CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- keylime project keylime, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreKeylime: keylime: registrar allows identity takeover via duplicate uuid registration8.2 High
- linuxBluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete7.8 High
- dassault systèmes delmia service process engineerStored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x8.7 High
- dassault systèmes enovia product manager, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x8.7 High
- gl-inet gl-axt1800A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4...8.3 High
- fluentbit fluent bitCVE-2025-129785.4 Medium
- fluentbit fluent bitCVE-2025-129696.5 Medium
- fluentbit fluent bitCVE-2025-129725.3 Medium
- fluentbit fluent bitCVE-2025-129779.1 Critical
- fluentbit fluent bitCVE-2025-129708.8 High
- bjango istatsiStat Menus 7.10.4 - Local Privilege Escalation8.5 High
- apache syncopeApache Syncope: Default AES key used for internal password encryption7.5 High
- linuxnfsd: fix refcount leak in nfsd_set_fh_dentry()9.8 Critical
- unknown wp 2faWP 2FA < 3.0.0 - Second Factor Bypass6.3 Medium
- davantis dfusionMultiple vulnerabilities in DFUSION by Davantis6.9 Medium
- davantis dfusionMultiple vulnerabilities in DFUSION by Davantis8.7 High
- lfdt-lockness cggmp21CGGMP21 presignatures can be used in the way that significantly reduces security8.2 High
- lfdt-lockness cggmp21CGGMP24 is missing a check in the ZK proof used in CGGMP219.3 Critical
- google cloud lookerArbitrary File Write in Denodo dialect of Looker allows Remote Code Execution7.7 High
- google cloud lookerRemote Command Execution in Looker via IBM DB2 JDBC drive7.7 High
- taclia taclia's web applicationCross-Site Scripting (XSS) stored in Taclia's web application5.1 Medium
- janitza umg 96-pa, umg 96-pa-mid+ +1 moreDoS via Modbus Read Command7.5 High
runc-appUbuntu,runc-stableUbuntu +1 morerunc-app, runc-stable regressionNo score- google cloud lookerCross-Site Scripting (XSS) in Looker's Extension Loader leading to Admin Account Compromise7.3 High
- atisoluciones cigesImproper Error Handling Leading to Sensitive Information Disclosure in CIGES ≤ 2.15.62.7 Low
- lkinderbueno streamity xtream iptv playerlKinderBueno Streamity Xtream IPTV Player proxy.php server-side request forgery5.3 Medium
- senior-walter online student clearance systemSourceCodester Online Student Clearance System changepassword.php sql injection5.1 Medium
- unknown broken link managerBroken Link Manager <= 0.6.5 - Reflected XSS7.1 High
- unknown guest posting / frontend posting / front editorWP Front User Submit < 5.0.0 - Open Redirect4.7 Medium
- unknown backup migrationBackup Migration < 2.0.0 - Unauthenticated Backup Download5.9 Medium
- unknown wordpress ecommerce pluginStudiocart <= 2.9.0 - Reflected XSS7.1 High
- angeljudesuarez covid tracking systemitsourcecode COVID Tracking System login.php sql injection6.9 Medium
- No product listedEigenfocus Description cross site scripting5.1 Medium
- scripteo ads pro plugin - multi-purpose wordpress advertising managerAds Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_id7.5 High
- carmelo question paper generatorcode-projects Question Paper Generator POST Parameter signupscript.php sql injection6.9 Medium
- anisha jonnys liquorcode-projects Jonnys Liquor GET Parameter detail.php sql injection6.9 Medium
- code-projects student information systemitsourcecode Student Information System schedule_edit1.php sql injection5.3 Medium
- otsuka information technology fmsOtsuka Information Technology｜FMS - Reflected Cross-site Scripting5.1 Medium
- code-projects library systemcode-projects Library System mail.php sql injection5.3 Medium
- code-projects library systemcode-projects Library System return.php sql injection5.3 Medium
- code-projects library systemcode-projects Library System Login index.php sql injection6.9 Medium
- phpgurukul hostel management systemPHPGurukul Hostel Management System register-complaint.php cross site scripting5.1 Medium
- code-projects blog sitecode-projects Blog Site admin.php improper authorization5.3 Medium
- code-projects blog sitecode-projects Blog Site Category blog.php category_exists sql injection5.3 Medium
- code-projects online bidding systemcode-projects Online Bidding System addcategory.php categoryadd unrestricted upload5.1 Medium
- redboltz async mqttUse after free in endpoint destructors in Redboltz async_mqtt 10.2.5 allows local users to cause...5.5 Medium
- cesanta mongooseNull pointer dereference in add_ca_certs() in Cesanta Mongoose before 7.2 allows remote attackers...4.3 Medium
- libcoapNull pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5 allows remote...4.3 Medium
- libcoapNULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3...4.3 Medium
- libcoapArray index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows...4.3 Medium
- Show moreLoading…