Skip to content
OpenAdvisories

Archive

November 2025

Vulnerabilities first published in this month (UTC), newest first.

← October 2025 2025 / November December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

54 results · Clear filters · Feed

  • High 7.5
    CVE-2025-60188 Public exploit Scanner template

    WordPress Atarim plugin <= 4.2.1 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Retrieve Embedded Sensitive Data.This issue affects Atarim: from n/a through <= 4.2.1.

    Vito Peleg Atarim
  • High 8.1
    CVE-2025-63307 Public exploit

    alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting (XSS). The application permits user-controll…

  • High 7.1
    CVE-2025-63588 Public exploit

    An unauthenticated reflected cross-site scripting vulnerability in the query handling of CMSimpleXH allows remote attac…

  • High 7.1
    CVE-2025-63589 Public exploit

    A reflected XSS vulnerability exists in CMSimple_XH 1.8's index.php router when attacker-controlled path segments are n…

  • High 7.3
    CVE-2025-43990 Public exploit

    Dell Command Monitor (DCM), versions prior to 10.12.3.28, contains an Execution with Unnecessary Privileges vulnerabili…

    Dell Command | Monitor (DCM)
  • High 8.6
    CVE-2025-20343 Public exploit

    Cisco Identity Services Engine Radius Suppression Denial of Service Vulnerability

    A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause Cisco ISE to restart unexpectedly. This vulnerability is due to a…

    Cisco Cisco Identity Services Engine Software Network devices
  • High 7.5
    CVE-2025-64458 Public exploit

    Potential denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows

    An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, `django.http.HttpResponseRedirect`, `django.http.HttpResponsePermanentRedirect`, and the shortcut `django…

    djangoproject Django django py3-django Alpine PyPI
  • High 7.5
    CVE-2025-12139 Public exploit Scanner template

    File Manager for Google Drive – Integrate Google Drive with WordPress <= 1.5.3 - Unauthenticated Sensitive Information Exposure

    The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.5.3 via the "get_localize_data" function. This makes it possible for unauthe…

    princeahmed File Manager for Google Drive – Integrate Google Drive Web / CMS
  • High 7.7
    CVE-2025-62507 Public exploit

    Redis: Bug in XACKDEL may lead to stack overflow and potential RCE

    Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed…

    Redis Redis redis Alpine
  • High 7.2
    CVE-2025-62369 Public exploit

    Xibo CMS: Remote Code Execution through module templates

    Xibo is an open source digital signage platform with a web content management system (CMS). Versions 4.3.0 and below contain a Remote Code Execution vulnerability in the CMS Developer menu's Module Templating functionality, allowing authenticated users with "…

    Xibo Signage xibo-cms
  • High 7.8
    CVE-2025-43407 Public exploit

    This issue was addressed with improved entitlements. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and …

    Apple macOS iOS and iPadOS tvOS macOS iOS
  • High 7.5
    CVE-2024-56426 Public exploit

    An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200…

  • High 7.3
    CVE-2025-63441 Public exploit

    Open Source Social Network (OSSN) 8.6 is vulnerable to Cross Site Scripting (XSS) via the parameter param` at endpoint …

  • High 8.7
    CVE-2025-60503 Public exploit

    A cross-site scripting (XSS) vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 wh…