Skip to content
OpenAdvisories

Archive

15 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /15 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-13202

    code-projects Simple Cafe Ordering System add_to_cart cross site scripting

    A security flaw has been discovered in code-projects Simple Cafe Ordering System 1.0. This affects an unknown part of the file /add_to_cart. Performing manipulation of the argument product_name results in cross site scripting. It is possible to initiate the a…

    code-projects Simple Cafe Ordering System
  • Low 3.5
    CVE-2025-12983

    Memory Allocation with Excessive Size Value in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to cause a denial of service condition by submitting specially crafted …

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 3.5
    CVE-2025-6945

    Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

    GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 3.1
    CVE-2025-7736

    Incorrect Authorization in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to bypass access control restrictions and view GitLab Pages content int…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 3.1
    CVE-2025-11990

    Improper Handling of URL Encoding (Hex Encoding) in GitLab

    GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with…

    GitLab GitLab gitlab Web / CMS Ubuntu