Skip to content
OpenAdvisories

Archive

12 November 2025

Vulnerabilities first published on this day (UTC), newest first.

47 results · Clear filters · Feed

  • Medium 6.1

    Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields.

  • Medium 6.1
    CVE-2025-63419 Public exploit

    Cross Site Scripting (XSS) vulnerability in CrushFTP 11.3.6_48. The Web-Based Server has a feature where users can shar…

  • Medium 4.0

    A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). During multi-threaded…

  • Medium 5.4

    A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the application…

  • Medium 6.5

    A Cross-Site Request Forgery (CSRF) in xxl-api v1.3.0 allows attackers to arbitrarily add users to the management modul…

  • Medium 6.1

    A stored cross-site scripting (XSS) in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbit…

  • Medium 6.1

    Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers t…