Skip to content
OpenAdvisories

Archive

14 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /14 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-13186

    Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting

    A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0. This impacts an unknown function of the file /dashboard/Ccustomer/manage_customer. This manipulation of the argument Search causes cross site sc…

    Bdtask CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution Isshue Multi Store eCommerce Shopping Cart Solution
  • Low 3.5
    CVE-2025-13182

    pojoin h3blog addtitle cross site scripting

    A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit …

    pojoin h3blog
  • Low 3.5
    CVE-2025-13181

    pojoin h3blog add cross site scripting

    A vulnerability was determined in pojoin h3blog 1.0. The affected element is an unknown function of the file /admin/cms/material/add. Executing a manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely.…

    pojoin h3blog
  • Low 3.5
    CVE-2025-13180

    Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scripting

    A vulnerability was found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320. Impacted is an unknown function of the file /edit_profile. Performing manipulation of the argument first_name/last_name results in basic…

    Bdtask CodeCanyon Wholesale Inventory Control and Inventory Management System Wholesale Inventory Control and Inventory Management System
  • Low 3.5
    CVE-2025-13178

    Bdtask/CodeCanyon SalesERP User Profile edit_profile cross site scripting

    A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728. This vulnerability affects unknown code of the file /edit_profile of the component User Profile Handler. This manipulation of the argument first_name/last_name causes basic cross site scripti…

    Bdtask CodeCanyon SalesERP SalesERP
  • Low 1.1
    CVE-2025-4617

    Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser

    An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser. Browser self-protection should be enabled to mitigate this…

    Palo Alto Networks Prisma Browser Network devices
  • Low 1.1
    CVE-2025-4616

    Prisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma Browser

    An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s security controls.

    Palo Alto Networks Prisma Browser Network devices
  • Low 3.1
    CVE-2025-41436

    Unauthorized access to archived channel content via threads interface

    Mattermost versions <11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads

    Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go
  • Low 3.3
    CVE-2025-54342

    A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is Ex…

  • Low 3.8
    CVE-2025-54560

    A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.…

  • Low 3.7
    CVE-2025-54559

    An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote…