Skip to content
OpenAdvisories

Archive

28 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /28 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.8
    CVE-2025-12183

    org.lz4:lz4-java - Out-of-Bounds Memory Access

    Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

    zipkin spark-4.0-scala-2.13 spark-4.1-scala-2.13 strimzi-kafka-operator-kafka-thirdparty-libs-cc Debian Ubuntu Wolfi Maven
  • High 8.0
    CVE-2025-12638

    Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file()

    Keras version 3.11.3 is affected by a path traversal vulnerability in the keras.utils.get_file() function when extracting tar archives. The vulnerability arises because the function uses Python's tarfile.extractall() method without the security-critical filte…

    Keras keras-team/keras keras keras Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2025-13768

    Uniong｜WebITR - Authorization Bypass

    WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability.

    Uniong WebITR
  • High 7.3
    CVE-2025-58308

    Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerab…

    Huawei HarmonyOS Network devices
  • High 8.4
    CVE-2025-58302

    Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affe…

    Huawei HarmonyOS EMUI Network devices
  • High 8.0
    CVE-2025-58310

    Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability ma…

    Huawei HarmonyOS Network devices
  • High 7.3
    CVE-2025-58316

    DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may…

    Huawei HarmonyOS Network devices
  • High 8.4
    CVE-2025-58303

    UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may a…

    Huawei HarmonyOS Network devices
  • High 8.2
    CVE-2025-66384

    app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, rel…

    MISP MISP
  • High 7.5
    CVE-2025-51735

    CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0.