Skip to content
OpenAdvisories

Archive

12 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /12 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.4
    CVE-2025-11700 Public exploit Scanner template EPSS 32%

    N-central Multiple XXE Injection Vulnerabilities

    N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure

    N-able N-central
  • Medium 6.9
    CVE-2025-9316 Public exploit Scanner template EPSS 37%

    N-central unauthenticated sessionID generation

    N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

    N-able N-central
  • High 7.8
    CVE-2025-40123 Public exploit

    bpf: Enforce expected_attach_type for tailcall compatibility

    In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expected_attach_type for tailcall compatibility Yinhao et al. recently reported: Our fuzzer tool discovered an uninitialized pointer issue in the bpf_prog_test_run_xdp() function…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2025-63667 Public exploit

    Incorrect access control in SIMICAM v1.16.41-20250725, KEVIEW v1.14.92-20241120, ASECAM v1.14.10-20240725 allows attack…

  • Critical 9.8
    CVE-2025-63353 Public exploit

    A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-…

  • Medium 6.1
    CVE-2025-63419 Public exploit

    Cross Site Scripting (XSS) vulnerability in CrushFTP 11.3.6_48. The Web-Based Server has a feature where users can shar…

  • Critical 9.8
    CVE-2025-63666 Public exploit

    Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account password hash to the client and…

  • High 8.8
    CVE-2025-57310 Public exploit

    A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to adm…