Skip to content
OpenAdvisories

Archive

17 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /17 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2025-13224 Public exploit

    Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap cor…

    Google Chrome chromium chromium Browsers Debian Azure Linux Alpine Wolfi
  • High 8.8
    CVE-2025-13223 Exploited Public exploit

    Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap cor…

    Google Chrome chromium chromium Browsers Debian Wolfi
    KEV Nov 19, 2025
  • High 8.6
    CVE-2025-34322 Public exploit

    Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries

    Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature. When this feature is configured, certain user-controlled settings—including model selection and con…

    Nagios Log Server
  • High 7.1
    CVE-2025-4321 Public exploit

    DoS in RS9116W-WiSeConnect L2CAP protocol due to reception of malformed packets

    In a Bluetooth device, using RS9116-WiseConnect SDK experiences a Denial of Service, if it receives malformed L2CAP packets, only hard reset will bring the device to normal operation

    silabs.com RS9116W
  • Critical 9.0
    CVE-2025-9501 Public exploit EPSS 22%

    W3 Total Cache < 2.8.13 - Unauthenticated Command Injection

    The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc function, allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post.

    Web / CMS
  • Medium 6.1
    CVE-2025-63708 Public exploit

    Cross-Site Scripting (XSS) vulnerability exists in SourceCodester AI Font Matcher (nid=18425, 2025-10-10) that allows r…