Skip to content
OpenAdvisories

Archive

18 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /18 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.7
    CVE-2025-58034 Exploited Public exploit EPSS 55%

    An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vu…

    Fortinet FortiWeb Network devices
    KEV Nov 18, 2025
  • High 7.0
    CVE-2025-34324 Public exploit

    GoSign Desktop < 2.4.1 Insecure Update Mechanism RCE

    GoSign Desktop versions 2.4.0 and earlier use an unsigned update manifest for distributing application updates. The manifest contains package URLs and SHA-256 hashes but is not digitally signed, so its authenticity relies solely on the underlying TLS channel.…

    Tinexta InfoCert S.p.A. GoSign Desktop
  • High 8.0
    CVE-2025-48593 Public exploit

    In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. T…

    Google Android Android
  • High 7.3
    CVE-2025-63602 Public exploit

    A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and M…

  • Medium 5.1
    CVE-2025-63408 Public exploit

    Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attack…

  • Medium 6.8
    CVE-2025-63892 Public exploit

    A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function create_…

  • Critical 9.8
    CVE-2025-54321 Public exploit

    In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an em…

  • Medium 4.3
    CVE-2025-54320 Public exploit

    In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email…

  • Medium 6.1
    CVE-2025-56526 Public exploit

    Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted …

  • Medium 6.5
    CVE-2025-56499 Public exploit

    Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary …

  • Critical 9.1
    CVE-2025-56643 Public exploit

    Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, pr…