CVEs published November 7, 2025
119 CVEs were published on November 7, 2025: 13 critical, 23 high. 1 is now in CISA KEV.
- Published
- 119
- Critical
- 13
- High
- 23
- Medium
- 72
- Low
- 11
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 72
Most affected products
- IBM Db2
- 9
- QNAP Systems File Station
- 9
- Google Chrome
- 7
- kubevirt · kubevirt.io/kubevirt
- 5
- code-projects Responsive Hotel Site
- 3
- DedeBIZ
- 3
- astrbot
- 2
- GE Vernova Smallworld
- 2
- MacWarrior clipbucket-v5
- 2
- QNAP Systems Download Station
- 2
Critical 13
- CVE-2025-64486calibre is vulnerable to arbitrary code execution when opening FB2 fileskovidgoyal calibre
- CVE-2020-36870Ruijie Gateway EG & NBR Models v11.1(6)B9P1 - 11.9(4)B12P1 RCEBeijing Star-Net Ruijie Network Technology Co. RG-EG100… +35
- CVE-2025-10230Samba: command injection in wins server hook scriptsamba · Red Hat Enterprise Linux +1
- CVE-2025-3222Smallworld SWMFS Improper AuthenticationGE Vernova Smallworld
- CVE-2025-52425QuMagieQNAP Systems QuMagie
- CVE-2025-34299Monsta FTP <= 2.11 Unauthenticated Arbitrary File UploadMonsta Limited of New Zealand Monsta FTP
- CVE-2025-10870SQL injection in DIAL's CentrosNetDIAL CentrosNet
- CVE-2025-12352Gravity Forms <= 2.9.20 - Unauthenticated Arbitrary File Upload via 'copy_post_image'Gravity Forms
- CVE-2025-64180Manager-io/Manager: Complete Bypass of SSRF Protection via Time-of-Check Time-of-Use (TOCTOU)Manager-io Manager
- CVE-2025-11546CLUSTERPRO X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2 and EXPRESSCLUSTER X for Linux 4.0, 4.1, 4.2, 5.0, 5.1 and 5.2, CLUSTERPRO X SingleSeNEC CLUSTERPRO X for Linux · NEC CLUSTERPRO X SingleServerS…
- CVE-2025-63689Multiple SQL injection vulnerabilitites in ycf1998 money-pos system before commit 11f276bd20a41f089298d804e43cb1c39d041e59 (2025-09-14) allo
- CVE-2025-63690In pig-mesh Pig versions 3.8.2 and below, when setting up scheduled tasks in the Quartz management function under the system management modu
- CVE-2025-63691In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the token query interfa
High 23
- CVE-2025-64488SuiteCRM: Authenticated SQL Injection Possible in Reschedule Call ModuleSuiteCRM
- CVE-2025-12907Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrarGoogle Chrome
- CVE-2025-37736Elastic Cloud Enterprise Improper AuthorizationElastic Cloud Enterprise
- CVE-2025-64442HumHub is vulnerable to XSS through its Meta Search componenthumhub
- CVE-2025-64439LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializerlangchain-ai langgraph · langgraph-checkpoint
- CVE-2025-36186IBM Db2 privilege escalationIBM Db2
- CVE-2025-64431IDOR Vulnerabilities in ZITADEL's Organization API allows Cross-Tenant Data Temperingzitadel · github.com/zitadel/zitadel
- CVE-2025-9458PRT File Parsing Memory Corruption VulnerabilityAutodesk Shared Components
- CVE-2025-64430Parse Server Vulnerable to Server-Side Request Forgery (SSRF) in File Upload via URI Formatparse-community parse-server · parse-server
- CVE-2025-64347Apollo Router Improperly Enforces Renamed Access Control Directivesapollographql router · apollo-router
- CVE-2025-54167Notification CenterQNAP Systems Notification Center
- CVE-2025-58464QuMagieQNAP Systems QuMagie
- CVE-2025-10968SQLi in GG Soft's PaperWorkGG Soft Software Services PaperWork
- CVE-2025-64343(conda) Constructor: Excessive permissions during and after installationconda constructor
- CVE-2025-64339ClipBucket v5: Stored XSS Vulnerability in Manage PlaylistsMacWarrior clipbucket-v5
- CVE-2025-64336ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo TitleMacWarrior clipbucket-v5
- CVE-2025-4519IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_password Functionthemeatelier IDonate – Blood Donation, Request And Donor Ma…
- CVE-2025-64328FreePBX Administration GUI is Vulnerable to Authenticated Command InjectionFreePBX filestore
- CVE-2025-5483LC Wizard 1.2.10 - 1.3.0 - Missing Authorization to Unauthenticated Privilege Escalationniaj Connector Wizard
- CVE-2025-64184Dosage vulnerable to Directory Traversal through crafted HTTP responseswebcomics dosage · dosage
- CVE-2025-57698AstrBot Project v3.5.22 contains a directory traversal vulnerability.astrbot
- CVE-2025-60574A Local File Inclusion (LFI) vulnerability has been identified in tQuadra CMS 4.2.1117.
- CVE-2025-63783A Broken Object Level Authorization (BOLA) vulnerability was discovered in the tRPC project mutation APIs (update, delete, add/remove tag) o
Medium, low and unrated 83
- CVE-2025-12911Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a cGoogle Chrome
- CVE-2025-12910Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive inGoogle Chrome
- CVE-2025-12909Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cross-origin data via Google Chrome
- CVE-2025-12908Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perfGoogle Chrome
- CVE-2025-12906Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a cGoogle Chrome
- CVE-2025-12905Inappropriate implementation in Downloads in Google Chrome on Windows prior to 140.0.7339.80 allowed a remote attacker to bypass Mark of theGoogle Chrome
- CVE-2025-64485CVAT: Mounted share file overwrite via crafted requestcvat-ai cvat
- CVE-2025-64433KubeVirt Arbitrary Container File Readkubevirt · kubevirt.io/kubevirt
- CVE-2025-64437KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changeskubevirt · kubevirt.io/kubevirt
- CVE-2025-64436KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodeskubevirt · github.com/kubevirt/kubevirt +1
- CVE-2025-64435KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonationkubevirt · kubevirt.io/kubevirt
- CVE-2025-64434KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofingkubevirt · kubevirt.io/kubevirt
- CVE-2025-12418Potential Denial of Service in Supported Versions of Revenera InstallShieldRevenera InstallShield
- CVE-2025-64481Open redirect endpoint in Datasettesimonw datasette · datasette
- CVE-2025-12875mruby array.c ary_fill_exec out-of-bounds writemruby
- CVE-2025-12896Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authoriSolidigm™ D5-P5316, D7-P5510, D7-P5520/D7-P5620, D5-P5430,…
- CVE-2025-12902Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authoriSolidigm™ D5-P5316, D5-P5430, D7-P5520/D7-P5620, D5-P5336
- CVE-2025-36006IBM Db2 denial of serviceIBM Db2
- CVE-2025-7700Ffmpeg: null pointer dereference in ffmpeg als decoder (libavcodec/alsdec.c)ffmpeg
- CVE-2025-36008IBM Db2 denial of serviceIBM Db2
- CVE-2025-36131IBM Db2 information disclosureIBM Db2
- CVE-2025-36136IBM denial of serviceIBM Db2
- CVE-2025-36185IBM Db2 denial of serviceIBM Db2
- CVE-2025-12890Bluetooth: peripheral: Invalid handling of malformed connection requestzephyrproject-rtos Zephyr
- CVE-2025-64432KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layerkubevirt · kubevirt.io/kubevirt
- CVE-2025-33012IBM Db2 improper account lockoutIBM Db2
- CVE-2025-2534IBM Db2 denial of serviceIBM Db2
- CVE-2025-36135IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site ScriptingIBM Sterling B2B Integrator · IBM Sterling File Gateway
- CVE-2024-47118IBM Db2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted queryIBM Db2
- CVE-2025-12829An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to IoAmazon Ion-C
- CVE-2025-12873Campcodes School File Management update_user.php sql injectionCampcodes School File Management
- CVE-2025-12862projectworlds Online Notes Sharing Platform userprofile.php unrestricted uploadprojectworlds Online Notes Sharing Platform
- CVE-2025-7719Smallworld SWMFS Arbitrary File OpsGE Vernova Smallworld
- CVE-2025-12861DedeBIZ spec_add.php sql injectionDedeBIZ
- CVE-2025-47207File Station 5QNAP Systems File Station
- CVE-2025-52865File Station 5QNAP Systems File Station
- CVE-2025-53408File Station 5QNAP Systems File Station
- CVE-2025-53409File Station 5QNAP Systems File Station
- CVE-2025-53410File Station 5QNAP Systems File Station
- CVE-2025-53411File Station 5QNAP Systems File Station
- CVE-2025-53412File Station 5QNAP Systems File Station
- CVE-2025-53413File Station 5QNAP Systems File Station
- CVE-2025-54168QuLog CenterQNAP Systems QuLog Center
- CVE-2025-57706File Station 5QNAP Systems File Station
- CVE-2025-57712Qsync CentralQNAP Systems Qsync Central
- CVE-2025-58463Download StationQNAP Systems Download Station
- CVE-2025-58465Download StationQNAP Systems Download Station
- CVE-2025-58469QuLog CenterQNAP Systems QuLog Center
- CVE-2025-12860DedeBIZ freelist_main.php sql injectionDedeBIZ
- CVE-2025-12859DedeBIZ templets_one_edit.php sql injectionDedeBIZ
- CVE-2025-12857code-projects Responsive Hotel Site roombook.php sql injectioncode-projects Responsive Hotel Site
- CVE-2025-12856code-projects Responsive Hotel Site reservation.php sql injectioncode-projects Responsive Hotel Site
- CVE-2025-12855code-projects Responsive Hotel Site newsletterdel.php sql injectioncode-projects Responsive Hotel Site
- CVE-2025-12854newbee-mall-plus seckillExecution executeSeckill authorizationnewbee-mall-plus
- CVE-2025-12853SourceCodester Best House Rental Management System admin_class.php delete_house sql injectionSourceCodester Best House Rental Management System
- CVE-2025-46413Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'.BUFFALO WSR-1800AX4 · BUFFALO WSR-1800AX4S +2
- CVE-2025-10966missing SFTP host verification with wolfSSHcurl
- CVE-2025-64346archives: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')jaredallard archives · github.com/jaredallard/archives
- CVE-2025-12527Page & Post Notes <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Note Update/Deletionyydevelopment Page & Post Notes
- CVE-2025-12520WP Airbnb Review Slider <= 4.2 - Authenticated (Admin+) Stored Cross-Site Scriptingjgwhite33 WP Airbnb Review Slider
- CVE-2025-4522IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Functionthemeatelier IDonate – Blood Donation, Request And Donor Ma…
- CVE-2025-64329containerd CRI server: Host memory exhaustion through Attach goroutine leakcontainerd · github.com/containerd/containerd +1
- CVE-2025-64323kgateway is missing xDS authorizationkgateway-dev kgateway · github.com/kgateway-dev/kgateway +1
- CVE-2025-64187OctoPrint is vulnerable to XSS through Action Command Notifications and PromptsOctoPrint
- CVE-2025-48985A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta.Vercel AI SDK · ai
- CVE-2025-52662A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***.Vercel Nuxt Devtools · @nuxt/devtools
- CVE-2025-57697AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function _encode_image_bs64.astrbot
- CVE-2025-61261A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the
- CVE-2025-63420CrushFTP11 before 11.3.7_57 is vulnerable to stored HTML injection in the CrushFTP Admin Panel (Reports / "Who Created Folder"), enabling pe
- CVE-2025-63543TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in the /search_results endpoint via the q parameter.
- CVE-2025-63544TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in /order_notes via the id parameter.
- CVE-2025-63638Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Task Title" and "Description (Optional)" f
- CVE-2025-63639The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting (XSS) due to imprope
- CVE-2025-63640Sourcecodester Medicine Reminder App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Medicine Name" and "Notes (Optional)" fields w
- CVE-2025-63686There is an arbitrary file download vulnerability in GuoMinJim PersonManage thru commit 5a02b1ab208feacf3a34fc123c9381162afbaa95 (2020-11-23
- CVE-2025-63687An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBefore in file src/main/java/com/rymcu/forest/core/se
- CVE-2025-63713Cross-Site Scripting (XSS) vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary web script or HTML
- CVE-2025-63714Cross-Site Scripting (XSS) vulnerability in SourceCodester User Account Generator 1.0 allows remote attackers to execute arbitrary JavaScrip
- CVE-2025-63716The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow unauthorized state-changing
- CVE-2025-63717The change password functionality at /pet_grooming/admin/change_pass.php in SourceCodester Pet Grooming Management Software 1.0 is vulnerabl
- CVE-2025-63718A SQL injection vulnerability exists in the SourceCodester PQMS (Patient Queue Management System) 1.0 in the api_patient_schedule.php endpoi
- CVE-2025-63784An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web/client/src/app/auth/callback/route.ts in Onlook
- CVE-2025-63785A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the text editor feature of the Onlook web application 0.2.32.