CVEs published November 20, 2025
99 CVEs were published on November 20, 2025: 10 critical, 26 high.
- Published
- 99
- Critical
- 10
- High
- 26
- Medium
- 57
- Low
- 6
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 32
Most affected products
- Revive Adserver
- 13
- SOPlanning
- 8
- IBM Concert
- 5
- phppgadmin/phppgadmin
- 4
- LimeSurvey
- 3
- iCam365 P201 · iCam365 QC021
- 2
- Lite XL
- 2
- Narkom Communication and Software Technologies Trade Ltd. P…
- 2
- OSC ondemand
- 2
- SonicWall Email Security
- 2
Critical 10
- CVE-2025-49752Azure Bastion Elevation of Privilege VulnerabilityMicrosoft Azure Bastion Developer
- CVE-2025-59245Microsoft SharePoint Online Elevation of Privilege VulnerabilityMicrosoft SharePoint Online
- CVE-2025-10571ABB Ability Edgenius Authentication BypassABB Ability Edgenius
- CVE-2025-34320BASIS BBj < 25.00 Unauthenticated Arbitrary File Read RCEBASIS International BASIS BBj
- CVE-2025-12414Looker account compromise via punycode homograph attackGoogle Cloud Looker
- CVE-2025-52410Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint.
- CVE-2025-60738An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 - 2025_07_21 and before allows a remote atta
- CVE-2025-63685Quark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability.
- CVE-2025-63807An issue was discovered in weijiang1994 university-bbs (aka Blogin) in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 (2025-01-13).
- CVE-2025-63888The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability.
High 26
- CVE-2025-62459Microsoft Defender Portal Spoofing VulnerabilityMicrosoft 365 Defender Portal
- CVE-2025-64660GitHub Copilot and Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2025-62207Azure Monitor Elevation of Privilege VulnerabilityMicrosoft Azure Monitor Control Service
- CVE-2025-64655Dynamics OmniChannel SDK Storage Containers Elevation of Privilege VulnerabilityMicrosoft Dynamics OmniChannel SDK Storage Containers
- CVE-2025-36072IBM webMethods Integration DeserializationIBM webMethods Integration
- CVE-2025-13087Command Injection in Opto22 Groov REST APIOpto22 GRV-EPIC-PR1 · Opto22 GRV-EPIC-PR2 +3
- CVE-2025-62674Missing Authentication for RTSP in iCam CamerasiCam365 P201 · iCam365 QC021
- CVE-2025-64770Missing Authentication for ONVIF in iCam CamerasiCam365 P201 · iCam365 QC021
- CVE-2025-52668Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential iRevive Adserver
- CVE-2025-48986Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email addreRevive Adserver
- CVE-2025-52670Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users on the system to delete banners owned by otRevive Adserver
- CVE-2025-64428DataEase DB2 JNDI Vulnerabilitydataease
- CVE-2025-12121CVE-2025-12121Lite XL
- CVE-2025-12120CVE-2025-12120Lite XL
- CVE-2025-62730Privilege Escalation via Incorrect Authorization in SOPlanningSOPlanning
- CVE-2025-62294Predictable Generation of Password Recovery TokenSOPlanning
- CVE-2025-0645Arbitrary File Upload in Narkom Communication Technologies' Pyxis SignageNarkom Communication and Software Technologies Trade Ltd. P…
- CVE-2025-0643XSS in Narkom Communication Technologies' Pyxis SignageNarkom Communication and Software Technologies Trade Ltd. P…
- CVE-2025-40601A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of ServicSonicWall SonicOS
- CVE-2025-11676UPnP DOS in TL-WR940N V6TP-Link System TL-WR940N
- CVE-2025-13446Tenda AC21 SetSysTimeCfg stack-based overflowTenda AC21
- CVE-2025-13445Tenda AC21 SetIpMacBind stack-based overflowTenda AC21
- CVE-2025-13433Muse Group MuseHub Windows Service Muse.Updater.exe unquoted search pathMuse Group MuseHub
- CVE-2025-25613FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless.
- CVE-2025-61138Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory.
- CVE-2025-63889The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file
Medium, low and unrated 63
- CVE-2025-13484Campcodes Complete Online Beauty Parlor Management System customer-list.php cross site scriptingCampcodes Complete Online Beauty Parlor Management System
- CVE-2025-36153IBM Concert Cross-Site ScriptingIBM Concert
- CVE-2025-36158IBM Concert Information DisclosureIBM Concert
- CVE-2025-36159IBM Concert Improper Log NeutralizationIBM Concert
- CVE-2025-36160IBM Concert Information DisclosureIBM Concert
- CVE-2025-35029Medical Informatics Engineering Enterprise Health stored cross site scripting via Demographic Information pageMedical Informatics Engineering Enterprise Health
- CVE-2025-48987Improper Neutralization of Input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a potential reflected XSS attack.Revive Adserver
- CVE-2025-55123Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attRevive Adserver
- CVE-2025-52671Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to aRevive Adserver
- CVE-2025-52666Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administratorRevive Adserver
- CVE-2025-52669Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to havRevive Adserver
- CVE-2025-55124Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script.Revive Adserver
- CVE-2025-52667Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XSS attack to be possibRevive Adserver
- CVE-2025-55126HackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability involving the navigation box at the top of advertRevive Adserver
- CVE-2025-55127HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new uRevive Adserver
- CVE-2025-55128HackerOne community member Dang Hung Vi (vidang04) has reported an uncontrolled resource consumption vulnerability in the “userlog-index.phpRevive Adserver
- CVE-2025-64524CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code ExecutionOpenPrinting cups-filters
- CVE-2025-64185Open OnDemand RPM packages create world writable locationsOSC ondemand
- CVE-2025-62724Open OnDemand allowlist bypass using symlinks in directory downloads (TOCTOU)OSC ondemand
- CVE-2025-62709ClipBucket v5 is vulnerable to password reset link manipulationMacWarrior clipbucket-v5
- CVE-2025-13437Arbitrary node_modules Directory Deletion in Google zxGoogle zx · zx
- CVE-2025-62875Local DoS in OpenSMTPD via UNIX domain socket smtpd.sockopenSUSE Tumbleweed
- CVE-2025-62731Stored XSS in SOPlanningSOPlanning
- CVE-2025-62729Stored XSS in SOPlanningSOPlanning
- CVE-2025-62297Stored XSS in SOPlanningSOPlanning
- CVE-2025-62296Stored XSS in SOPlanningSOPlanning
- CVE-2025-62295Stored XSS in SOPlanningSOPlanning
- CVE-2025-62293Broken Access Control in SOPlanningSOPlanning
- CVE-2025-13425Denial of Service in OSV-SCALIBRGoogle OSV-SCALIBR · github.com/google/osv-scalibr
- CVE-2025-36161IBM Concert Software Information DisclosureIBM Concert
- CVE-2025-13469Public Knowledge Project omp/ojs Payment Instructions Setting paymentForm.tpl cross site scriptingPublic Knowledge Project omp · Public Knowledge Project ojs
- CVE-2025-13468SourceCodester Alumni Management System Delete admin_class.php delete_event authorizationSourceCodester Alumni Management System
- CVE-2025-41076Multiple vulnerabilities in LimesurveyLimeSurvey
- CVE-2025-41075Multiple vulnerabilities in LimesurveyLimeSurvey
- CVE-2025-41074Multiple vulnerabilities in LimesurveyLimeSurvey
- CVE-2025-40605A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injSonicWall Email Security
- CVE-2025-40604Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifySonicWall Email Security
- CVE-2025-62346HCL Glovius Cloud is susceptible to a Cross-Site Request Forgery (CSRF) vulnerabilityHCL Software Glovius Cloud
- CVE-2025-64984Kaspersky has fixed a security issue in Kaspersky Endpoint Security for Linux (any version with anti-virus databases prior to 18.11.2025), KKaspersky Endpoint Security · Kaspersky Industrial CyberSec…
- CVE-2025-5092Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Librarylightgalleryteam LightGallery WP · tplugins TP WooCommer… +6
- CVE-2025-12502Attention Bar <= 0.7.2.1 - Admin+ SQLiattention-bar
- CVE-2025-12778Ultimate Member Widgets for Elementor <= 2.3 - Missing Authorization to Unauthenticated Information Exposureuserelements Ultimate Member Widgets for Elementor – WordPr…
- CVE-2025-13451SourceCodester Online Shop Project action.php sql injectionSourceCodester Online Shop Project
- CVE-2025-13450SourceCodester Online Shop Project register.php cross site scriptingSourceCodester Online Shop Project
- CVE-2025-13449code-projects Online Shop Project login.php sql injectioncode-projects Online Shop Project
- CVE-2025-13443macrozheng mall delete access controlmacrozheng mall
- CVE-2025-13442UTT 进取 750W formPdbUpConfig system command injectionUTT 进取
- CVE-2025-13435Dreampie Resty HttpClient HttpClient.java request path traversalDreampie Resty · cn.dreampie:resty
- CVE-2025-13434jameschz Hush Framework HTTP Host Header Util.php http headers for scripting syntaxjameschz Hush Framework
- CVE-2025-13424Campcodes Supplier Management System add_product.php sql injectionCampcodes Supplier Management System
- CVE-2025-60737Cross Site Scripting vulnerability in Ilevia EVE X1 Server Firmware Version<= 4.7.18.0.eden:Logic Version<=6.00 - 2025_07_21 allows a remote
- CVE-2025-60794Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/use@perfood/couch-auth
- CVE-2025-60796phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting (XSS) vulnerabilities across various components.phppgadmin/phppgadmin
- CVE-2025-60797phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118.phppgadmin/phppgadmin
- CVE-2025-60798phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396.phppgadmin/phppgadmin
- CVE-2025-60799phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76.phppgadmin/phppgadmin
- CVE-2025-63848Stored cross site scripting (xss) vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE
- CVE-2025-64027Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerability in the CSV Import workflow.snipe/snipe-it
- CVE-2025-65220Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter.
- CVE-2025-65221Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList.
- CVE-2025-65222Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg.
- CVE-2025-65223Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo.
- CVE-2025-65226Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo.