CVEs published November 24, 2025
100 CVEs were published on November 24, 2025: 7 critical, 36 high.
- Published
- 100
- Critical
- 7
- High
- 36
- Medium
- 56
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 32
Most affected products
- AMD Xilinx Run Time
- 5
- FluentBit Fluent Bit
- 5
- pnggroup libpng
- 4
- AMD μProf
- 3
- code-projects Library System
- 3
- Google Cloud Looker
- 3
- code-projects Blog Site
- 2
- Davantis DFUSION
- 2
- Linux
- 2
- Shenzhen TVT Digital Technology Co. NVMS-9000
- 2
Critical 7
- CVE-2023-7330Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.phpBeijing Star-Net Ruijie Network Technology Co. NBR Series R…
- CVE-2018-25126TVT NVMS-9000 Hard-coded API Credentials & Command InjectionShenzhen TVT Digital Technology Co. NVMS-9000
- CVE-2025-12977CVE-2025-12977FluentBit Fluent Bit
- CVE-2025-40212nfsd: fix refcount leak in nfsd_set_fh_dentry()Linux
- CVE-2024-47856In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or mor
- CVE-2025-54347A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows
- CVE-2025-63958MILLENSYS Vision Tools Workspace 6.5.0.2585 exposes a sensitive configuration endpoint (/MILLENSYS/settings) that is accessible without auth
High 36
- CVE-2025-62155QuantumNous New API Has SSRF BypassQuantumNous new-api · github.com/QuantumNous/new-api
- CVE-2025-65018LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`pnggroup libpng
- CVE-2025-64720LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplicationpnggroup libpng
- CVE-2025-48510Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availaAMD μProf
- CVE-2025-52538Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resultingAMD Xilinx Run Time
- CVE-2025-0003Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in AMD Xilinx Run Time
- CVE-2024-14007TVT NVMS-9000 < 1.3.4 Unauthenticated Administrative Queries & Information DisclosureShenzhen TVT Digital Technology Co. NVMS-9000
- CVE-2025-0005Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resultingAMD Xilinx Run Time
- CVE-2025-52539A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interfaceAMD Xilinx Run Time
- CVE-2025-13609Keylime: keylime: registrar allows identity takeover via duplicate uuid registrationKeylime Project keylime · Red Hat Enterprise Linux +1
- CVE-2025-40213Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_completeLinux
- CVE-2025-10555Stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025xDassault Systèmes DELMIA Service Process Engineer
- CVE-2025-10554Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xDassault Systèmes ENOVIA Product Manager
- CVE-2025-44018A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0.GL-Inet GL-AXT1800
- CVE-2025-12970CVE-2025-12970FluentBit Fluent Bit
- CVE-2025-11921iStat Menus 7.10.4 - Local Privilege EscalationBjango iStats
- CVE-2025-65998Apache Syncope: Default AES key used for internal password encryptionApache Software Foundation Apache Syncope · org.apache.sync…
- CVE-2025-41016Multiple vulnerabilities in DFUSION by DavantisDavantis DFUSION
- CVE-2025-12741Arbitrary File Write in Denodo dialect of Looker allows Remote Code ExecutionGoogle Cloud Looker
- CVE-2025-12740Remote Command Execution in Looker via IBM DB2 JDBC driveGoogle Cloud Looker
- CVE-2025-41729DoS via Modbus Read CommandJanitza UMG 96-PA · Janitza UMG 96-PA-MID+
- CVE-2025-12739Cross-Site Scripting (XSS) in Looker's Extension Loader leading to Admin Account CompromiseGoogle Cloud Looker
- CVE-2025-12629Broken Link Manager <= 0.6.5 - Reflected XSSBroken Link Manager
- CVE-2024-14015Studiocart <= 2.9.0 - Reflected XSSWordPress eCommerce Plugin
- CVE-2025-7402Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_idscripteo Ads Pro Plugin - Multi-Purpose WordPress Advertisi…
- CVE-2025-54338An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which a
- CVE-2025-54563An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which a
- CVE-2025-56400Cross-Site Request Forgery (CSRF) vulnerability in the OAuth implementation of the Tuya SDK 6.5.0 for Android and iOS, affects the Tuya Smar
- CVE-2025-56401ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumnName.
- CVE-2025-60638An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Nnssfgithub.com/free5gc/nssf
- CVE-2025-60915An issue in the size query parameter (/views/file.py) of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to exec
- CVE-2025-63434The update mechanism in Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is insecure.
- CVE-2025-65493NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS
- CVE-2025-65494NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial
- CVE-2025-65495Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of
- CVE-2025-65503Use after free in endpoint destructors in Redboltz async_mqtt 10.2.5 allows local users to cause a denial of service via triggering SSL init
Medium, low and unrated 57
- CVE-2025-64506LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA imagespnggroup libpng
- CVE-2025-64505LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette indexpnggroup libpng
- CVE-2025-10144Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injectionquadlayers Perfect Brands for WooCommerce
- CVE-2025-29933Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of AMD μProf
- CVE-2025-48511Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crAMD μProf
- CVE-2025-0007Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel spaceAMD Xilinx Run Time
- CVE-2025-36150IBM Concert Information DisclosureIBM Concert
- CVE-2025-13466body-parser vulnerable to denial of service when url encoding is usedbody-parser
- CVE-2025-36112IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosureIBM Sterling B2B Integrator · IBM Sterling File Gateway
- CVE-2025-12978CVE-2025-12978FluentBit Fluent Bit
- CVE-2025-12969CVE-2025-12969FluentBit Fluent Bit
- CVE-2025-12972CVE-2025-12972FluentBit Fluent Bit
- CVE-2025-12628WP 2FA < 3.0.0 - Second Factor BypassWP 2FA
- CVE-2025-41017Multiple vulnerabilities in DFUSION by DavantisDavantis DFUSION
- CVE-2025-41087Cross-Site Scripting (XSS) stored in Taclia's web applicationTaclia's web application
- CVE-2025-13596Improper Error Handling Leading to Sensitive Information Disclosure in CIGES ≤ 2.15.6ATISoluciones CIGES
- CVE-2025-13588lKinderBueno Streamity Xtream IPTV Player proxy.php server-side request forgerylKinderBueno Streamity Xtream IPTV Player
- CVE-2025-13586SourceCodester Online Student Clearance System changepassword.php sql injectionSourceCodester Online Student Clearance System
- CVE-2025-12569WP Front User Submit < 5.0.0 - Open RedirectGuest posting / Frontend Posting / Front Editor
- CVE-2025-12394Backup Migration < 2.0.0 - Unauthenticated Backup DownloadBackup Migration
- CVE-2025-13585itsourcecode COVID Tracking System login.php sql injectionitsourcecode COVID Tracking System
- CVE-2025-13584Eigenfocus Description cross site scriptingEigenfocus
- CVE-2025-13583code-projects Question Paper Generator POST Parameter signupscript.php sql injectioncode-projects Question Paper Generator
- CVE-2025-13582code-projects Jonnys Liquor GET Parameter detail.php sql injectioncode-projects Jonnys Liquor
- CVE-2025-13581itsourcecode Student Information System schedule_edit1.php sql injectionitsourcecode Student Information System
- CVE-2025-13589Otsuka Information Technology｜FMS - Reflected Cross-site ScriptingOtsuka Information Technology FMS
- CVE-2025-13580code-projects Library System mail.php sql injectioncode-projects Library System
- CVE-2025-13579code-projects Library System return.php sql injectioncode-projects Library System
- CVE-2025-13578code-projects Library System Login index.php sql injectioncode-projects Library System
- CVE-2025-13577PHPGurukul Hostel Management System register-complaint.php cross site scriptingPHPGurukul Hostel Management System
- CVE-2025-13576code-projects Blog Site admin.php improper authorizationcode-projects Blog Site
- CVE-2025-13575code-projects Blog Site Category blog.php category_exists sql injectioncode-projects Blog Site
- CVE-2025-13574code-projects Online Bidding System addcategory.php categoryadd unrestricted uploadcode-projects Online Bidding System
- CVE-2025-54341A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2.
- CVE-2025-56423An issue in Austrian Academy of Sciences (AW) Austrian Archaeological Institute OpenAtlas v.8.12.0 allows a remote attacker to obtain sensit
- CVE-2025-60632An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Npcf_github.com/free5gc/pcf
- CVE-2025-60633An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the Nudm_SubscriberDataManagementgithub.com/free5gc/udm · github.com/free5gc/openapi
- CVE-2025-60914Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive information via
- CVE-2025-60916A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas befor
- CVE-2025-60917A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas befor
- CVE-2025-63432Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is Missing SSL Certificate Validation.
- CVE-2025-63433Xtooltech Xtool AnyScan Android Application 4.40.40 and prior uses a hardcoded cryptographic key and IV to decrypt update metadata.
- CVE-2025-63435Xtooltech Xtool AnyScan Android Application 4.40.40 is Missing Authentication for Critical Function.
- CVE-2025-63498alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter.
- CVE-2025-63674An issue in Blurams Lumi Security Camera (A31C) v23.1227.472.2926 allows local physical attackers to execute arbitrary code via overriding t
- CVE-2025-63914An issue was discovered in Cinnamon kotaemon 0.11.0.
- CVE-2025-63952A Cross-Site Request Forgery (CSRF) in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily
- CVE-2025-63953A Cross-Site Request Forgery (CSRF) in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily
- CVE-2025-64047OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.
- CVE-2025-64048YCCMS 3.4 contains a stored cross-site scripting (XSS) vulnerability in the article management functionality.
- CVE-2025-65496NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denia
- CVE-2025-65497NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denia
- CVE-2025-65498NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denia
- CVE-2025-65499Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service
- CVE-2025-65500NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denia
- CVE-2025-65501Null pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a DTLS
- CVE-2025-65502Null pointer dereference in add_ca_certs() in Cesanta Mongoose before 7.2 allows remote attackers to cause a denial of service via TLS initi