated Arbitrary File Read RCE9.3 Critical
- google osv-scalibrDenial of Service in OSV-SCALIBR1.9 Low
- ibm concertIBM Concert Software Information Disclosure5.9 Medium
- openprinting cups-filtersCUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution3.3 Low
python-setuptoolsTuxCareUpdate of python-setuptoolsNo score- narkom communication and software technologies trade ltd. co. pyxis signageArbitrary File Upload in Narkom Communication Technologies' Pyxis Signage7.2 High
- public knowledge project ojs, omp +1 morePublic Knowledge Project omp/ojs Payment Instructions Setting paymentForm.tpl cross site scripting4.8 Medium
- oretnom23 alumni management systemSourceCodester Alumni Management System Delete admin_class.php delete_event authorization5.3 Medium
- narkom communication and software technologies trade ltd. co. pyxis signageXSS in Narkom Communication Technologies' Pyxis Signage7.2 High
- limesurveyMultiple vulnerabilities in Limesurvey6.9 Medium
- limesurveyMultiple vulnerabilities in Limesurvey6.9 Medium
- limesurveyMultiple vulnerabilities in Limesurvey6.9 Medium
- sonicwall sonicosA Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote...7.5 High
- Show moreLoading…