Skip to content
OpenAdvisories

Archive

13 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /13 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.1
    GHSA-6jqf-mv7m-3q7p

    File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency

    The standard library `net/http` package dependency used by File Browser improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. I can permit request smuggling if a net/http server is used in conjunction with a server that incorrect…

    github.com/filebrowser/filebrowser/v2 github.com/filebrowser/filebrowser Go
  • Critical 10.0
    CVE-2025-36250

    AIX Code Execution

    IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls.  This addresses additional attack vectors for a vulnerabil…

    IBM AIX VIOS
  • Critical 9.0
    CVE-2025-36096

    AIX Insufficiently Protected Credentials

    IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques.

    IBM AIX VIOS
  • Critical 9.6
    CVE-2025-36251

    AIX Command Execution

    IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously…

    IBM AIX VIOS
  • Critical 9.6
    CVE-2025-64709

    Typebot May Expose AWS EKS Credentials via Server Side Request Forgery in Webhook Block

    Typebot is an open-source chatbot builder. In versions prior to 3.13.1, a Server-Side Request Forgery (SSRF) vulnerability in the Typebot webhook block (HTTP Request component) functionality allows authenticated users to make arbitrary HTTP requests from the …

    baptisteArno typebot.io
  • Critical 9.1
    CVE-2025-12762 Public exploit EPSS 13%

    Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)

    pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the se…

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • Critical 9.3
    CVE-2025-59367

    An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to…

    ASUS DSL-AC51 DSL-AC750 DSL-N16