Skip to content
OpenAdvisories

Archive

20 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /20 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 1.9
    CVE-2025-13425 Public exploit

    Denial of Service in OSV-SCALIBR

    A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OS…

    Google OSV-SCALIBR github.com/google/osv-scalibr Go
  • Medium 6.1
    CVE-2025-64027 Public exploit

    Snipe-IT has Cross-site Scripting vulnerability in CSV import workflow

    Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerability in the CSV Import workflow. When an invalid CSV file is uploaded, the application returns a progress_message value that is rendered as raw HTML in the admin interface.…

    snipe/snipe-it Packagist
  • Critical 9.8
    CVE-2025-63888 Public exploit

    The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code exe…

  • Medium 6.1
    CVE-2025-63848 Public exploit

    Stored cross site scripting (xss) vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code…