Skip to content
OpenAdvisories

Archive

20 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /20 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-13484

    Campcodes Complete Online Beauty Parlor Management System customer-list.php cross site scripting

    A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/customer-list.php. The manipulation of the argument Name leads to cross site scripting. The attack may …

    Campcodes Complete Online Beauty Parlor Management System
  • Low 3.5
    CVE-2025-35029

    Medical Informatics Engineering Enterprise Health stored cross site scripting via Demographic Information page

    Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbitrary content in the 'Demographic Information' page. This content will be rendered and executed when a victim ac…

    Medical Informatics Engineering Enterprise Health
  • Low 3.5
    CVE-2025-55123

    Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be …

    Revive Revive Adserver
  • Low 3.5
    CVE-2025-52667

    Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XS…

    Revive Revive Adserver
  • Low 2.7
    CVE-2025-52666

    Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions ca…

    Revive Revive Adserver
  • Low 3.3
    CVE-2025-64524

    CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution

    cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the progra…

    OpenPrinting cups-filters cups-filters cups-filters Debian Ubuntu
  • Low 1.9
    CVE-2025-13425 Public exploit

    Denial of Service in OSV-SCALIBR

    A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OS…

    Google OSV-SCALIBR github.com/google/osv-scalibr Go
  • Low 2.4
    CVE-2025-13469

    Public Knowledge Project omp/ojs Payment Instructions Setting paymentForm.tpl cross site scripting

    A security vulnerability has been detected in Public Knowledge Project omp and ojs 3.3.0/3.4.0/3.5.0. Impacted is an unknown function of the file plugins/paymethod/manual/templates/paymentForm.tpl of the component Payment Instructions Setting Handler. The man…

    Public Knowledge Project ojs omp
  • Low 3.5
    CVE-2025-13450

    SourceCodester Online Shop Project register.php cross site scripting

    A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument f_name causes cross site scripting. It is possible to initiate the attack remotely. The…

    SourceCodester Online Shop Project