Archive
November 2025
Vulnerabilities first published in this month (UTC), newest first.
3,056 results · Feed
-
Medium 6.9
willitmerge has a command Injection vulnerability
willitmerge is a command line tool to check if pull requests are mergeable. In versions 0.2.1 and prior, there is a command Injection vulnerability in willitmerge. The vulnerability manifests in this package due to the use of insecure child process execution …
-
High 8.6
LibreChat is Vulnerable to Server-Side Request Forgery (SSRF) in Actions Capability
LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.1-rc2, LibreChat is vulnerable to Server-side Request Forgery (SSRF), by passing specially crafted OpenAPI specs to its "Actions" feature and making the LLM use those actions. It coul…
-
Medium 6.1
Retro is vulnerable to XSS vulnerability in input handling component
Retro is an online platform providing items of vintage collections. Prior to version 2.4.7, Retro is vulnerable to a cross-site scripting (XSS) in the input handling component. This issue has been patched in version 2.4.7.
-
Medium 6.3CVE-2025-66034 Public exploit
fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib
fontTools is a library for manipulating fonts, written in Python. In versions from 4.33.0 to before 4.60.2, the fonttools varLib (or python3 -m fontTools.varLib) script has an arbitrary file write vulnerability that leads to remote code execution when a malic…
-
High 7.1
Rallly Information Disclosure Vulnerability in Participant API Leaks Names and Emails Despite Pro Privacy Settings
Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.6, an information disclosure vulnerability exposes participant details, including names and email addresses through the /api/trpc/polls.get,polls.participants.list endpoint, even…
-
Critical 9.4
PubNet Critical Authentication Bypass Allows Unauthenticated Package Upload and Identity Spoofing
PubNet is a self-hosted Dart & Flutter package service. Prior to version 1.1.3, the /api/storage/upload endpoint in PubNet allows unauthenticated users to upload packages as any user by providing arbitrary author-id values. This enables identity spoofing, pri…
-
Medium 6.5
ClipBucket v5 Unauthenticated Object Flagging Vulnerability
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - #164, an authorization bypass vulnerability in the AJAX flagging system allows any unauthenticated user to flag any content (users, videos, photos, collections) on the platform. …
-
Medium 4.0
Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exi…
-
Medium 6.1
Reflected Cross-Site Scripting (rXSS) in krpano before version 1.23.2 allows a remote unauthenticated attacker to execu…
-
Medium 6.1
Multiple Cross-Site Scripting (XSS) vulnerabilities exist in xmall v1.1 due to improper handling of user-supplied data.…
-
Medium 6.5
Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affe…
-
High 8.8
org.lz4:lz4-java - Out-of-Bounds Memory Access
Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.
-
Medium 5.9
Improper Service Loading Vulnerability in Netskope Endpoint DLP Driver
Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers…
-
Medium 5.3
Apache Kvrocks: MONITOR command reveals plaintext credentials to non-admins
Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue.
-
Medium 5.4
Apache Kvrocks: RESET command grants admin privileges
Improper Privilege Management vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from v2.9.0 through v2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue.
-
High 8.0
Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file()
Keras version 3.11.3 is affected by a path traversal vulnerability in the keras.utils.get_file() function when extracting tar archives. The vulnerability arises because the function uses Python's tarfile.extractall() method without the security-critical filte…
-
Unscored —
rustls-pemfile is unmaintained
The rustls-pemfile crate is no longer maintained. The repository has been archived since August 2025, and users are encouraged to depend directly on the underlying PEM parsing code included in rustls-pki-types since 1.9.0. The latest version of rustls-pemfile…
-
Medium 6.1
Stack Memory Corruption Vulnerability
Stack-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.
-
Medium 6.5
Uniong｜WebITR - Arbitrary File Read
WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.
-
Medium 6.5
Uniong｜WebITR - SQL Injection
WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
-
Medium 6.5
Uniong｜WebITR - SQL Injection
WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
-
High 7.5
Uniong｜WebITR - Authorization Bypass
WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability.
-
Medium 4.3
Nextend Social Login and Register <= 3.1.21 - Cross-Site Request Forgery to Unlink User Social Login
The Nextend Social Login and Register plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.21. This is due to missing or incorrect nonce validation on the 'unlinkUser' function. This makes it possible for …
-
Medium 4.9
Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability m…
-
Medium 5.8
UAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability will affect availabil…
-
High 7.3
Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerab…
-
Medium 6.2
Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability …
-
Medium 4.9
Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability m…
-
High 8.4
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 6.2
Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect …
-
Medium 5.3
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may …
-
Medium 5.1
Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affec…
-
Medium 5.5
Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect …
-
Medium 6.6
Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulne…
-
Medium 5.1
Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affe…
-
High 8.0
Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability ma…
-
Medium 6.8
Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability …
-
Medium 6.4
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may a…
-
High 7.3
DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may…
-
High 8.4
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may a…