# CVEs published 2025-11-04

257 CVEs were published on November 4, 2025: 10 critical, 93 high. Days are UTC.

- [CVE-2025-64110](https://cve.now/CVE-2025-64110.md): Cursor: Authentication Bypass Possible via New Cursorignore Write (CVSS 8.7, cursor)
- [CVE-2025-64109](https://cve.now/CVE-2025-64109.md): Cursor CLI Beta: Command Injection via Untrusted MCP Configuration (CVSS 8.8, cursor)
- [CVE-2025-64108](https://cve.now/CVE-2025-64108.md): Cursor's Sensitive File Modification can Lead to NTFS Path Quirks (CVSS 8.8, cursor)
- [CVE-2025-64107](https://cve.now/CVE-2025-64107.md): Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows (CVSS 8.8, cursor)
- [CVE-2025-59596](https://cve.now/CVE-2025-59596.md): CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14 (CVSS 6.0, Absolute Security Secure Access)
- [CVE-2025-64106](https://cve.now/CVE-2025-64106.md): Cursor: Speedbump Modal Bypass in MCP Server Deep-Link (CVSS 8.8, cursor)
- [CVE-2025-59595](https://cve.now/CVE-2025-59595.md): CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12. (CVSS 8.2, Absolute Secure Access)
- [CVE-2025-62722](https://cve.now/CVE-2025-62722.md): LinkAce: Stored XSS Vulnerability in Link Title Field Through Social Media Sharing Feature (CVSS 8.7, Kovah LinkAce)
- [CVE-2025-62721](https://cve.now/CVE-2025-62721.md): LinkAce: Authorization Bypass Allows Unauthorized Access to All Private Links, Lists, and Tags (CVSS 7.1, Kovah LinkAce)
- [CVE-2025-62720](https://cve.now/CVE-2025-62720.md): LinkAce: Data Exfiltration via Export Functions Allow Access to All Users' Private Links (CVSS 7.1, Kovah LinkAce)
- [CVE-2025-62719](https://cve.now/CVE-2025-62719.md): LinkAce: Limited Server-Side Request Forgery (SSRF) in Keyword Fetching Functionality (CVSS 2.3, Kovah LinkAce)
- [CVE-2025-54526](https://cve.now/CVE-2025-54526.md): Fuji Electric Monitouch V-SFT-6 Stack-based Buffer Overflow (CVSS 7.8, Fuji Electric Monitouch V-SFT-6)
- [CVE-2025-62715](https://cve.now/CVE-2025-62715.md): ClipBucket v5: Stored XSS via Collection Tags (CVSS 5.3, MacWarrior clipbucket-v5)
- [CVE-2025-54496](https://cve.now/CVE-2025-54496.md): Fuji Electric Monitouch V-SFT-6 Heap-based Buffer Overflow (CVSS 7.8, Fuji Electric Monitouch V-SFT-6)
- [CVE-2025-62520](https://cve.now/CVE-2025-62520.md): MantisBT unauthorized disclosure of private project column configuration (CVSS 5.3, mantisbt · mantisbt/mantisbt)
- [CVE-2025-62507](https://cve.now/CVE-2025-62507.md): Redis: Bug in XACKDEL may lead to stack overflow and potential RCE (CVSS 7.7, redis)
- [CVE-2025-62369](https://cve.now/CVE-2025-62369.md): Xibo CMS: Remote Code Execution through module templates (CVSS 7.2, xibosignage xibo-cms)
- [CVE-2025-55155](https://cve.now/CVE-2025-55155.md): MantisBT: Authentication bypass for some passwords due to PHP type juggling (CVSS 5.4, mantisbt · mantisbt/mantisbt)
- [CVE-2025-48884](https://cve.now/CVE-2025-48884.md): Galette is vulnerable to XSS through Document Type (CVSS 5.3, galette)
- [CVE-2025-48076](https://cve.now/CVE-2025-48076.md): Galette is vulnerable to Cross-site Scripting (CVSS 5.3, galette)
- [CVE-2025-47776](https://cve.now/CVE-2025-47776.md): MantisBT: Authentication bypass for some passwords due to PHP type juggling (CVSS 8.8, mantisbt · mantisbt/mantisbt)
- [CVE-2025-32786](https://cve.now/CVE-2025-32786.md): GLPI Inventory Plugin is Vulnerable to Unauthenticated SQL Injection (CVSS 7.5, glpi-project glpi-inventory-plugin)
- [CVE-2025-23358](https://cve.now/CVE-2025-23358.md): NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. (CVSS 8.2, NVIDIA NVApp)
- [CVE-2025-33176](https://cve.now/CVE-2025-33176.md): NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communications channels on an ad (CVSS 6.2, NVIDIA RunAI)
- [CVE-2025-12108](https://cve.now/CVE-2025-12108.md): Missing Authentication for Critical Function Survision License Plate Recognition Camera (CVSS 9.3, Survision License Plate Recognition Camera)
- [CVE-2025-64322](https://cve.now/CVE-2025-64322.md): Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable C (CVSS 5.3, Salesforce Agentforce Vibes Extension)
- [CVE-2025-64321](https://cve.now/CVE-2025-64321.md): Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable (CVSS 5.3, Salesforce Agentforce Vibes Extension)
- [CVE-2025-64320](https://cve.now/CVE-2025-64320.md): Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This is (CVSS 6.5, Salesforce Agentforce Vibes Extension)
- [CVE-2025-64319](https://cve.now/CVE-2025-64319.md): Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeab (CVSS 5.3, Salesforce Mulesoft Anypoint Code Builder)
- [CVE-2025-64318](https://cve.now/CVE-2025-64318.md): Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Write (CVSS 5.3, Salesforce Mulesoft Anypoint Code Builder)
- [CVE-2025-10875](https://cve.now/CVE-2025-10875.md): Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Code Injection.Thi (CVSS 6.5, Salesforce Mulesoft Anypoint Code Builder)
- [CVE-2025-61956](https://cve.now/CVE-2025-61956.md): Missing Authentication for Critical Function in Radiometrics VizAir (CVSS 10.0, Radiometrics VizAir)
- [CVE-2025-54863](https://cve.now/CVE-2025-54863.md): Insufficiently Protected Credentials in Radiometrics VizAir (CVSS 10.0, Radiometrics VizAir)
- [CVE-2025-61945](https://cve.now/CVE-2025-61945.md): Missing Authentication for Critical Function in Radiometrics VizAir (CVSS 10.0, Radiometrics VizAir)
- [CVE-2025-12184](https://cve.now/CVE-2025-12184.md): MeetingList \<= 0.11 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, rboatright MeetingList)
- [CVE-2025-12682](https://cve.now/CVE-2025-12682.md): Easy Upload Files During Checkout \<= 2.9.8 - Unauthenticated Arbitrary JavaScript File Upload (CVSS 9.8, fahadmahmood Easy Upload Files During Checkout)
- [CVE-2025-12695](https://cve.now/CVE-2025-12695.md): Insecure configuration in DSPy lead to arbitrary file read when running untrusted code inside the sandbox (CVSS 5.9, dspy)
- [CVE-2025-41345](https://cve.now/CVE-2025-41345.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-41344](https://cve.now/CVE-2025-41344.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-41343](https://cve.now/CVE-2025-41343.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-41342](https://cve.now/CVE-2025-41342.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-41341](https://cve.now/CVE-2025-41341.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-41340](https://cve.now/CVE-2025-41340.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-41339](https://cve.now/CVE-2025-41339.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-41338](https://cve.now/CVE-2025-41338.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-41337](https://cve.now/CVE-2025-41337.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-41336](https://cve.now/CVE-2025-41336.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-41335](https://cve.now/CVE-2025-41335.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-41114](https://cve.now/CVE-2025-41114.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-41113](https://cve.now/CVE-2025-41113.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-41112](https://cve.now/CVE-2025-41112.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-41111](https://cve.now/CVE-2025-41111.md): Missing Authorization vulnerability in CanalDenuncia.app (CVSS 8.7, CanalDenuncia.app)
- [CVE-2025-12045](https://cve.now/CVE-2025-12045.md): Orbit Fox Companion \<= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy (CVSS 6.4, themeisle Orbit Fox: Duplicate Page, Menu Icons, SVG Suppor…)
- [CVE-2025-12493](https://cve.now/CVE-2025-12493.md): ShopLentor \<= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load\_template' (CVSS 9.8, devitemsllc ShopLentor – All-in-One WooCommerce Growth & St…)
- [CVE-2025-11690](https://cve.now/CVE-2025-11690.md): IDOR vulnerability in the CFMOTO RIDE API (CVSS 8.5, CFMOTO RIDE)
- [CVE-2025-20749](https://cve.now/CVE-2025-20749.md): In charger, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6789, MT6835, MT6855, MT6878, MT6879, MT6886, MT…)
- [CVE-2025-20748](https://cve.now/CVE-2025-20748.md): In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…)
- [CVE-2025-20741](https://cve.now/CVE-2025-20741.md): In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…)
- [CVE-2025-20747](https://cve.now/CVE-2025-20747.md): In gnss service, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, MediaTek MT2718, MT2737, MT6835, MT6878, MT6886, MT6897, MT…)
- [CVE-2025-20746](https://cve.now/CVE-2025-20746.md): In gnss service, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, MediaTek MT2718, MT2737, MT6835, MT6878, MT6886, MT6897, MT…)
- [CVE-2025-20739](https://cve.now/CVE-2025-20739.md): In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…)
- [CVE-2025-20738](https://cve.now/CVE-2025-20738.md): In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…)
- [CVE-2025-20736](https://cve.now/CVE-2025-20736.md): In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…)
- [CVE-2025-20734](https://cve.now/CVE-2025-20734.md): In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 4.2, MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…)
- [CVE-2025-20732](https://cve.now/CVE-2025-20732.md): In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 4.2, MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…)
- [CVE-2025-20731](https://cve.now/CVE-2025-20731.md): In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 4.2, MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…)
- [CVE-2025-20729](https://cve.now/CVE-2025-20729.md): In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 4.2, MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…)
- [CVE-2025-20745](https://cve.now/CVE-2025-20745.md): In apusys, there is a possible memory corruption due to use after free. (CVSS 4.2, MediaTek MT2718, MT6989, MT6991, MT8370, MT8390, MT8395, MT…)
- [CVE-2025-20744](https://cve.now/CVE-2025-20744.md): In pda, there is a possible escalation of privilege due to use after free. (CVSS 4.2, MediaTek MT6899, MT6991, MT8793)
- [CVE-2025-20743](https://cve.now/CVE-2025-20743.md): In clkdbg, there is a possible escalation of privilege due to use after free. (CVSS 4.2, MediaTek MT2718, MT6761, MT6765, MT6768, MT6781, MT6853, MT…)
- [CVE-2025-20742](https://cve.now/CVE-2025-20742.md): In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 8.0, MediaTek MT6890, MT7603, MT7615, MT7622, MT7915, MT7916, MT…)
- [CVE-2025-20740](https://cve.now/CVE-2025-20740.md): In wlan STA driver, there is a possible out of bounds read due to a race condition. (CVSS 4.7, MediaTek MT7902, MT7920, MT7921, MT7922, MT7925, MT7927)
- [CVE-2025-20737](https://cve.now/CVE-2025-20737.md): In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 7.8, MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…)
- [CVE-2025-20735](https://cve.now/CVE-2025-20735.md): In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 7.8, MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…)
- [CVE-2025-20733](https://cve.now/CVE-2025-20733.md): In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 7.8, MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…)
- [CVE-2025-20730](https://cve.now/CVE-2025-20730.md): In preloader, there is a possible escalation of privilege due to an insecure default value. (CVSS 6.7, MediaTek MT2737, MT6739, MT6761, MT6765, MT6768, MT6781, MT…)
- [CVE-2025-20728](https://cve.now/CVE-2025-20728.md): In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 7.8, MediaTek MT7902, MT7920, MT7921, MT7922, MT7925, MT7927)
- [CVE-2025-20725](https://cve.now/CVE-2025-20725.md): In ims service, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.5, MediaTek MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, M…)
- [CVE-2025-20726](https://cve.now/CVE-2025-20726.md): In Modem, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 7.5, MediaTek MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, M…)
- [CVE-2025-20727](https://cve.now/CVE-2025-20727.md): In Modem, there is a possible out of bounds write due to a heap buffer overflow. (CVSS 8.1, MediaTek MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, M…)
- [CVE-2025-12396](https://cve.now/CVE-2025-12396.md): Clubmember \<= 0.2 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, alaminopu clubmember)
- [CVE-2025-11812](https://cve.now/CVE-2025-11812.md): Reuse Builder \<= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, redq Reuse Builder)
- [CVE-2025-12403](https://cve.now/CVE-2025-12403.md): Associados Amazon Plugin \<= 0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, revokee Associados Amazon Plugin)
- [CVE-2025-11753](https://cve.now/CVE-2025-11753.md): Multi-language Responsive Portfolio WordPress \<= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, augustinfotech Bootstrap Multi-language Responsive Portfolio)
- [CVE-2025-12158](https://cve.now/CVE-2025-12158.md): Simple User Capabilities \<= 1.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation (CVSS 9.8, tanvirahmed1984 Simple User Capabilities)
- [CVE-2025-12452](https://cve.now/CVE-2025-12452.md): Visit Counter 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, bestiadurmiente Visit Counter)
- [CVE-2025-11733](https://cve.now/CVE-2025-11733.md): Footnotes Made Easy \<= 3.0.7 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, lumiblog Footnotes Made Easy)
- [CVE-2025-12065](https://cve.now/CVE-2025-12065.md): WP Carticon \<= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, WP Carticon)
- [CVE-2025-12371](https://cve.now/CVE-2025-12371.md): Nari Accountant \<= 1.0.12 - Authenticated (Editor+) Stored Cross-Site Scripting (CVSS 4.4, shakhi Nari Accountant)
- [CVE-2025-12389](https://cve.now/CVE-2025-12389.md): Import Export For WooCommerce \<= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update (CVSS 4.3, sidngr Import Export For WooCommerce)
- [CVE-2025-11704](https://cve.now/CVE-2025-11704.md): Elegance Menu \<= 1.9 - Authenticated (Contributor+) Local File Inclusion (CVSS 7.5, impacttechlab Elegance Menu)
- [CVE-2025-12402](https://cve.now/CVE-2025-12402.md): LinkedIn Resume \<= 2.00 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, bondnono LinkedIn Resume)
- [CVE-2025-12415](https://cve.now/CVE-2025-12415.md): MapMap \<= 1.1 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting (CVSS 6.1, sugiartha MapMap)
- [CVE-2025-12156](https://cve.now/CVE-2025-12156.md): Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One 2.0.7 - 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Post Creation (CVSS 4.3, aitool Ai Auto Tool Content Writing Assistant (Gemini Write…)
- [CVE-2025-11724](https://cve.now/CVE-2025-11724.md): EM Beer Manager \<= 3.2.3 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8, erinmorelli EM Beer Manager)
- [CVE-2025-12456](https://cve.now/CVE-2025-12456.md): Centangle Team Showcase \<= 1.0.0 - Cross-Site Request Forgery To Plugin's Settings Modification And Stored Cross-Site Scripting (CVSS 6.1, Centangle-Team)
- [CVE-2025-12400](https://cve.now/CVE-2025-12400.md): LMB^Box Smileys \<= 3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, lmbbox LMB^Box Smileys)
- [CVE-2025-12369](https://cve.now/CVE-2025-12369.md): Extensions for Leaflet Map \<= 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, hupe13 Extensions for Leaflet Map)
- [CVE-2025-11890](https://cve.now/CVE-2025-11890.md): Crypto Payment Gateway with Payeer for WooCommerce \<= 1.0.3 - Unauthenticated Payment Bypass (CVSS 7.5, beycanpress Crypto Payment Gateway with Payeer for WooComme…)
- [CVE-2025-12157](https://cve.now/CVE-2025-12157.md): Simple User Capabilities \<= 1.0 - Missing Authorization to Unauthenticated Capability Reset (CVSS 5.3, tanvirahmed1984 Simple User Capabilities)
- [CVE-2025-12410](https://cve.now/CVE-2025-12410.md): SH Contextual Help \<= 3.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, samhoamt SH Contextual Help)
- [CVE-2025-11758](https://cve.now/CVE-2025-11758.md): All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier \<= 2.0.3 - Missing Authorization to Page Creation and Information Exposure (CVSS 6.5, codebangers All in One Time Clock Lite – Tracking Employee…)
- [CVE-2025-12413](https://cve.now/CVE-2025-12413.md): Social Media WPCF7 Stop Words \<= 1.1.3 - Cross-Site Request Forgery to Settings Update (CVSS 5.4, socialmedialtd WPCF7 Stop words)
- [CVE-2025-12350](https://cve.now/CVE-2025-12350.md): DominoKit \<= 1.1.0 - Missing Authorization to Unauthenticated Settings Update (CVSS 5.3, domiinodev DominoKit)
- [CVE-2025-12393](https://cve.now/CVE-2025-12393.md): Free Quotation \<= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, kris\_iv Free Quotation)
- [CVE-2025-12416](https://cve.now/CVE-2025-12416.md): Pagerank Tools \<= 1.1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, mahype Pagerank tools)
- [CVE-2025-10896](https://cve.now/CVE-2025-10896.md): Multiple Plugins \<= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload (CVSS 8.8, litonice13 Image Comparison Addon for Elementor · litoni… +2)
- [CVE-2025-12412](https://cve.now/CVE-2025-12412.md): Top Bar Notification \<= 1.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, josereyev Top Bar Notification)
- [CVE-2025-12188](https://cve.now/CVE-2025-12188.md): Posts Navigation Links for Sections and Headings - Free by WP Masters \<= 1.0.1 - Cross-Site Request Forgery to Settings Update (CVSS 4.3, wpmasterscom Posts Navigation Links for Sections and Headin…)
- [CVE-2025-12683](https://cve.now/CVE-2025-12683.md): NULL DACL assigned to Named Pipe communicating with SYSTEM Service (CVSS 5.8, Voidtools Everything)
- [CVE-2025-12069](https://cve.now/CVE-2025-12069.md): WP Global Screen Options \<= 0.2 - Cross-Site Request Forgery to Screen Options Update (CVSS 4.3, stiand WP Global Screen Options)
- [CVE-2025-11008](https://cve.now/CVE-2025-11008.md): CE21 Suite \<= 2.3.1 - Unauthenticated Sensitive Information Exposure to Privilege Escalation (CVSS 9.8, ce21com CE21 Suite)
- [CVE-2025-12401](https://cve.now/CVE-2025-12401.md): Label Plugins \<= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, theode Label Plugins)
- [CVE-2025-11007](https://cve.now/CVE-2025-11007.md): CE21 Suite 2.2.1 - 2.3.1 - Missing Authorization to Unauthenticated Privilege Escalation via Plugin Settings Update (CVSS 9.8, ce21com CE21 Suite)
- [CVE-2025-12070](https://cve.now/CVE-2025-12070.md): ViaAds \<= 2.1.2 - Cross-Site Request Forgery to API Key Update (CVSS 4.3, ViaAds)
- [CVE-2025-47370](https://cve.now/CVE-2025-47370.md): Reachable Assertion in BT Controller (CVSS 6.5, Qualcomm Snapdragon)
- [CVE-2025-47368](https://cve.now/CVE-2025-47368.md): Buffer Over-read in DSP Service (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47367](https://cve.now/CVE-2025-47367.md): Out-of-bounds Write in WinBlast Driver (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47365](https://cve.now/CVE-2025-47365.md): Integer Overflow or Wraparound in Automotive Platform (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47362](https://cve.now/CVE-2025-47362.md): Buffer Over-read in Automotive Software platform based on QNX (CVSS 6.1, Qualcomm Snapdragon)
- [CVE-2025-47361](https://cve.now/CVE-2025-47361.md): Improper Validation of Array Index in Automotive Software platform based on QNX (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47360](https://cve.now/CVE-2025-47360.md): Stack-based Buffer Overflow in Automotive Software platform based on QNX (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47357](https://cve.now/CVE-2025-47357.md): Missing Authentication for Critical Function in SMSS (CVSS 8.0, Qualcomm Snapdragon)
- [CVE-2025-47353](https://cve.now/CVE-2025-47353.md): Exposed Dangerous Method or Function in Automotive Software platform based on QNX (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47352](https://cve.now/CVE-2025-47352.md): Improper Validation of Array Index in Audio (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-27074](https://cve.now/CVE-2025-27074.md): Incorrect Calculation of Buffer Size in SCE-Mink (CVSS 8.8, Qualcomm Snapdragon)
- [CVE-2025-27070](https://cve.now/CVE-2025-27070.md): Out-of-bounds Write in Windows Compute (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-27064](https://cve.now/CVE-2025-27064.md): Buffer Over-read in Core Services (CVSS 6.1, Qualcomm Snapdragon)
- [CVE-2025-12324](https://cve.now/CVE-2025-12324.md): TablePress – Tables in WordPress made easy \<= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4, tobiasbg TablePress – Tables in WordPress made easy)
- [CVE-2025-11841](https://cve.now/CVE-2025-11841.md): Greenshift – animation and page builder blocks \<= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes (CVSS 6.4, wpsoul Greenshift – animation and page builder blocks)
- [CVE-2025-43373](https://cve.now/CVE-2025-43373.md): The issue was addressed with improved memory handling. (CVSS 7.5, Apple macOS)
- [CVE-2025-43365](https://cve.now/CVE-2025-43365.md): A denial-of-service issue was addressed with improved input validation. (CVSS 2.8, Apple iOS and iPadOS)
- [CVE-2025-43430](https://cve.now/CVE-2025-43430.md): This issue was addressed through improved state management. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43426](https://cve.now/CVE-2025-43426.md): A logging issue was addressed with improved data redaction. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2025-43390](https://cve.now/CVE-2025-43390.md): A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-43447](https://cve.now/CVE-2025-43447.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-43502](https://cve.now/CVE-2025-43502.md): A privacy issue was addressed by removing sensitive data. (CVSS 7.5, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2025-43386](https://cve.now/CVE-2025-43386.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-43345](https://cve.now/CVE-2025-43345.md): A correctness issue was addressed with improved checks. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43493](https://cve.now/CVE-2025-43493.md): The issue was addressed with improved checks. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2025-43387](https://cve.now/CVE-2025-43387.md): A permissions issue was addressed with additional restrictions. (CVSS 7.8, Apple macOS)
- [CVE-2025-43411](https://cve.now/CVE-2025-43411.md): This issue was addressed with additional entitlement checks. (CVSS 5.5, Apple macOS)
- [CVE-2025-43446](https://cve.now/CVE-2025-43446.md): This issue was addressed with improved validation of symlinks. (CVSS 5.5, Apple macOS)
- [CVE-2025-43503](https://cve.now/CVE-2025-43503.md): An inconsistent user interface issue was addressed with improved state management. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2025-43450](https://cve.now/CVE-2025-43450.md): A logic issue was addressed with improved checks. (CVSS 7.5, Apple iOS and iPadOS)
- [CVE-2025-43391](https://cve.now/CVE-2025-43391.md): A privacy issue was addressed with improved handling of temporary files. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2025-43407](https://cve.now/CVE-2025-43407.md): This issue was addressed with improved entitlements. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-43309](https://cve.now/CVE-2025-43309.md): A logic issue was addressed with improved checks. (CVSS 2.4, Apple iOS and iPadOS)
- [CVE-2025-43427](https://cve.now/CVE-2025-43427.md): This issue was addressed through improved state management. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2025-43431](https://cve.now/CVE-2025-43431.md): The issue was addressed with improved memory handling. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43348](https://cve.now/CVE-2025-43348.md): A logic issue was addressed with improved validation. (CVSS 5.5, Apple macOS)
- [CVE-2025-43364](https://cve.now/CVE-2025-43364.md): A race condition was addressed with additional validation. (CVSS 7.8, Apple macOS)
- [CVE-2025-43396](https://cve.now/CVE-2025-43396.md): A logic issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2025-43379](https://cve.now/CVE-2025-43379.md): This issue was addressed with improved validation of symlinks. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43457](https://cve.now/CVE-2025-43457.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2025-43441](https://cve.now/CVE-2025-43441.md): The issue was addressed with improved memory handling. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2025-43504](https://cve.now/CVE-2025-43504.md): A buffer overflow was addressed with improved bounds checking. (CVSS 4.9, Apple Xcode)
- [CVE-2025-43338](https://cve.now/CVE-2025-43338.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 7.1, Apple iOS and iPadOS · Apple macOS)
- [CVE-2025-43380](https://cve.now/CVE-2025-43380.md): An out-of-bounds write issue was addressed with improved input validation. (CVSS 5.5, Apple macOS)
- [CVE-2025-43288](https://cve.now/CVE-2025-43288.md): This issue was addressed with improved validation of symlinks. (CVSS 5.5, Apple macOS)
- [CVE-2025-43322](https://cve.now/CVE-2025-43322.md): A logic issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2025-43334](https://cve.now/CVE-2025-43334.md): This issue was addressed with additional entitlement checks. (CVSS 5.5, Apple macOS)
- [CVE-2025-43436](https://cve.now/CVE-2025-43436.md): A permissions issue was addressed with additional restrictions. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43420](https://cve.now/CVE-2025-43420.md): A race condition was addressed with improved state handling. (CVSS 4.7, Apple macOS)
- [CVE-2025-43498](https://cve.now/CVE-2025-43498.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2025-43477](https://cve.now/CVE-2025-43477.md): A privacy issue was addressed with improved private data redaction for log entries. (CVSS 5.5, Apple macOS)
- [CVE-2025-43499](https://cve.now/CVE-2025-43499.md): This issue was addressed with additional entitlement checks. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2025-43476](https://cve.now/CVE-2025-43476.md): A permissions issue was addressed with additional restrictions. (CVSS 7.8, Apple macOS)
- [CVE-2025-43421](https://cve.now/CVE-2025-43421.md): Multiple issues were addressed by disabling array allocation sinking. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2025-43460](https://cve.now/CVE-2025-43460.md): A logic issue was addressed with improved checks. (CVSS 4.6, Apple iOS and iPadOS)
- [CVE-2025-43335](https://cve.now/CVE-2025-43335.md): The issue was addressed by adding additional logic. (CVSS 5.5, Apple macOS)
- [CVE-2025-43323](https://cve.now/CVE-2025-43323.md): This issue was addressed with additional entitlement checks. (CVSS 8.1, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43495](https://cve.now/CVE-2025-43495.md): The issue was addressed with improved checks. (CVSS 5.4, Apple iOS and iPadOS)
- [CVE-2025-43440](https://cve.now/CVE-2025-43440.md): This issue was addressed with improved checks. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43505](https://cve.now/CVE-2025-43505.md): An out-of-bounds write issue was addressed with improved input validation. (CVSS 8.8, Apple Xcode)
- [CVE-2025-43397](https://cve.now/CVE-2025-43397.md): A permissions issue was addressed by removing the vulnerable code. (CVSS 5.5, Apple macOS)
- [CVE-2025-43378](https://cve.now/CVE-2025-43378.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-43401](https://cve.now/CVE-2025-43401.md): A denial-of-service issue was addressed with improved validation. (CVSS 7.5, Apple macOS)
- [CVE-2025-43479](https://cve.now/CVE-2025-43479.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-43496](https://cve.now/CVE-2025-43496.md): The issue was addressed by adding additional logic. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-43438](https://cve.now/CVE-2025-43438.md): A use-after-free issue was addressed with improved memory management. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2025-43480](https://cve.now/CVE-2025-43480.md): The issue was addressed with improved checks. (CVSS 8.1, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43382](https://cve.now/CVE-2025-43382.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (CVSS 5.5, Apple macOS)
- [CVE-2025-43414](https://cve.now/CVE-2025-43414.md): A permissions issue was addressed with improved validation. (CVSS 6.2, Apple macOS)
- [CVE-2025-43443](https://cve.now/CVE-2025-43443.md): This issue was addressed with improved checks. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43455](https://cve.now/CVE-2025-43455.md): A privacy issue was addressed with improved checks. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-43394](https://cve.now/CVE-2025-43394.md): This issue was addressed with improved handling of symlinks. (CVSS 5.5, Apple macOS)
- [CVE-2025-43422](https://cve.now/CVE-2025-43422.md): The issue was addressed by adding additional logic. (CVSS 4.6, Apple iOS and iPadOS)
- [CVE-2025-43434](https://cve.now/CVE-2025-43434.md): A use-after-free issue was addressed with improved memory management. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +3)
- [CVE-2025-43361](https://cve.now/CVE-2025-43361.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43336](https://cve.now/CVE-2025-43336.md): A permissions issue was addressed with additional restrictions. (CVSS 4.4, Apple macOS)
- [CVE-2025-43459](https://cve.now/CVE-2025-43459.md): An authentication issue was addressed with improved state management. (CVSS 4.6, Apple watchOS)
- [CVE-2025-43377](https://cve.now/CVE-2025-43377.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2025-43398](https://cve.now/CVE-2025-43398.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43376](https://cve.now/CVE-2025-43376.md): A logic issue was addressed with improved state management. (CVSS 7.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43399](https://cve.now/CVE-2025-43399.md): This issue was addressed with improved redaction of sensitive information. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2025-43458](https://cve.now/CVE-2025-43458.md): This issue was addressed through improved state management. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43360](https://cve.now/CVE-2025-43360.md): The issue was addressed with improved UI. (CVSS 5.5, Apple iOS and iPadOS)
- [CVE-2025-43419](https://cve.now/CVE-2025-43419.md): The issue was addressed with improved memory handling. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43462](https://cve.now/CVE-2025-43462.md): The issue was addressed with improved memory handling. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43435](https://cve.now/CVE-2025-43435.md): The issue was addressed with improved memory handling. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43423](https://cve.now/CVE-2025-43423.md): A logging issue was addressed with improved data redaction. (CVSS 2.0, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2025-43474](https://cve.now/CVE-2025-43474.md): An out-of-bounds read was addressed with improved input validation. (CVSS 7.8, Apple macOS)
- [CVE-2025-43395](https://cve.now/CVE-2025-43395.md): This issue was addressed with improved handling of symlinks. (CVSS 3.3, Apple macOS)
- [CVE-2025-43454](https://cve.now/CVE-2025-43454.md): This issue was addressed through improved state management. (CVSS 7.5, Apple iOS and iPadOS)
- [CVE-2025-43507](https://cve.now/CVE-2025-43507.md): A privacy issue was addressed by moving sensitive data. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-43442](https://cve.now/CVE-2025-43442.md): A permissions issue was addressed with additional restrictions. (CVSS 3.3, Apple iOS and iPadOS)
- [CVE-2025-43383](https://cve.now/CVE-2025-43383.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 4.3, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-43481](https://cve.now/CVE-2025-43481.md): This issue was addressed with improved checks. (CVSS 5.2, Apple macOS)
- [CVE-2025-43439](https://cve.now/CVE-2025-43439.md): A privacy issue was addressed by removing sensitive data. (CVSS 5.5, Apple iOS and iPadOS · Apple visionOS)
- [CVE-2025-43478](https://cve.now/CVE-2025-43478.md): A use after free issue was addressed with improved memory management. (CVSS 5.5, Apple macOS)
- [CVE-2025-43424](https://cve.now/CVE-2025-43424.md): The issue was addressed with improved bounds checks. (CVSS 6.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2025-43432](https://cve.now/CVE-2025-43432.md): A use-after-free issue was addressed with improved memory management. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43449](https://cve.now/CVE-2025-43449.md): The issue was addressed with improved handling of caches. (CVSS 7.5, Apple iOS and iPadOS)
- [CVE-2025-43408](https://cve.now/CVE-2025-43408.md): This issue was addressed by restricting options offered on a locked device. (CVSS 2.4, Apple macOS)
- [CVE-2025-43469](https://cve.now/CVE-2025-43469.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-43384](https://cve.now/CVE-2025-43384.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 4.3, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-43412](https://cve.now/CVE-2025-43412.md): A file quarantine bypass was addressed with additional checks. (CVSS 6.3, Apple macOS)
- [CVE-2025-43500](https://cve.now/CVE-2025-43500.md): A privacy issue was addressed with improved handling of user preferences. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-43445](https://cve.now/CVE-2025-43445.md): An out-of-bounds read was addressed with improved input validation. (CVSS 4.3, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43392](https://cve.now/CVE-2025-43392.md): The issue was addressed with improved handling of caches. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43405](https://cve.now/CVE-2025-43405.md): A permissions issue was addressed with additional sandbox restrictions. (CVSS 7.5, Apple macOS)
- [CVE-2025-43452](https://cve.now/CVE-2025-43452.md): This issue was addressed by restricting options offered on a locked device. (CVSS 4.6, Apple iOS and iPadOS)
- [CVE-2025-43444](https://cve.now/CVE-2025-43444.md): A permissions issue was addressed with additional restrictions. (CVSS 5.3, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43413](https://cve.now/CVE-2025-43413.md): An access issue was addressed with additional sandbox restrictions. (CVSS 7.5, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43385](https://cve.now/CVE-2025-43385.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 4.3, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-43468](https://cve.now/CVE-2025-43468.md): A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-43429](https://cve.now/CVE-2025-43429.md): A buffer overflow was addressed with improved bounds checking. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43350](https://cve.now/CVE-2025-43350.md): A permissions issue was addressed with additional restrictions. (CVSS 2.4, Apple iOS and iPadOS)
- [CVE-2025-43409](https://cve.now/CVE-2025-43409.md): A permissions issue was addressed with additional sandbox restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-43448](https://cve.now/CVE-2025-43448.md): This issue was addressed with improved validation of symlinks. (CVSS 6.3, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43389](https://cve.now/CVE-2025-43389.md): A privacy issue was addressed by removing the vulnerable code. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2025-43433](https://cve.now/CVE-2025-43433.md): The issue was addressed with improved memory handling. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43425](https://cve.now/CVE-2025-43425.md): The issue was addressed with improved memory handling. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43472](https://cve.now/CVE-2025-43472.md): A validation issue was addressed with improved input sanitization. (CVSS 7.8, Apple macOS)
- [CVE-2025-35021](https://cve.now/CVE-2025-35021.md): Abilis CPX Fallback Shell Connection Relay (CVSS 6.5, Abilis CPX)
- [CVE-2025-46556](https://cve.now/CVE-2025-46556.md): MantisBT is Vulnerable to Denial-of-Service (DoS) attack via Excessive Note Length (CVSS 6.5, mantisbt · mantisbt/mantisbt)
- [CVE-2024-56426](https://cve.now/CVE-2024-56426.md): An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2 (CVSS 7.5)
- [CVE-2025-27374](https://cve.now/CVE-2025-27374.md): An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 10 (CVSS 5.3)
- [CVE-2025-49494](https://cve.now/CVE-2025-49494.md): An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330, 1380, 1480, 9110, Modem 51 (CVSS 7.5)
- [CVE-2025-52512](https://cve.now/CVE-2025-52512.md): An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. (CVSS 7.5)
- [CVE-2025-52513](https://cve.now/CVE-2025-52513.md): An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. (CVSS 7.5)
- [CVE-2025-52910](https://cve.now/CVE-2025-52910.md): An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400. (CVSS 9.8)
- [CVE-2025-54323](https://cve.now/CVE-2025-54323.md): An issue was discovered in the camera in Samsung Mobile Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, and (CVSS 7.5)
- [CVE-2025-54325](https://cve.now/CVE-2025-54325.md): An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1080, 1280, 2200, 1380, 1480, 2400, 1580, 2500, W92 (CVSS 5.3)
- [CVE-2025-54327](https://cve.now/CVE-2025-54327.md): An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1380, W920, W930, W1000. (CVSS 6.5)
- [CVE-2025-54329](https://cve.now/CVE-2025-54329.md): An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380 (CVSS 7.5)
- [CVE-2025-54330](https://cve.now/CVE-2025-54330.md): An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. (CVSS 5.3)
- [CVE-2025-54331](https://cve.now/CVE-2025-54331.md): An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. (CVSS 5.3)
- [CVE-2025-54332](https://cve.now/CVE-2025-54332.md): An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. (CVSS 7.5)
- [CVE-2025-54333](https://cve.now/CVE-2025-54333.md): An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. (CVSS 5.3)
- [CVE-2025-54334](https://cve.now/CVE-2025-54334.md): An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. (CVSS 7.5)
- [CVE-2025-54335](https://cve.now/CVE-2025-54335.md): An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. (CVSS 6.5)
- [CVE-2025-56230](https://cve.now/CVE-2025-56230.md): Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component. (CVSS 7.5)
- [CVE-2025-60925](https://cve.now/CVE-2025-60925.md): codeshare v1.0.0 was discovered to contain an information leakage vulnerability. (CVSS 5.3)
- [CVE-2025-61431](https://cve.now/CVE-2025-61431.md): A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr\_feditorHTML.jsp endpoint of Zucchetti ZMaintenance Infinity and Infinit (CVSS 6.1)
- [CVE-2025-63294](https://cve.now/CVE-2025-63294.md): WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-11-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.