Skip to content
OpenAdvisories

Archive

19 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /19 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-13415

    icret EasyImages SVG Image upload.php cross site scripting

    A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php of the component SVG Image Handler. The manipulation of the argument File leads to cross site scripting. It is possible to initiate the at…

    icret EasyImages
  • Low 2.3
    CVE-2025-11884

    Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scr…

    OpenText uCMDB
  • Low 2.4
    CVE-2025-13412

    Campcodes Retro Basketball Shoes Online Store admin_running.php cross site scripting

    A vulnerability was determined in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_running.php. Executing a manipulation of the argument product_name can lead to cross site script…

    Campcodes Retro Basketball Shoes Online Store
  • Low 3.5
    CVE-2025-64757

    Astro Development Server is Vulnerable to Arbitrary Local File Read

    Astro is a web framework. Prior to version 5.14.3, a vulnerability has been identified in the Astro framework's development server that allows arbitrary local file read access through the image optimization endpoint. The vulnerability affects Astro developmen…

    withastro astro astro npm
  • Low 3.3
    CVE-2025-13397

    mrubyc alloc.c mrbc_raw_realloc null pointer dereference

    A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbc_raw_realloc of the file src/alloc.c. Such manipulation of the argument ptr leads to null pointer dereference. An attack has to be approached locally. The name of th…