# CVEs published 2025-11-20

99 CVEs were published on November 20, 2025: 10 critical, 26 high. Days are UTC.

- [CVE-2025-13484](https://cve.now/CVE-2025-13484.md): Campcodes Complete Online Beauty Parlor Management System customer-list.php cross site scripting (CVSS 4.8, Campcodes Complete Online Beauty Parlor Management System)
- [CVE-2025-62459](https://cve.now/CVE-2025-62459.md): Microsoft Defender Portal Spoofing Vulnerability (CVSS 8.3, Microsoft 365 Defender Portal)
- [CVE-2025-64660](https://cve.now/CVE-2025-64660.md): GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Visual Studio Code)
- [CVE-2025-62207](https://cve.now/CVE-2025-62207.md): Azure Monitor Elevation of Privilege Vulnerability (CVSS 8.6, Microsoft Azure Monitor Control Service)
- [CVE-2025-49752](https://cve.now/CVE-2025-49752.md): Azure Bastion Elevation of Privilege Vulnerability (CVSS 10.0, Microsoft Azure Bastion Developer)
- [CVE-2025-59245](https://cve.now/CVE-2025-59245.md): Microsoft SharePoint Online Elevation of Privilege Vulnerability (CVSS 9.8, Microsoft SharePoint Online)
- [CVE-2025-64655](https://cve.now/CVE-2025-64655.md): Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Dynamics OmniChannel SDK Storage Containers)
- [CVE-2025-36072](https://cve.now/CVE-2025-36072.md): IBM webMethods Integration Deserialization (CVSS 8.8, IBM webMethods Integration)
- [CVE-2025-13087](https://cve.now/CVE-2025-13087.md): Command Injection in Opto22 Groov REST API (CVSS 7.5, Opto22 GRV-EPIC-PR1 · Opto22 GRV-EPIC-PR2 +3)
- [CVE-2025-36153](https://cve.now/CVE-2025-36153.md): IBM Concert Cross-Site Scripting (CVSS 6.1, IBM Concert)
- [CVE-2025-36158](https://cve.now/CVE-2025-36158.md): IBM Concert Information Disclosure (CVSS 5.1, IBM Concert)
- [CVE-2025-36159](https://cve.now/CVE-2025-36159.md): IBM Concert Improper Log Neutralization (CVSS 6.2, IBM Concert)
- [CVE-2025-36160](https://cve.now/CVE-2025-36160.md): IBM Concert Information Disclosure (CVSS 5.3, IBM Concert)
- [CVE-2025-62674](https://cve.now/CVE-2025-62674.md): Missing Authentication for RTSP in iCam Cameras (CVSS 7.0, iCam365 P201 · iCam365 QC021)
- [CVE-2025-64770](https://cve.now/CVE-2025-64770.md): Missing Authentication for ONVIF in iCam Cameras (CVSS 7.0, iCam365 P201 · iCam365 QC021)
- [CVE-2025-35029](https://cve.now/CVE-2025-35029.md): Medical Informatics Engineering Enterprise Health stored cross site scripting via Demographic Information page (CVSS 3.5, Medical Informatics Engineering Enterprise Health)
- [CVE-2025-52668](https://cve.now/CVE-2025-52668.md): Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential i (CVSS 8.7, Revive Adserver)
- [CVE-2025-48986](https://cve.now/CVE-2025-48986.md): Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email addre (CVSS 8.8, Revive Adserver)
- [CVE-2025-48987](https://cve.now/CVE-2025-48987.md): Improper Neutralization of Input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a potential reflected XSS attack. (CVSS 6.3, Revive Adserver)
- [CVE-2025-55123](https://cve.now/CVE-2025-55123.md): Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS att (CVSS 3.5, Revive Adserver)
- [CVE-2025-52671](https://cve.now/CVE-2025-52671.md): Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to a (CVSS 4.3, Revive Adserver)
- [CVE-2025-52666](https://cve.now/CVE-2025-52666.md): Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administrator (CVSS 2.7, Revive Adserver)
- [CVE-2025-52669](https://cve.now/CVE-2025-52669.md): Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to hav (CVSS 4.3, Revive Adserver)
- [CVE-2025-55124](https://cve.now/CVE-2025-55124.md): Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script. (CVSS 6.1, Revive Adserver)
- [CVE-2025-52670](https://cve.now/CVE-2025-52670.md): Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users on the system to delete banners owned by ot (CVSS 7.1, Revive Adserver)
- [CVE-2025-52667](https://cve.now/CVE-2025-52667.md): Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XSS attack to be possib (CVSS 3.5, Revive Adserver)
- [CVE-2025-55126](https://cve.now/CVE-2025-55126.md): HackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability involving the navigation box at the top of advert (CVSS 6.5, Revive Adserver)
- [CVE-2025-55127](https://cve.now/CVE-2025-55127.md): HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new u (CVSS 5.4, Revive Adserver)
- [CVE-2025-55128](https://cve.now/CVE-2025-55128.md): HackerOne community member Dang Hung Vi (vidang04) has reported an uncontrolled resource consumption vulnerability in the “userlog-index.php (CVSS 6.5, Revive Adserver)
- [CVE-2025-10571](https://cve.now/CVE-2025-10571.md): ABB Ability Edgenius Authentication Bypass (CVSS 9.4, ABB Ability Edgenius)
- [CVE-2025-64524](https://cve.now/CVE-2025-64524.md): CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution (CVSS 3.3, OpenPrinting cups-filters)
- [CVE-2025-64428](https://cve.now/CVE-2025-64428.md): DataEase DB2 JNDI Vulnerability (CVSS 8.9, dataease)
- [CVE-2025-64185](https://cve.now/CVE-2025-64185.md): Open OnDemand RPM packages create world writable locations (CVSS 6.9, OSC ondemand)
- [CVE-2025-62724](https://cve.now/CVE-2025-62724.md): Open OnDemand allowlist bypass using symlinks in directory downloads (TOCTOU) (CVSS 4.3, OSC ondemand)
- [CVE-2025-62709](https://cve.now/CVE-2025-62709.md): ClipBucket v5 is vulnerable to password reset link manipulation (CVSS 6.8, MacWarrior clipbucket-v5)
- [CVE-2025-12121](https://cve.now/CVE-2025-12121.md): CVE-2025-12121 (CVSS 7.3, Lite XL)
- [CVE-2025-12120](https://cve.now/CVE-2025-12120.md): CVE-2025-12120 (CVSS 7.3, Lite XL)
- [CVE-2025-13437](https://cve.now/CVE-2025-13437.md): Arbitrary node\_modules Directory Deletion in Google zx (CVSS 5.6, Google zx · zx)
- [CVE-2025-62875](https://cve.now/CVE-2025-62875.md): Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock (CVSS 6.9, openSUSE Tumbleweed)
- [CVE-2025-62731](https://cve.now/CVE-2025-62731.md): Stored XSS in SOPlanning (CVSS 5.1, SOPlanning)
- [CVE-2025-62730](https://cve.now/CVE-2025-62730.md): Privilege Escalation via Incorrect Authorization in SOPlanning (CVSS 8.7, SOPlanning)
- [CVE-2025-62729](https://cve.now/CVE-2025-62729.md): Stored XSS in SOPlanning (CVSS 5.1, SOPlanning)
- [CVE-2025-62297](https://cve.now/CVE-2025-62297.md): Stored XSS in SOPlanning (CVSS 5.1, SOPlanning)
- [CVE-2025-62296](https://cve.now/CVE-2025-62296.md): Stored XSS in SOPlanning (CVSS 5.1, SOPlanning)
- [CVE-2025-62295](https://cve.now/CVE-2025-62295.md): Stored XSS in SOPlanning (CVSS 5.1, SOPlanning)
- [CVE-2025-62294](https://cve.now/CVE-2025-62294.md): Predictable Generation of Password Recovery Token (CVSS 8.7, SOPlanning)
- [CVE-2025-62293](https://cve.now/CVE-2025-62293.md): Broken Access Control in SOPlanning (CVSS 5.3, SOPlanning)
- [CVE-2025-34320](https://cve.now/CVE-2025-34320.md): BASIS BBj \< 25.00 Unauthenticated Arbitrary File Read RCE (CVSS 9.3, BASIS International BASIS BBj)
- [CVE-2025-13425](https://cve.now/CVE-2025-13425.md): Denial of Service in OSV-SCALIBR (CVSS 1.9, Google OSV-SCALIBR · github.com/google/osv-scalibr)
- [CVE-2025-36161](https://cve.now/CVE-2025-36161.md): IBM Concert Software Information Disclosure (CVSS 5.9, IBM Concert)
- [CVE-2025-0645](https://cve.now/CVE-2025-0645.md): Arbitrary File Upload in Narkom Communication Technologies' Pyxis Signage (CVSS 7.2, Narkom Communication and Software Technologies Trade Ltd. P…)
- [CVE-2025-13469](https://cve.now/CVE-2025-13469.md): Public Knowledge Project omp/ojs Payment Instructions Setting paymentForm.tpl cross site scripting (CVSS 4.8, Public Knowledge Project omp · Public Knowledge Project ojs)
- [CVE-2025-13468](https://cve.now/CVE-2025-13468.md): SourceCodester Alumni Management System Delete admin\_class.php delete\_event authorization (CVSS 5.3, SourceCodester Alumni Management System)
- [CVE-2025-0643](https://cve.now/CVE-2025-0643.md): XSS in Narkom Communication Technologies' Pyxis Signage (CVSS 7.2, Narkom Communication and Software Technologies Trade Ltd. P…)
- [CVE-2025-41076](https://cve.now/CVE-2025-41076.md): Multiple vulnerabilities in Limesurvey (CVSS 6.9, LimeSurvey)
- [CVE-2025-41075](https://cve.now/CVE-2025-41075.md): Multiple vulnerabilities in Limesurvey (CVSS 6.9, LimeSurvey)
- [CVE-2025-41074](https://cve.now/CVE-2025-41074.md): Multiple vulnerabilities in Limesurvey (CVSS 6.9, LimeSurvey)
- [CVE-2025-40601](https://cve.now/CVE-2025-40601.md): A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Servic (CVSS 7.5, SonicWall SonicOS)
- [CVE-2025-40605](https://cve.now/CVE-2025-40605.md): A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by inj (CVSS 5.3, SonicWall Email Security)
- [CVE-2025-40604](https://cve.now/CVE-2025-40604.md): Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verify (CVSS 6.5, SonicWall Email Security)
- [CVE-2025-12414](https://cve.now/CVE-2025-12414.md): Looker account compromise via punycode homograph attack (CVSS 9.2, Google Cloud Looker)
- [CVE-2025-11676](https://cve.now/CVE-2025-11676.md): UPnP DOS in TL-WR940N V6 (CVSS 7.1, TP-Link System TL-WR940N)
- [CVE-2025-62346](https://cve.now/CVE-2025-62346.md): HCL Glovius Cloud is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability (CVSS 6.8, HCL Software Glovius Cloud)
- [CVE-2025-64984](https://cve.now/CVE-2025-64984.md): Kaspersky has fixed a security issue in Kaspersky Endpoint Security for Linux (any version with anti-virus databases prior to 18.11.2025), K (CVSS 5.1, Kaspersky Endpoint Security · Kaspersky Industrial CyberSec…)
- [CVE-2025-5092](https://cve.now/CVE-2025-5092.md): Multiple Plugins and Themes \<= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library (CVSS 6.4, lightgalleryteam LightGallery WP · tplugins TP WooCommer… +6)
- [CVE-2025-12502](https://cve.now/CVE-2025-12502.md): Attention Bar \<= 0.7.2.1 - Admin+ SQLi (CVSS 6.8, attention-bar)
- [CVE-2025-12778](https://cve.now/CVE-2025-12778.md): Ultimate Member Widgets for Elementor \<= 2.3 - Missing Authorization to Unauthenticated Information Exposure (CVSS 5.3, userelements Ultimate Member Widgets for Elementor – WordPr…)
- [CVE-2025-13451](https://cve.now/CVE-2025-13451.md): SourceCodester Online Shop Project action.php sql injection (CVSS 6.9, SourceCodester Online Shop Project)
- [CVE-2025-13450](https://cve.now/CVE-2025-13450.md): SourceCodester Online Shop Project register.php cross site scripting (CVSS 5.1, SourceCodester Online Shop Project)
- [CVE-2025-13449](https://cve.now/CVE-2025-13449.md): code-projects Online Shop Project login.php sql injection (CVSS 6.9, code-projects Online Shop Project)
- [CVE-2025-13446](https://cve.now/CVE-2025-13446.md): Tenda AC21 SetSysTimeCfg stack-based overflow (CVSS 8.7, Tenda AC21)
- [CVE-2025-13445](https://cve.now/CVE-2025-13445.md): Tenda AC21 SetIpMacBind stack-based overflow (CVSS 8.7, Tenda AC21)
- [CVE-2025-13443](https://cve.now/CVE-2025-13443.md): macrozheng mall delete access control (CVSS 5.3, macrozheng mall)
- [CVE-2025-13442](https://cve.now/CVE-2025-13442.md): UTT 进取 750W formPdbUpConfig system command injection (CVSS 6.9, UTT 进取)
- [CVE-2025-13435](https://cve.now/CVE-2025-13435.md): Dreampie Resty HttpClient HttpClient.java request path traversal (CVSS 6.3, Dreampie Resty · cn.dreampie:resty)
- [CVE-2025-13434](https://cve.now/CVE-2025-13434.md): jameschz Hush Framework HTTP Host Header Util.php http headers for scripting syntax (CVSS 6.9, jameschz Hush Framework)
- [CVE-2025-13433](https://cve.now/CVE-2025-13433.md): Muse Group MuseHub Windows Service Muse.Updater.exe unquoted search path (CVSS 7.3, Muse Group MuseHub)
- [CVE-2025-13424](https://cve.now/CVE-2025-13424.md): Campcodes Supplier Management System add\_product.php sql injection (CVSS 5.1, Campcodes Supplier Management System)
- [CVE-2025-25613](https://cve.now/CVE-2025-25613.md): FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. (CVSS 7.5)
- [CVE-2025-52410](https://cve.now/CVE-2025-52410.md): Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. (CVSS 9.8)
- [CVE-2025-60737](https://cve.now/CVE-2025-60737.md): Cross Site Scripting vulnerability in Ilevia EVE X1 Server Firmware Version\<= 4.7.18.0.eden:Logic Version\<=6.00 - 2025\_07\_21 allows a remote (CVSS 6.1)
- [CVE-2025-60738](https://cve.now/CVE-2025-60738.md): An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 - 2025\_07\_21 and before allows a remote atta (CVSS 9.8)
- [CVE-2025-60794](https://cve.now/CVE-2025-60794.md): Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/use (CVSS 6.5, @perfood/couch-auth)
- [CVE-2025-60796](https://cve.now/CVE-2025-60796.md): phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting (XSS) vulnerabilities across various components. (CVSS 6.1, phppgadmin/phppgadmin)
- [CVE-2025-60797](https://cve.now/CVE-2025-60797.md): phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. (CVSS 6.5, phppgadmin/phppgadmin)
- [CVE-2025-60798](https://cve.now/CVE-2025-60798.md): phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. (CVSS 6.5, phppgadmin/phppgadmin)
- [CVE-2025-60799](https://cve.now/CVE-2025-60799.md): phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. (CVSS 6.1, phppgadmin/phppgadmin)
- [CVE-2025-61138](https://cve.now/CVE-2025-61138.md): Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory. (CVSS 7.5)
- [CVE-2025-63685](https://cve.now/CVE-2025-63685.md): Quark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability. (CVSS 9.8)
- [CVE-2025-63807](https://cve.now/CVE-2025-63807.md): An issue was discovered in weijiang1994 university-bbs (aka Blogin) in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 (2025-01-13). (CVSS 9.8)
- [CVE-2025-63848](https://cve.now/CVE-2025-63848.md): Stored cross site scripting (xss) vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE (CVSS 6.1)
- [CVE-2025-63888](https://cve.now/CVE-2025-63888.md): The read function in file thinkphp\\library\\think\\template\\driver\\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability. (CVSS 9.8)
- [CVE-2025-63889](https://cve.now/CVE-2025-63889.md): The fetch function in file thinkphp\\library\\think\\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file (CVSS 7.5)
- [CVE-2025-64027](https://cve.now/CVE-2025-64027.md): Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerability in the CSV Import workflow. (CVSS 6.1, snipe/snipe-it)
- [CVE-2025-65220](https://cve.now/CVE-2025-65220.md): Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter. (CVSS 4.3)
- [CVE-2025-65221](https://cve.now/CVE-2025-65221.md): Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList. (CVSS 4.3)
- [CVE-2025-65222](https://cve.now/CVE-2025-65222.md): Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg. (CVSS 4.3)
- [CVE-2025-65223](https://cve.now/CVE-2025-65223.md): Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo. (CVSS 4.3)
- [CVE-2025-65226](https://cve.now/CVE-2025-65226.md): Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo. (CVSS 4.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-11-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.