Skip to content
OpenAdvisories

Archive

3 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /3 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

61 results · Feed

  • Medium 6.5
    CVE-2024-51317

    An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize function

    netsurf netsurf Debian Ubuntu
  • High 7.5
    CVE-2025-50735

    Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot…

  • Medium 5.4
    CVE-2025-50363 Public exploit

    Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hiring.php va the nam…

  • Medium 6.5
    CVE-2025-29699

    NetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function.

    netsurf netsurf Debian Ubuntu
  • High 7.3
    CVE-2025-63441 Public exploit

    Open Source Social Network (OSSN) 8.6 is vulnerable to Cross Site Scripting (XSS) via the parameter param` at endpoint …

  • Critical 9.4
    CVE-2025-63452

    Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/forgot-pass.php.

  • Medium 6.5
    CVE-2025-63293

    FairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions. A remote authenticated user…

  • Medium 5.4
    CVE-2025-63450

    Car-Booking-System-PHP v.1.0 is vulnerable to Cross Site Scripting (XSS) in /carlux/booking.php.

  • Medium 6.1
    CVE-2025-63446

    Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_vendor.php.

  • Medium 5.4
    CVE-2025-63449

    Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /orders.php.

  • Medium 6.1
    CVE-2025-63447

    Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_customer.php.

  • Medium 4.6
    CVE-2025-63442

    Simple User Management System with PHP-MySQL v1.0 is vulnerable to Cross-Site Scripting (XSS) via the Profile Section. …

  • Critical 9.8
    CVE-2025-63453

    Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/contact.php.

  • Medium 6.1
    CVE-2025-63448

    Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit_product.php?id=1.

  • Critical 9.8
    CVE-2025-63451

    Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php.

  • Medium 6.1
    CVE-2025-63593

    Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting (XSS).

  • Medium 5.4
    CVE-2025-63443

    School Management System PHP v1.0 is vulnerable to Cross Site Scripting (XSS) in /login.php via the password parameter.

  • Medium 6.8
    CVE-2025-60892

    An issue in Raspberry Pi Imager version 1.9.6 for Windows, affecting its OS customization feature. The imager's 'public…

  • High 8.7
    CVE-2025-60503 Public exploit

    A cross-site scripting (XSS) vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 wh…

  • High 8.8
    CVE-2025-60785

    A remote code execution (RCE) vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows atta…

  • Medium 6.5
    CVE-2025-45663

    An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.

    netsurf netsurf Debian Ubuntu