Skip to content
OpenAdvisories

Archive

20 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /20 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

54 results · Clear filters · Feed

  • Medium 4.7
    CVE-2025-13424

    Campcodes Supplier Management System add_product.php sql injection

    A vulnerability has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_product.php. The manipulation of the argument txtProductName leads to sql injection. Remote exploitation of the attack is possi…

    Campcodes Supplier Management System
  • Medium 6.1
    CVE-2025-64027 Public exploit

    Snipe-IT has Cross-site Scripting vulnerability in CSV import workflow

    Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerability in the CSV Import workflow. When an invalid CSV file is uploaded, the application returns a progress_message value that is rendered as raw HTML in the admin interface.…

    snipe/snipe-it Packagist
  • Medium 6.1
    CVE-2025-63848 Public exploit

    Stored cross site scripting (xss) vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code…

  • Medium 6.5
    CVE-2025-60794

    @perfood/couch-auth may expose session tokens, passwords

    Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/user.ts lines 700-707. This creates a window of opportunity for sensitive data extraction through memory dumps, debugging …

    @perfood/couch-auth npm
  • Medium 6.1
    CVE-2025-60799

    phppgadmin contains an incorrect access control vulnerability

    phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized manipulation of session variables by accepting user-controlled parameters ('subject', 'server', 'database', 'queryi…

    phppgadmin phppgadmin phppgadmin/phppgadmin Debian Ubuntu Packagist
  • Medium 6.5
    CVE-2025-60798

    phppgadmin contains a SQL injection vulnerability

    phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from $_REQUEST['query'] directly to the browseQuery function without proper sanitization. An authenticated attacker c…

    phppgadmin phppgadmin phppgadmin/phppgadmin Debian Ubuntu Packagist
  • Medium 6.5
    CVE-2025-60797

    phppgadmin contains a SQL injection vulnerability

    phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied SQL queries from the $_REQUEST['query'] parameter without any sanitization or parameterization via $data->conn-…

    phppgadmin phppgadmin phppgadmin/phppgadmin Debian Ubuntu Packagist
  • Medium 6.1
    CVE-2025-60796

    phppgadmin vulnerable to Cross-site Scripting

    phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting (XSS) vulnerabilities across various components. User-supplied input from $_REQUEST parameters is reflected in HTML output without proper encoding or sanitization in multiple locations inclu…

    phppgadmin phppgadmin phppgadmin/phppgadmin Debian Ubuntu Packagist
  • Medium 6.1
    CVE-2025-60737

    Cross Site Scripting vulnerability in Ilevia EVE X1 Server Firmware Version<= 4.7.18.0.eden:Logic Version<=6.00 - 2025_…

  • Medium 4.3
    CVE-2025-65221

    Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList.

  • Medium 4.3
    CVE-2025-65222

    Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg.

  • Medium 4.3
    CVE-2025-65226

    Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo.

  • Medium 4.3
    CVE-2025-65223

    Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo.

  • Medium 4.3
    CVE-2025-65220

    Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter.