Skip to content
OpenAdvisories

Archive

3 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /3 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-11953 Exploited Public exploit Scanner template EPSS 94%

    Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests

    The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST r…

    @react-native-community/cli-server-api @react-native-community/cli npm
    KEV Feb 5, 2026
  • Medium 5.4
    CVE-2025-50363 Public exploit

    Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hiring.php va the nam…

  • High 7.3
    CVE-2025-63441 Public exploit

    Open Source Social Network (OSSN) 8.6 is vulnerable to Cross Site Scripting (XSS) via the parameter param` at endpoint …

  • High 8.7
    CVE-2025-60503 Public exploit

    A cross-site scripting (XSS) vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 wh…