Skip to content
OpenAdvisories

Archive

9 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /9 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Medium 4.3
    CVE-2025-12921

    OpenClinica Community Edition CRF Data Import ImportCRFData xml injection

    A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13. Affected by this issue is some unknown functionality of the file /ImportCRFData?action=confirm of the component CRF Data Import. Such manipulation of the argument xml_file lead…

    OpenClinica Community Edition
  • Low 2.4
    CVE-2025-12920

    qianfox FoxCMS Product.php edit cross site scripting

    A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controller/Product.php. This manipulation of the argument Title causes cross site scripting. It is possible to initiate the att…

    QianFox FoxCMS
  • Low 3.7
    CVE-2025-12919

    EverShop Order Order.resolvers.js resource injection

    A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graphql/types/Order/Order.resolvers.js of the component Order Handler. The manipulation of the argument uuid results in improper control of reso…

    @evershop/evershop npm
  • Low 3.1
    CVE-2025-12918

    yungifez Skuul School Management System View Fee Invoice fee-invoices resource injection

    A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The impacted element is an unknown function of the file /dashboard/fees/fee-invoices/ of the component View Fee Invoice. Performing manipulation of the argument invoic…

    yungifez Skuul School Management System yungifez/skuul Packagist
  • Medium 4.3
    CVE-2025-12917

    TOZED ZLT T10 Reboot proc_post denial of service

    A vulnerability was identified in TOZED ZLT T10 T10PLUS_3.04.15. The affected element is an unknown function of the file /reqproc/proc_post of the component Reboot Handler. Such manipulation leads to denial of service. Access to the local network is required …

    TOZED ZLT T10
  • Unscored —
    CVE-2025-40109

    crypto: rng - Ensure set_ent is always present

    In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure set_ent is always present Ensure that set_ent is always set since only drbg provides it.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-40108

    serial: qcom-geni: Fix blocked task

    In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: Fix blocked task Revert commit 1afa70632c39 ("serial: qcom-geni: Enable PM runtime for serial driver") and its dependent commit 86fa39dd6fb7 ("serial: qcom-geni: Enable Ser…

    Linux Linux linux-raspi2 linux-hwe Linux Ubuntu