# CVEs published 2025-11-12

212 CVEs were published on November 12, 2025: 14 critical, 85 high. Days are UTC.

- [CVE-2025-13076](https://cve.now/CVE-2025-13076.md): code-projects Responsive Hotel Site usersetting.php sql injection (CVSS 5.1, code-projects Responsive Hotel Site)
- [CVE-2025-13075](https://cve.now/CVE-2025-13075.md): code-projects Responsive Hotel Site usersettingdel.php sql injection (CVSS 5.1, code-projects Responsive Hotel Site)
- [CVE-2025-64707](https://cve.now/CVE-2025-64707.md): Frappe LMS revoking access did not show immediate effect as roles were cached (CVSS 1.2, frappe lms)
- [CVE-2025-64705](https://cve.now/CVE-2025-64705.md): Frappe user was able to access the submission of other students (CVSS 1.3, frappe lms)
- [CVE-2025-64523](https://cve.now/CVE-2025-64523.md): FileBrowser has Insecure Direct Object Reference (IDOR) in Share Deletion Function (CVSS 7.2, filebrowser · github.com/filebrowser/filebrowser +1)
- [CVE-2022-4982](https://cve.now/CVE-2022-4982.md): DBLTek GoIP-1 vGHSFVT-1.1-67-5 Unauthenticated LFI (CVSS 8.7, DBL Technology (DBLTek) GoIP-1)
- [CVE-2023-7326](https://cve.now/CVE-2023-7326.md): Epson Stylus SX510W Printer Remote Power Off DoS (CVSS 8.7, Seiko Epson Epson Stylus SX510W)
- [CVE-2021-4464](https://cve.now/CVE-2021-4464.md): FIberHome AN5506-04-FA / HG6245D Routers Remote Stack Overflow (CVSS 9.3, FiberHome AN5506-04-FA · FiberHome HG6245D)
- [CVE-2011-10034](https://cve.now/CVE-2011-10034.md): IRAI AUTOMGEN \<= 8.0.0.7 Use-After-Free Remote DoS (CVSS 6.9, IRAI AUTOMGEN)
- [CVE-2016-15055](https://cve.now/CVE-2016-15055.md): JVC VN-T IP-Camera Directory Traversal via check.cgi (CVSS 8.7, JVC (JVCKENWOOD) IP-Camera)
- [CVE-2025-64517](https://cve.now/CVE-2025-64517.md): sudo-rs doesn't record authenticating user properly in timestamp (CVSS 4.4, trifectatechfoundation sudo-rs · sudo-rs)
- [CVE-2021-4463](https://cve.now/CVE-2021-4463.md): Longjing Technology BEMS API \<= 1.21 Remote Arbitrary File Download (CVSS 8.7, Shenzhen Longjing Technology Co. BEMS API)
- [CVE-2023-7327](https://cve.now/CVE-2023-7327.md): Ozeki SMS Gateway \<= 10.3.208 Unauthenticated Arbitrary File Read (CVSS 8.7, Ozeki SMS Gateway)
- [CVE-2022-4983](https://cve.now/CVE-2022-4983.md): TEC-IT TBarCode SDK 11.15 Remote File Create (CVSS 6.9, TEC-IT Datenverarbeitung GmbH, Austria TEC-IT TBarCode)
- [CVE-2023-7329](https://cve.now/CVE-2023-7329.md): Tinycontrol LAN Controller v3 (LK3) Remote DoS (CVSS 8.7, tinycontrol Lan Controller)
- [CVE-2017-20211](https://cve.now/CVE-2017-20211.md): UCanCode E-XD++ Visualization Enterprise Suite Untrusted Pointer Dereference RCE (CVSS 8.6, UCanCode.Net Software E-XD++ Visualization Enterprise Suite)
- [CVE-2025-64503](https://cve.now/CVE-2025-64503.md): \[BIGSLEEP-434615384\] cups-filters 1.x: out of bounds write in pdftoraster (CVSS 4.0, OpenPrinting cups-filters)
- [CVE-2025-40208](https://cve.now/CVE-2025-40208.md): media: iris: fix module removal if firmware download failed (no CVSS, Linux)
- [CVE-2025-40207](https://cve.now/CVE-2025-40207.md): media: v4l2-subdev: Fix alloc failure check in v4l2\_subdev\_call\_state\_try() (no CVSS, Linux)
- [CVE-2025-40206](https://cve.now/CVE-2025-40206.md): netfilter: nft\_objref: validate objref and objrefmap expressions (CVSS 7.8, Linux)
- [CVE-2025-40205](https://cve.now/CVE-2025-40205.md): btrfs: avoid potential out-of-bounds in btrfs\_encode\_fh() (CVSS 7.8, Linux)
- [CVE-2025-40204](https://cve.now/CVE-2025-40204.md): sctp: Fix MAC comparison to be constant-time (CVSS 8.1, Linux)
- [CVE-2025-40203](https://cve.now/CVE-2025-40203.md): listmount: don't call path\_put() under namespace semaphore (CVSS 7.8, Linux)
- [CVE-2025-40202](https://cve.now/CVE-2025-40202.md): ipmi: Rework user message limit handling (CVSS 7.8, Linux)
- [CVE-2025-40201](https://cve.now/CVE-2025-40201.md): kernel/sys.c: fix the racy usage of task\_lock(tsk-\>group\_leader) in sys\_prlimit64() paths (CVSS 7.8, Linux)
- [CVE-2025-40200](https://cve.now/CVE-2025-40200.md): Squashfs: reject negative file sizes in squashfs\_read\_inode() (no CVSS, Linux)
- [CVE-2025-40199](https://cve.now/CVE-2025-40199.md): page\_pool: Fix PP\_MAGIC\_MASK to avoid crashing on some 32-bit arches (CVSS 7.8, Linux)
- [CVE-2025-40198](https://cve.now/CVE-2025-40198.md): ext4: avoid potential buffer over-read in parse\_apply\_sb\_mount\_options() (CVSS 7.8, Linux)
- [CVE-2025-40197](https://cve.now/CVE-2025-40197.md): media: mc: Clear minor number before put device (no CVSS, Linux)
- [CVE-2025-40196](https://cve.now/CVE-2025-40196.md): fs: quota: create dedicated workqueue for quota\_release\_work (no CVSS, Linux)
- [CVE-2025-40195](https://cve.now/CVE-2025-40195.md): mount: handle NULL values in mnt\_ns\_release() (no CVSS, Linux)
- [CVE-2025-40194](https://cve.now/CVE-2025-40194.md): cpufreq: intel\_pstate: Fix object lifecycle issue in update\_qos\_request() (no CVSS, Linux)
- [CVE-2025-40193](https://cve.now/CVE-2025-40193.md): xtensa: simdisk: add input size check in proc\_write\_simdisk (no CVSS, Linux)
- [CVE-2025-40192](https://cve.now/CVE-2025-40192.md): Revert "ipmi: fix msg stack when IPMI is disconnected" (no CVSS, Linux)
- [CVE-2025-40191](https://cve.now/CVE-2025-40191.md): drm/amdkfd: Fix kfd process ref leaking when userptr unmapping (no CVSS, Linux)
- [CVE-2025-40190](https://cve.now/CVE-2025-40190.md): ext4: guard against EA inode refcount underflow in xattr update (CVSS 7.8, Linux)
- [CVE-2025-40189](https://cve.now/CVE-2025-40189.md): net: usb: lan78xx: Fix lost EEPROM read timeout error(-ETIMEDOUT) in lan78xx\_read\_raw\_eeprom (no CVSS, Linux)
- [CVE-2025-40188](https://cve.now/CVE-2025-40188.md): pwm: berlin: Fix wrong register in suspend/resume (no CVSS, Linux)
- [CVE-2025-40187](https://cve.now/CVE-2025-40187.md): net/sctp: fix a null dereference in sctp\_disposition sctp\_sf\_do\_5\_1D\_ce() (CVSS 7.5, Linux)
- [CVE-2025-40186](https://cve.now/CVE-2025-40186.md): tcp: Don't call reqsk\_fastopen\_remove() in tcp\_conn\_request(). (CVSS 8.1, Linux)
- [CVE-2025-40185](https://cve.now/CVE-2025-40185.md): ice: ice\_adapter: release xa entry on adapter allocation failure (no CVSS, Linux)
- [CVE-2025-40184](https://cve.now/CVE-2025-40184.md): KVM: arm64: Fix debug checking for np-guests using huge mappings (no CVSS, Linux)
- [CVE-2025-40183](https://cve.now/CVE-2025-40183.md): bpf: Fix metadata\_dst leak \_\_bpf\_redirect\_neigh\_v{4,6} (CVSS 7.5, Linux)
- [CVE-2025-40182](https://cve.now/CVE-2025-40182.md): crypto: skcipher - Fix reqsize handling (CVSS 7.8, Linux)
- [CVE-2025-40181](https://cve.now/CVE-2025-40181.md): x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (no CVSS, Linux)
- [CVE-2025-40180](https://cve.now/CVE-2025-40180.md): mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop (no CVSS, Linux)
- [CVE-2025-40179](https://cve.now/CVE-2025-40179.md): ext4: verify orphan file size is not too big (no CVSS, Linux)
- [CVE-2025-40178](https://cve.now/CVE-2025-40178.md): pid: Add a judgment for ns null in pid\_nr\_ns (no CVSS, Linux)
- [CVE-2025-64500](https://cve.now/CVE-2025-64500.md): Symfony's incorrect parsing of PATH\_INFO can lead to limited authorization bypass (CVSS 7.3, symfony · symfony/http-foundation +1)
- [CVE-2025-64482](https://cve.now/CVE-2025-64482.md): Tuleap missing CSRF protections in the File Release System (CVSS 4.6, Enalean tuleap)
- [CVE-2025-64429](https://cve.now/CVE-2025-64429.md): DuckDB Encryption Crypto implementation is vulnerable (CVSS 6.9, duckdb)
- [CVE-2025-64345](https://cve.now/CVE-2025-64345.md): Wasmtime provides unsound API access to a WebAssembly shared linear memory (CVSS 1.8, bytecodealliance wasmtime · wasmtime)
- [CVE-2025-33119](https://cve.now/CVE-2025-33119.md): IBM QRadar SIEM Information Disclosure (CVSS 6.5, IBM QRadar Security Information and Event Management)
- [CVE-2025-36223](https://cve.now/CVE-2025-36223.md): IBM OpenPages Host Header Injection (CVSS 5.4, IBM OpenPages)
- [CVE-2025-13063](https://cve.now/CVE-2025-13063.md): DinukaNavaratna Dee Store authorization (CVSS 6.9, DinukaNavaratna Dee Store)
- [CVE-2025-64186](https://cve.now/CVE-2025-64186.md): Evervault Go SDK: Incomplete PCR Validation in Enclave Attestation for non-Evervault hosted Enclaves (CVSS 8.7, evervault-go · github.com/evervault/evervault-go)
- [CVE-2025-13061](https://cve.now/CVE-2025-13061.md): itsourcecode Online Voting System index.php unrestricted upload (CVSS 5.3, itsourcecode Online Voting System)
- [CVE-2025-64170](https://cve.now/CVE-2025-64170.md): sudo-rs: Partial password reveal is possible after timeout (CVSS 3.8, trifectatechfoundation sudo-rs · sudo-rs)
- [CVE-2025-46608](https://cve.now/CVE-2025-46608.md): Dell Data Lakehouse, versions prior to 1.6.0.0, contain(s) an Improper Access Control vulnerability. (CVSS 9.1, Dell Data Lakehouse)
- [CVE-2025-13060](https://cve.now/CVE-2025-13060.md): SourceCodester Survey Application System view\_survey.php sql injection (CVSS 6.9, SourceCodester Survey Application System)
- [CVE-2025-13059](https://cve.now/CVE-2025-13059.md): SourceCodester Alumni Management System manage\_career.php sql injection (CVSS 5.3, SourceCodester Alumni Management System)
- [CVE-2025-46427](https://cve.now/CVE-2025-46427.md): Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used in a Command ('Comma (CVSS 8.8, Dell SmartFabric OS10 Software)
- [CVE-2025-46428](https://cve.now/CVE-2025-46428.md): Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used in a Command ('Comm (CVSS 8.8, Dell SmartFabric OS10 Software)
- [CVE-2024-48829](https://cve.now/CVE-2024-48829.md): Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Injection') vulnerabili (CVSS 6.7, Dell SmartFabric OS10 Software)
- [CVE-2025-13058](https://cve.now/CVE-2025-13058.md): soerennb eXtplorer Filename cross site scripting (CVSS 5.1, soerennb eXtplorer)
- [CVE-2025-12048](https://cve.now/CVE-2025-12048.md): An arbitrary file upload vulnerability was reported in the Lenovo Scanner Pro client during an internal security assessment that could allow (CVSS 7.7, Lenovo Scanner Pro)
- [CVE-2025-12047](https://cve.now/CVE-2025-12047.md): A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, (CVSS 6.0, Lenovo Scanner Pro)
- [CVE-2025-10495](https://cve.now/CVE-2025-10495.md): A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client application (CVSS 7.7, Lenovo App Store · Lenovo PC Manager +2)
- [CVE-2025-8485](https://cve.now/CVE-2025-8485.md): An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elev (CVSS 7.0, Lenovo App Store)
- [CVE-2025-8421](https://cve.now/CVE-2025-8421.md): An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could a (CVSS 5.2, Lenovo Dock Manager)
- [CVE-2025-64117](https://cve.now/CVE-2025-64117.md): Tuleap missing CSRF protection in the management of SVN commit rules and immutable tags (CVSS 4.6, Enalean tuleap)
- [CVE-2025-27368](https://cve.now/CVE-2025-27368.md): IBM OpenPages Information Disclosure (CVSS 4.3, IBM OpenPages)
- [CVE-2025-64099](https://cve.now/CVE-2025-64099.md): OpenAM allows use of arbitrary OIDC requested claims values in id\_token and user\_info (CVSS 8.1, OpenIdentityPlatform OpenAM · org.openidentityplatform.open…)
- [CVE-2025-61667](https://cve.now/CVE-2025-61667.md): Datadog Linux Host Agent affected by local privilege escalation due to insufficient pycache permissions (CVSS 7.0, datadog-agent)
- [CVE-2025-57812](https://cve.now/CVE-2025-57812.md): \[BIGSLEEP-434612419\] CUPS-Filters has heap-buffer-overflow write in \`cfImageLut()\` (CVSS 3.7, OpenPrinting libcupsfilters)
- [CVE-2025-13057](https://cve.now/CVE-2025-13057.md): Campcodes School Fees Payment Management System ajax.php sql injection (CVSS 5.3, Campcodes School Fees Payment Management System)
- [CVE-2024-47866](https://cve.now/CVE-2024-47866.md): RGW DoS attack with empty HTTP header in S3 object copy (CVSS 7.5, ceph)
- [CVE-2024-45301](https://cve.now/CVE-2024-45301.md): ZDI-CAN-24744: Mintty Path Conversion Improper Input Validation Information Disclosure Vulnerability (CVSS 5.3, mintty)
- [CVE-2025-25236](https://cve.now/CVE-2025-25236.md): Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. (CVSS 5.3, Omnissa Workspace ONE UEM)
- [CVE-2025-20379](https://cve.now/CVE-2025-20379.md): Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprise (CVSS 3.5, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2025-20378](https://cve.now/CVE-2025-20378.md): Open Redirect on Web Login endpoint in Splunk Enterprise (CVSS 3.1, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2025-13042](https://cve.now/CVE-2025-13042.md): Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption (CVSS 8.8, Google Chrome)
- [CVE-2025-59089](https://cve.now/CVE-2025-59089.md): Python-kdcproxy: remote dos via unbounded tcp upstream buffering (CVSS 5.9, latchset kdcproxy · Red Hat Enterprise Linux)
- [CVE-2025-2843](https://cve.now/CVE-2025-2843.md): Observability-operator: observability operator privilege escalation (CVSS 8.8, rhobs observability-operator · Red Hat Cluster Observabi… +1)
- [CVE-2025-59088](https://cve.now/CVE-2025-59088.md): Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv (CVSS 8.6, latchset kdcproxy · Red Hat Enterprise Linux)
- [CVE-2025-11797](https://cve.now/CVE-2025-11797.md): DWG File Parsing Use-After-Free Vulnerability (CVSS 7.8, Autodesk 3ds Max)
- [CVE-2025-11795](https://cve.now/CVE-2025-11795.md): JPG File Parsing Out-of-Bounds Write Vulnerability (CVSS 7.8, Autodesk 3ds Max)
- [CVE-2025-64293](https://cve.now/CVE-2025-64293.md): WordPress 0 Day Analytics plugin \<= 4.0.0 - SQL Injection vulnerability (CVSS 7.6, Golemiq 0 Day Analytics)
- [CVE-2025-11367](https://cve.now/CVE-2025-11367.md): N-central windows software probe Remote Code Execution (CVSS 10.0, N-able N-central)
- [CVE-2025-11366](https://cve.now/CVE-2025-11366.md): N-central Authentication bypass via path traversal (CVSS 9.4, N-able N-central)
- [CVE-2025-11700](https://cve.now/CVE-2025-11700.md): N-central Multiple XXE Injection Vulnerabilities (CVSS 8.4, N-able N-central)
- [CVE-2025-9316](https://cve.now/CVE-2025-9316.md): N-central unauthenticated sessionID generation (CVSS 6.9, N-able N-central)
- [CVE-2025-11567](https://cve.now/CVE-2025-11567.md): CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target installation folder is n (CVSS 7.3, Schneider Electric PowerChute™ Serial Shutdown)
- [CVE-2025-11566](https://cve.now/CVE-2025-11566.md): CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to (CVSS 6.9, Schneider Electric PowerChute™ Serial Shutdown)
- [CVE-2025-11565](https://cve.now/CVE-2025-11565.md): CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause elevated system (CVSS 7.3, Schneider Electric PowerChute™ Serial Shutdown)
- [CVE-2025-62876](https://cve.now/CVE-2025-62876.md): A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affe (CVSS 5.3, openSUSE)
- [CVE-2025-12998](https://cve.now/CVE-2025-12998.md): Broken Authentication in extension “Modules” (modules) (CVSS 8.2, TYPO3 Extension "Modules" · codingms/modules)
- [CVE-2025-11994](https://cve.now/CVE-2025-11994.md): Easy Email Subscription \<= 1.3 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, yudiz Easy Email Subscription)
- [CVE-2025-11454](https://cve.now/CVE-2025-11454.md): Specific Content For Mobile – Customize the mobile version without redirections \<= 0.5.5 - Authenticated (Contributor+) SQL Injection (CVSS 6.5, giuse Specific Content For Mobile – Customize the mobile)
- [CVE-2025-40177](https://cve.now/CVE-2025-40177.md): accel/qaic: Fix bootlog initialization ordering (no CVSS, Linux)
- [CVE-2025-40176](https://cve.now/CVE-2025-40176.md): tls: wait for pending async decryptions if tls\_strp\_msg\_hold fails (CVSS 9.8, Linux)
- [CVE-2025-40175](https://cve.now/CVE-2025-40175.md): idpf: cleanup remaining SKBs in PTP flows (no CVSS, Linux)
- [CVE-2025-40174](https://cve.now/CVE-2025-40174.md): x86/mm: Fix SMP ordering in switch\_mm\_irqs\_off() (CVSS 7.8, Linux)
- [CVE-2025-40173](https://cve.now/CVE-2025-40173.md): net/ip6\_tunnel: Prevent perpetual tunnel growth (CVSS 7.8, Linux)
- [CVE-2025-40172](https://cve.now/CVE-2025-40172.md): accel/qaic: Treat remaining == 0 as error in find\_and\_map\_user\_pages() (CVSS 7.8, Linux)
- [CVE-2025-40171](https://cve.now/CVE-2025-40171.md): nvmet-fc: move lsop put work to nvmet\_fc\_ls\_req\_op (CVSS 7.5, Linux)
- [CVE-2025-40170](https://cve.now/CVE-2025-40170.md): net: use dst\_dev\_rcu() in sk\_setup\_caps() (CVSS 7.8, Linux)
- [CVE-2025-40169](https://cve.now/CVE-2025-40169.md): bpf: Reject negative offsets for ALU ops (CVSS 7.8, Linux)
- [CVE-2025-40168](https://cve.now/CVE-2025-40168.md): smc: Use \_\_sk\_dst\_get() and dst\_dev\_rcu() in smc\_clc\_prfx\_match(). (CVSS 8.1, Linux)
- [CVE-2025-40167](https://cve.now/CVE-2025-40167.md): ext4: detect invalid INLINE\_DATA + EXTENTS flag combination (CVSS 7.8, Linux)
- [CVE-2025-40166](https://cve.now/CVE-2025-40166.md): drm/xe/guc: Check GuC running state before deregistering exec queue (CVSS 7.8, Linux)
- [CVE-2025-40165](https://cve.now/CVE-2025-40165.md): media: nxp: imx8-isi: m2m: Fix streaming cleanup on release (CVSS 7.8, Linux)
- [CVE-2025-40164](https://cve.now/CVE-2025-40164.md): usbnet: Fix using smp\_processor\_id() in preemptible code warnings (no CVSS, Linux)
- [CVE-2025-40163](https://cve.now/CVE-2025-40163.md): sched/deadline: Stop dl\_server before CPU goes offline (no CVSS, Linux)
- [CVE-2025-40162](https://cve.now/CVE-2025-40162.md): ASoC: amd/sdw\_utils: avoid NULL deref when devm\_kasprintf() fails (no CVSS, Linux)
- [CVE-2025-40161](https://cve.now/CVE-2025-40161.md): mailbox: zynqmp-ipi: Fix SGI cleanup on unbind (no CVSS, Linux)
- [CVE-2025-40160](https://cve.now/CVE-2025-40160.md): xen/events: Return -EEXIST for bound VIRQs (no CVSS, Linux)
- [CVE-2025-40159](https://cve.now/CVE-2025-40159.md): xsk: Harden userspace-supplied xdp\_desc validation (CVSS 7.8, Linux)
- [CVE-2025-40158](https://cve.now/CVE-2025-40158.md): ipv6: use RCU in ip6\_output() (CVSS 8.1, Linux)
- [CVE-2025-40157](https://cve.now/CVE-2025-40157.md): EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller (no CVSS, Linux)
- [CVE-2025-40156](https://cve.now/CVE-2025-40156.md): PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() (no CVSS, Linux)
- [CVE-2025-40155](https://cve.now/CVE-2025-40155.md): iommu/vt-d: debugfs: Fix legacy mode page table dump logic (CVSS 7.3, Linux)
- [CVE-2025-40154](https://cve.now/CVE-2025-40154.md): ASoC: Intel: bytcr\_rt5640: Fix invalid quirk input mapping (no CVSS, Linux)
- [CVE-2025-40153](https://cve.now/CVE-2025-40153.md): mm: hugetlb: avoid soft lockup when mprotect to large memory area (no CVSS, Linux)
- [CVE-2025-40152](https://cve.now/CVE-2025-40152.md): drm/msm: Fix bootup splat with separate\_gpu\_drm modparam (no CVSS, Linux)
- [CVE-2025-40151](https://cve.now/CVE-2025-40151.md): LoongArch: BPF: No support of struct argument in trampoline programs (CVSS 7.8, Linux)
- [CVE-2025-40150](https://cve.now/CVE-2025-40150.md): f2fs: fix to avoid migrating empty section (no CVSS, Linux)
- [CVE-2025-40149](https://cve.now/CVE-2025-40149.md): tls: Use \_\_sk\_dst\_get() and dst\_dev\_rcu() in get\_netdev\_for\_sock(). (CVSS 7.8, Linux)
- [CVE-2025-40148](https://cve.now/CVE-2025-40148.md): drm/amd/display: Add NULL pointer checks in dc\_stream cursor attribute functions (no CVSS, Linux)
- [CVE-2025-40147](https://cve.now/CVE-2025-40147.md): blk-throttle: fix access race during throttle policy activation (no CVSS, Linux)
- [CVE-2025-40146](https://cve.now/CVE-2025-40146.md): blk-mq: fix potential deadlock while nr\_requests grown (no CVSS, Linux)
- [CVE-2025-40145](https://cve.now/CVE-2025-40145.md): PCI/pwrctrl: Fix double cleanup on devm\_add\_action\_or\_reset() failure (no CVSS, Linux)
- [CVE-2025-40143](https://cve.now/CVE-2025-40143.md): bpf: dont report verifier bug for missing bpf\_scc\_visit on speculative path (no CVSS, Linux)
- [CVE-2025-40142](https://cve.now/CVE-2025-40142.md): ALSA: pcm: Disable bottom softirqs as part of spin\_lock\_irq() on PREEMPT\_RT (no CVSS, Linux)
- [CVE-2025-40141](https://cve.now/CVE-2025-40141.md): Bluetooth: ISO: Fix possible UAF on iso\_conn\_free (CVSS 8.0, Linux)
- [CVE-2025-40140](https://cve.now/CVE-2025-40140.md): net: usb: Remove disruptive netif\_wake\_queue in rtl8150\_set\_multicast (CVSS 8.8, Linux)
- [CVE-2025-40139](https://cve.now/CVE-2025-40139.md): smc: Use \_\_sk\_dst\_get() and dst\_dev\_rcu() in in smc\_clc\_prfx\_set(). (CVSS 7.8, Linux)
- [CVE-2025-40138](https://cve.now/CVE-2025-40138.md): f2fs: fix to avoid NULL pointer dereference in f2fs\_check\_quota\_consistency() (no CVSS, Linux)
- [CVE-2025-40137](https://cve.now/CVE-2025-40137.md): f2fs: fix to truncate first page in error path of f2fs\_truncate() (no CVSS, Linux)
- [CVE-2025-40136](https://cve.now/CVE-2025-40136.md): crypto: hisilicon/qm - request reserved interrupt for virtual function (no CVSS, Linux)
- [CVE-2025-40135](https://cve.now/CVE-2025-40135.md): ipv6: use RCU in ip6\_xmit() (CVSS 8.1, Linux)
- [CVE-2025-40134](https://cve.now/CVE-2025-40134.md): dm: fix NULL pointer dereference in \_\_dm\_suspend() (no CVSS, Linux)
- [CVE-2025-40133](https://cve.now/CVE-2025-40133.md): mptcp: Use \_\_sk\_dst\_get() and dst\_dev\_rcu() in mptcp\_active\_enable(). (CVSS 8.1, Linux)
- [CVE-2025-40132](https://cve.now/CVE-2025-40132.md): ASoC: Intel: sof\_sdw: Prevent jump to NULL add\_sidecar callback (no CVSS, Linux)
- [CVE-2025-40131](https://cve.now/CVE-2025-40131.md): wifi: ath12k: Fix peer lookup in ath12k\_dp\_mon\_rx\_deliver\_msdu() (no CVSS, Linux)
- [CVE-2025-40130](https://cve.now/CVE-2025-40130.md): scsi: ufs: core: Fix data race in CPU latency PM QoS request handling (no CVSS, Linux)
- [CVE-2025-40129](https://cve.now/CVE-2025-40129.md): sunrpc: fix null pointer dereference on zero-length checksum (CVSS 7.5, Linux)
- [CVE-2025-40127](https://cve.now/CVE-2025-40127.md): hwrng: ks-sa - fix division by zero in ks\_sa\_rng\_init (no CVSS, Linux)
- [CVE-2025-40126](https://cve.now/CVE-2025-40126.md): sparc: fix accurate exception reporting in copy\_{from\_to}\_user for UltraSPARC (no CVSS, Linux)
- [CVE-2025-40125](https://cve.now/CVE-2025-40125.md): blk-mq: check kobject state\_in\_sysfs before deleting in blk\_mq\_unregister\_hctx (no CVSS, Linux)
- [CVE-2025-40124](https://cve.now/CVE-2025-40124.md): sparc: fix accurate exception reporting in copy\_{from\_to}\_user for UltraSPARC III (CVSS 7.8, Linux)
- [CVE-2025-40123](https://cve.now/CVE-2025-40123.md): bpf: Enforce expected\_attach\_type for tailcall compatibility (CVSS 7.8, Linux)
- [CVE-2025-40122](https://cve.now/CVE-2025-40122.md): perf/x86/intel: Fix IA32\_PMC\_x\_CFG\_B MSRs access error (no CVSS, Linux)
- [CVE-2025-40121](https://cve.now/CVE-2025-40121.md): ASoC: Intel: bytcr\_rt5651: Fix invalid quirk input mapping (no CVSS, Linux)
- [CVE-2025-40120](https://cve.now/CVE-2025-40120.md): net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock (no CVSS, Linux)
- [CVE-2025-40119](https://cve.now/CVE-2025-40119.md): ext4: fix potential null deref in ext4\_mb\_init() (no CVSS, Linux)
- [CVE-2025-40118](https://cve.now/CVE-2025-40118.md): scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod (CVSS 7.8, Linux)
- [CVE-2025-40117](https://cve.now/CVE-2025-40117.md): misc: pci\_endpoint\_test: Fix array underflow in pci\_endpoint\_test\_ioctl() (CVSS 7.8, Linux)
- [CVE-2025-40116](https://cve.now/CVE-2025-40116.md): usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup (no CVSS, Linux)
- [CVE-2025-40115](https://cve.now/CVE-2025-40115.md): scsi: mpt3sas: Fix crash in transport port remove by using ioc\_info() (no CVSS, Linux)
- [CVE-2025-40113](https://cve.now/CVE-2025-40113.md): remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E (no CVSS, Linux)
- [CVE-2025-40112](https://cve.now/CVE-2025-40112.md): sparc: fix accurate exception reporting in copy\_{from\_to}\_user for Niagara (CVSS 7.8, Linux)
- [CVE-2025-37734](https://cve.now/CVE-2025-37734.md): Kibana Origin Validation Error (CVSS 4.3, Elastic Kibana)
- [CVE-2025-12382](https://cve.now/CVE-2025-12382.md): Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzer (CVSS 7.3, AlgoSec Firewall Analyzer)
- [CVE-2025-61623](https://cve.now/CVE-2025-61623.md): Apache OFBiz: Reflected Cross-site Scripting (CVSS 6.5, Apache Software Foundation Apache OFBiz)
- [CVE-2025-59118](https://cve.now/CVE-2025-59118.md): Apache OFBiz: Critical Remote Command Execution via Unrestricted File Upload (CVSS 7.3, Apache Software Foundation Apache OFBiz)
- [CVE-2025-11962](https://cve.now/CVE-2025-11962.md): Stored XSS in DivvyDrive Information Technologies' Digital Corporate Warehouse (CVSS 7.3, DivvyDrive Information Technologies Digital Corporate Wareh…)
- [CVE-2025-64407](https://cve.now/CVE-2025-64407.md): Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables (CVSS 5.3, Apache Software Foundation Apache OpenOffice)
- [CVE-2025-64406](https://cve.now/CVE-2025-64406.md): Apache OpenOffice: Possible memory corruption during CSV import (CVSS 4.3, Apache Software Foundation Apache OpenOffice)
- [CVE-2025-64405](https://cve.now/CVE-2025-64405.md): Apache OpenOffice: Remote documents loaded without prompt via DDE function (CVSS 7.5, Apache Software Foundation Apache OpenOffice)
- [CVE-2025-64404](https://cve.now/CVE-2025-64404.md): Apache OpenOffice: Remote documents loaded without prompt via background and bullet images (CVSS 7.5, Apache Software Foundation Apache OpenOffice)
- [CVE-2025-64403](https://cve.now/CVE-2025-64403.md): Apache OpenOffice: Remote documents loaded without prompt via "external data sources" in Calc (CVSS 8.1, Apache Software Foundation Apache OpenOffice)
- [CVE-2025-64402](https://cve.now/CVE-2025-64402.md): Apache OpenOffice: Remote documents loaded without prompt via OLE objects (CVSS 6.5, Apache Software Foundation Apache OpenOffice)
- [CVE-2025-64401](https://cve.now/CVE-2025-64401.md): Apache OpenOffice: Remote documents loaded without prompt via IFrame (CVSS 7.5, Apache Software Foundation Apache OpenOffice)
- [CVE-2025-12903](https://cve.now/CVE-2025-12903.md): Payment Plugins Braintree For WooCommerce \<= 3.2.78 - Missing Authorization to Payment Token Exposure and Transaction Fraud (CVSS 7.5, paymentplugins Payment Plugins Braintree For WooCommerce)
- [CVE-2025-12732](https://cve.now/CVE-2025-12732.md): WP Import – Ultimate CSV XML Importer for WordPress \<= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure (CVSS 4.3, smackcoders WP Ultimate CSV Importer – Import CSV, XML & Ex…)
- [CVE-2025-12872](https://cve.now/CVE-2025-12872.md): aEnrich｜eHRD - Stored Cross-Site Scripting (CVSS 5.1, aEnrich a+HRD · aEnrich a+HCM)
- [CVE-2025-12871](https://cve.now/CVE-2025-12871.md): aEnrich｜a+HRD - Authentication Abuse (CVSS 9.3, aEnrich a+HRD)
- [CVE-2025-12870](https://cve.now/CVE-2025-12870.md): aEnrich｜eHRD - Authentication Abuse (CVSS 9.3, aEnrich a+HRD)
- [CVE-2025-12869](https://cve.now/CVE-2025-12869.md): aEnrich｜eHRD - Stored Cross-Site Scripting (CVSS 4.8, aEnrich a+HRD)
- [CVE-2025-12018](https://cve.now/CVE-2025-12018.md): MembershipWorks \<= 6.14 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, sourcefound MembershipWorks – Membership, Events & Directory)
- [CVE-2025-12113](https://cve.now/CVE-2025-12113.md): Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images \<= 1.8.3 - Missing Authorization to Authenticated (Subscriber+) API Key Deletion (CVSS 4.3, webtoffee Alt Text Generator AI – Auto Generate & Bulk Upda…)
- [CVE-2025-12633](https://cve.now/CVE-2025-12633.md): Booking Calendar | Appointment Booking | Bookit \<= 2.5.0 - Missing Authorization to Unauthenticated Stripe Connection (CVSS 7.5, stellarwp Bookit — Booking & Appointment Calendar)
- [CVE-2025-11560](https://cve.now/CVE-2025-11560.md): Team Members Showcase \< 3.5.0 - Reflected XSS (CVSS 7.1, Team Members Showcase)
- [CVE-2025-12901](https://cve.now/CVE-2025-12901.md): Asgaros Forum \<= 3.2.1 - Cross-Site Request Forgery to Subscription Settings Update (CVSS 4.3, Asgaros Forum)
- [CVE-2025-12833](https://cve.now/CVE-2025-12833.md): GeoDirectory – WP Business Directory Plugin and Classified Listings Directory \<= 2.8.139 - Missing Authorization to Authenticated (Author+) Arbitrary Image Attachment (CVSS 4.3, paoltaia GeoDirectory – WP Business Directory Plugin and Cl…)
- [CVE-2025-12087](https://cve.now/CVE-2025-12087.md): Wishlist and Save for later for Woocommerce \<= 1.1.22 - Insecure Direct Object Reference to Authenticated (Subscriber+) Wishlist Item Deletion (CVSS 4.3, acowebs Wishlist and Save for later for Woocommerce)
- [CVE-2025-54983](https://cve.now/CVE-2025-54983.md): Health check port on ZCC allows tunnel bypass (CVSS 5.2, Zscaler Client Connector)
- [CVE-2025-40111](https://cve.now/CVE-2025-40111.md): drm/vmwgfx: Fix Use-after-free in validation (CVSS 7.8, Linux)
- [CVE-2025-40110](https://cve.now/CVE-2025-40110.md): drm/vmwgfx: Fix a null-ptr access in the cursor snooper (no CVSS, Linux)
- [CVE-2025-43205](https://cve.now/CVE-2025-43205.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 4.0, Apple iOS and iPadOS · Apple iPadOS +4)
- [CVE-2025-52331](https://cve.now/CVE-2025-52331.md): Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user infor (CVSS 6.1)
- [CVE-2025-56385](https://cve.now/CVE-2025-56385.md): A SQL injection vulnerability exists in the login functionality of WellSky Harmony version 4.1.0.2.83 within the 'xmHarmony.asp' endpoint. (CVSS 9.8)
- [CVE-2025-57310](https://cve.now/CVE-2025-57310.md): A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allo (CVSS 8.8)
- [CVE-2025-59491](https://cve.now/CVE-2025-59491.md): Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields. (CVSS 6.1)
- [CVE-2025-60645](https://cve.now/CVE-2025-60645.md): A Cross-Site Request Forgery (CSRF) in xxl-api v1.3.0 allows attackers to arbitrarily add users to the management module via a crafted GET r (CVSS 6.5)
- [CVE-2025-60646](https://cve.now/CVE-2025-60646.md): A stored cross-site scripting (XSS) in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbitrary web scripts or H (CVSS 6.1)
- [CVE-2025-63289](https://cve.now/CVE-2025-63289.md): Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryp (CVSS 9.1)
- [CVE-2025-63353](https://cve.now/CVE-2025-63353.md): A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be pre (CVSS 9.8)
- [CVE-2025-63396](https://cve.now/CVE-2025-63396.md): An issue was discovered in PyTorch v2.5 and v2.7.1. (CVSS 3.3, torch)
- [CVE-2025-63419](https://cve.now/CVE-2025-63419.md): Cross Site Scripting (XSS) vulnerability in CrushFTP 11.3.6\_48. (CVSS 6.1)
- [CVE-2025-63645](https://cve.now/CVE-2025-63645.md): A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the application's message system. (CVSS 5.4)
- [CVE-2025-63666](https://cve.now/CVE-2025-63666.md): Tenda AC15 v15.03.05.18\_multi) issues an authentication cookie that exposes the account password hash to the client and uses a short, low-en (CVSS 9.8)
- [CVE-2025-63667](https://cve.now/CVE-2025-63667.md): Incorrect access control in SIMICAM v1.16.41-20250725, KEVIEW v1.14.92-20241120, ASECAM v1.14.10-20240725 allows attackers to access sensiti (CVSS 7.5)
- [CVE-2025-63679](https://cve.now/CVE-2025-63679.md): free5gc v4.1.0 and before is vulnerable to Buffer Overflow. (CVSS 9.8)
- [CVE-2025-63811](https://cve.now/CVE-2025-63811.md): An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON We (CVSS 7.5, github.com/dvsekhvalnov/jose2go)
- [CVE-2025-63927](https://cve.now/CVE-2025-63927.md): A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). (CVSS 4.0)
- [CVE-2025-63929](https://cve.now/CVE-2025-63929.md): A null pointer dereference vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). (CVSS 7.5)
- [CVE-2025-64280](https://cve.now/CVE-2025-64280.md): A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit\_no field. (CVSS 9.8)
- [CVE-2025-64281](https://cve.now/CVE-2025-64281.md): An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin creden (CVSS 9.8)
- [CVE-2025-65001](https://cve.now/CVE-2025-65001.md): Fujitsu fbiosdrv.sys before 2.5.0.0 allows an attacker to potentially affect system confidentiality, integrity, and availability. (CVSS 8.2, Fujitsu fbiosdrv.sys)
- [CVE-2025-65002](https://cve.now/CVE-2025-65002.md): Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters. (CVSS 7.5, Fujitsu / Fsas Technologies iRMC)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-11-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.