CVEs published November 15, 2025
26 CVEs were published on November 15, 2025: 0 critical, 3 high.
- Published
- 26
- Critical
- 0
- High
- 3
- Medium
- 19
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- GitLab
- 8
- code-projects Simple Cafe Ordering System
- 3
- D-Link DIR-816L
- 3
- bestfeng oa_git_free
- 1
- code-projects Email Logging Interface
- 1
- contest-gallery Contest Gallery – Upload & Vote Photos, Med…
- 1
- DouPHP
- 1
- FantasticLBP Hotels Server
- 1
- Intelbras UnniTI
- 1
- itsourcecode Inventory Management System
- 1
High 3
Medium, low and unrated 23
- CVE-2025-13221Intelbras UnniTI usuarios.xml credentials storageIntelbras UnniTI
- CVE-2025-13210itsourcecode Inventory Management System index.php sql injectionitsourcecode Inventory Management System
- CVE-2025-13209bestfeng oa_git_free WorkflowPredefineController.java updateWriteBack xml external entity referencebestfeng oa_git_free
- CVE-2025-13208FantasticLBP Hotels Server hotelList.php sql injectionFantasticLBP Hotels Server
- CVE-2025-13203code-projects Simple Cafe Ordering System addmem.php sql injectioncode-projects Simple Cafe Ordering System
- CVE-2025-13202code-projects Simple Cafe Ordering System add_to_cart cross site scriptingcode-projects Simple Cafe Ordering System
- CVE-2025-13201code-projects Simple Cafe Ordering System login.php sql injectioncode-projects Simple Cafe Ordering System
- CVE-2025-13200SourceCodester Farm Management System exposure of information through directory listingSourceCodester Farm Management System
- CVE-2025-13199code-projects Email Logging Interface signup.cpp path traversalcode-projects Email Logging Interface
- CVE-2025-13198DouPHP file.class.php unrestricted uploadDouPHP
- CVE-2025-12983Memory Allocation with Excessive Size Value in GitLabGitLab
- CVE-2025-2615Insertion of Sensitive Information Into Sent Data in GitLabGitLab
- CVE-2025-6945Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLabGitLab
- CVE-2025-6171Missing Authorization in GitLabGitLab
- CVE-2025-7000Insertion of Sensitive Information Into Sent Data in GitLabGitLab
- CVE-2025-7736Incorrect Authorization in GitLabGitLab
- CVE-2025-11865Incorrect Authorization in GitLabGitLab
- CVE-2025-11990Improper Handling of URL Encoding (Hex Encoding) in GitLabGitLab
- CVE-2025-12849Contest Gallery <= 28.0.2 - Missing Authorizationcontest-gallery Contest Gallery – Upload & Vote Photos, Med…
- CVE-2025-12494Image Gallery – Photo Grid & Video Gallery <= 2.12.28 - Improper Authorization to Authenticated (Author+) Arbitrary Image File Movewpchill Modula Image Gallery – Photo Grid & Video Gallery
- CVE-2025-8994WP Project Manager <= 2.6.26 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator'wedevs Project Manager – AI Powered Project Management, Tas…
- CVE-2025-12847All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.8.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Deletionsmub All in One SEO – Powerful SEO Plugin to Boost SEO Rank…
- CVE-2025-12182Qi Blocks <= 1.4.3 - Missing Authorization to Arbitrary Attachment Resizeqodeinteractive Qi Blocks