Skip to content
OpenAdvisories

Archive

18 November 2025

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 6.7
    CVE-2025-58034 Exploited Public exploit EPSS 55%

    An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vu…

    KEV Nov 18, 2025
  • Medium 5.1
    CVE-2025-63408 Public exploit

    Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attack…

  • Medium 6.8
    CVE-2025-63892 Public exploit

    A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function create_…

  • Medium 4.3
    CVE-2025-54320 Public exploit

    In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email…

  • Medium 6.1
    CVE-2025-56526 Public exploit

    Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted …

  • Medium 6.5
    CVE-2025-56499 Public exploit

    Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary …