Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: November 2025

164 records · 11 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 2

  • CVE-2025-34322
    37Monitor

    Nagios Log Server < 2026R1.0.1 Authenticated Command Injection via Natural Language Queries

    HighCVSS 8.6Proof of conceptEPSS 9%

    nagios · log serverNov 17, 2025

  • CVE-2025-13223
    66This week

    Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted

    HighCVSS 8.8KEVWeaponizedEPSS 4%

    google · chromeNov 17, 2025

  • CVE-2025-13224
    35Monitor

    Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted

    HighCVSS 8.8Proof of conceptEPSS 0%

    google · chromeNov 17, 2025

  • CVE-2025-48593
    32Monitor

    In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free.

    HighCVSS 8.0Proof of conceptEPSS 0%

    google · androidNov 18, 2025

  • CVE-2025-63892
    27Monitor

    A vulnerability was determined in SourceCodester Student Grades Management System 1.0.

    MediumCVSS 6.8Proof of conceptEPSS 0%

    remyandrade · student grades management systemNov 18, 2025

  • CVE-2025-63408
    31Monitor

    Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to

    HighCVSS 7.8Proof of conceptEPSS 0%

    ispyconnect · agent dvrNov 18, 2025

  • CVE-2025-56526
    24Monitor

    Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted PDF.

    MediumCVSS 6.1Proof of conceptEPSS 0%

    cinnamon · kotaemonNov 18, 2025

  • CVE-2025-56643
    36Monitor

    Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out.

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    requarks · wiki.jsNov 18, 2025

  • CVE-2025-54320
    17Monitor

    In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerabilit

    MediumCVSS 4.3Proof of conceptEPSS 0%

    ascertia · signinghubNov 18, 2025

  • CVE-2025-54321
    39Monitor

    In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerabi

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    ascertia · signinghubNov 18, 2025

  • CVE-2025-56499
    26Monitor

    Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated p

    MediumCVSS 6.5Proof of conceptEPSS 0%

    metacubex · mihomoNov 18, 2025

  • CVE-2025-63602
    29Monitor

    A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs (such as LSTAR) a

    HighCVSS 7.3Proof of conceptEPSS 0%

    awesomeminer · awesome minerNov 18, 2025

  • CVE-2025-34324
    28Monitor

    GoSign Desktop < 2.4.1 Insecure Update Mechanism RCE

    HighCVSS 7.0Proof of conceptEPSS 0%

    infocert · gosignNov 18, 2025

  • CVE-2025-58034
    74This week

    An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortin

    HighCVSS 7.2KEVWeaponizedEPSS 54%

    fortinet · fortiwebNov 18, 2025

  • CVE-2025-64408
    28Monitor

    Apache Causeway: Java deserialization vulnerability to authenticated attackers

    MediumCVSS 6.3No exploitEPSS 11%

    apache · causewayNov 19, 2025

  • CVE-2025-64764
    21Monitor

    Astro is vulnerable to Reflected XSS via the server islands feature

    MediumCVSS 5.4Proof of conceptEPSS 0%

    astro · astroNov 19, 2025

  • CVE-2025-13315
    60This week

    Unauthenticated log access in Twonky Server

    CriticalCVSS 9.3WeaponizedEPSS 31%

    linux · linux kernelNov 19, 2025

  • CVE-2025-13316
    60This week

    Hard-coded encryption keys in Twonky Server

    HighCVSS 8.2WeaponizedEPSS 2%

    linux · linux kernelNov 19, 2025

  • CVE-2025-65099
    30Monitor

    Claude Code vulnerable to command execution prior to startup trust dialog

    HighCVSS 7.7Proof of conceptEPSS 0%

    anthropic · claude codeNov 19, 2025

  • CVE-2025-65094
    34Monitor

    WBCE CMS is Vulnerable to Privilege Escalation via Group ID Manipulation (IDOR)

    HighCVSS 8.7Proof of conceptEPSS 0%

    wbce · wbce cmsNov 19, 2025

  • CVE-2025-11001
    39Monitor

    7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability

    HighCVSS 7.8Proof of conceptEPSS 27%

    7-zip · 7-zipNov 19, 2025

  • CVE-2025-63848
    24Monitor

    Stored cross site scripting (xss) vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE

    MediumCVSS 6.1Proof of conceptEPSS 0%

    swi-prolog · swishNov 20, 2025

  • CVE-2025-64027
    24Monitor

    Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerability in the CSV Import workflow.

    MediumCVSS 6.1Proof of conceptEPSS 0%

    snipeitapp · snipe-itNov 20, 2025

  • CVE-2025-63888
    39Monitor

    The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability.

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    thinkphp · thinkphpNov 20, 2025

  • CVE-2025-0643
    28Monitor

    XSS in Narkom Communication Technologies' Pyxis Signage

    HighCVSS 7.2No exploitEPSS 0%

    narkom communication and software technologies trade ltd. co. · pyxis signageNov 20, 2025

  • CVE-2025-13442
    28Monitor

    UTT 进取 750W formPdbUpConfig system command injection

    MediumCVSS 5.5No exploitEPSS 19%

    utt · 750w firmwareNov 20, 2025

  • CVE-2025-13425
    7Monitor

    Denial of Service in OSV-SCALIBR

    LowCVSS 1.9Proof of conceptEPSS 0%

    google · osv-scalibrNov 20, 2025

  • CVE-2025-61138
    30Monitor

    Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory.

    HighCVSS 7.5No exploitEPSS 0%

    qlik · qlik senseNov 20, 2025

  • CVE-2025-11368
    21Monitor

    LearnPress – WordPress LMS Plugin <= 4.2.9.4 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information Exposure

    MediumCVSS 5.3Proof of conceptEPSS 1%

    thimpress · learnpress – wordpress lms plugin for create and sell online coursesNov 21, 2025

  • CVE-2025-11771
    21Monitor

    Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO <= 2.4.7 - Missing Authentication to Unauthenticated Presale Update

    MediumCVSS 5.3Proof of conceptEPSS 0%

    beycanpress · cryptocurrency (token), launchpad (presale), ico & ido, airdrop by tokenicoNov 21, 2025

  • CVE-2025-12135
    28Monitor

    WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting

    HighCVSS 7.2Proof of conceptEPSS 0%

    iqonicdesign · wpbookitNov 21, 2025

  • CVE-2025-13159
    28Monitor

    Flo Forms – Easy Drag & Drop Form Builder <= 1.0.43 - Unauthenticated Stored Cross-Site Scripting via SVG Upload

    HighCVSS 7.1Proof of conceptEPSS 0%

    flothemesplugins · flo forms – easy drag & drop form builderNov 21, 2025

  • CVE-2025-11973
    19Monitor

    简数采集器 <= 2.6.3 - Authenticated (Admin+) Arbitrary File Read

    MediumCVSS 4.9Proof of conceptEPSS 0%

    zhengdon · 简数采集器Nov 21, 2025

  • CVE-2025-13156
    35Monitor

    Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution

    HighCVSS 8.8Proof of conceptEPSS 0%

    appsbd · vitepos – point of sale (pos) for woocommerceNov 21, 2025

  • CVE-2025-13138
    30Monitor

    WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Function

    HighCVSS 7.5Proof of conceptEPSS 1%

    wpdirectorykit · wp directory kitNov 21, 2025

  • CVE-2025-41115
    44Plan

    Incorrect privilege assignment

    CriticalCVSS 9.8Proof of conceptEPSS 17%

    grafana · grafanaNov 21, 2025

  • CVE-2025-12973
    28Monitor

    S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.8 - Authenticated (Editor+) Arbitrary File Upload

    HighCVSS 7.2Proof of conceptEPSS 0%

    oc3dots · s2b ai assistant – chatbot, ai agents, chatgpt api, image generatorNov 21, 2025

  • CVE-2025-48507
    34Monitor

    The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors acces

    HighCVSS 8.6Proof of conceptEPSS 0%

    amd · kria™ somNov 23, 2025

  • CVE-2024-14015
    28Monitor

    Studiocart <= 2.9.0 - Reflected XSS

    HighCVSS 7.1Proof of conceptEPSS 0%

    unknown · wordpress ecommerce pluginNov 24, 2025

  • CVE-2025-63914
    26Monitor

    An issue was discovered in Cinnamon kotaemon 0.11.0.

    MediumCVSS 6.5Proof of conceptEPSS 0%

    cinnamon · kotaemonNov 24, 2025

  • CVE-2025-63498
    24Monitor

    alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter.

    MediumCVSS 6.1Proof of conceptEPSS 0%

    alinto · sogoNov 24, 2025

  • CVE-2025-64720
    28Monitor

    LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication

    HighCVSS 7.1Proof of conceptEPSS 0%

    libpng · libpngNov 25, 2025

  • CVE-2025-65018
    28Monitor

    LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`

    HighCVSS 7.1Proof of conceptEPSS 0%

    libpng · libpngNov 25, 2025

  • CVE-2025-6389
    62This week

    Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback

    CriticalCVSS 9.8Proof of conceptEPSS 76%

    sneeit · sneeit frameworkNov 25, 2025

  • CVE-2025-13380
    26Monitor

    AI Engine for WordPress: ChatGPT, GPT Content Generator <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read

    MediumCVSS 6.5Proof of conceptEPSS 0%

    liquidthemes · ai engine for wordpress: chatgpt, gpt content generatorNov 25, 2025

  • CVE-2025-59366
    40Plan

    An authentication-bypass vulnerability exists in AiCloud.

    CriticalCVSS 9.2No exploitEPSS 12%

    asus · routerNov 25, 2025

  • CVE-2025-63729
    36Monitor

    An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certif

    CriticalCVSS 9.0Proof of conceptEPSS 0%

    syrotech · sy-gpon-1110-wdont firmwareNov 25, 2025

  • CVE-2025-63735
    24Monitor

    A reflected Cross site scripting (XSS) vulnerability in Ruckus Unleashed 200.13.6.1.319 via the name parameter to the the captive-portal end

    MediumCVSS 6.1Proof of conceptEPSS 0%

    ruckuswireless · ruckus unleashedNov 25, 2025

  • CVE-2025-58360
    87Now

    GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature

    CriticalCVSS 9.8KEVWeaponizedEPSS 61%

    geoserver · geoserverNov 25, 2025

  • CVE-2025-13595
    39Monitor

    CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    soportecibeles · cibeles aiNov 25, 2025

  • CVE-2025-13597
    39Monitor

    AI Feeds <= 1.0.11 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    soportecibeles · ai feedsNov 25, 2025

  • CVE-2025-59390
    39Monitor

    Apache Druid: Kerberos authenticaton chooses a cryptographically unsecure secret if not configured explicitly.

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    apache · druidNov 26, 2025

  • CVE-2025-65669
    36Monitor

    An issue was discovered in classroomio 0.1.13.

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    classroomio · classroomioNov 26, 2025

  • CVE-2025-65672
    30Monitor

    Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows unauthorized share and invite access to course settings.

    HighCVSS 7.5Proof of conceptEPSS 0%

    classroomio · classroomioNov 26, 2025

  • CVE-2025-65676
    21Monitor

    Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via craft

    MediumCVSS 5.4Proof of conceptEPSS 0%

    classroomio · classroomioNov 26, 2025

  • CVE-2025-65681
    13Monitor

    An issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to se

    LowCVSS 3.3Proof of conceptEPSS 0%

    edly · tutorNov 26, 2025

  • CVE-2025-50433
    39Monitor

    An issue was discovered in imonnit.com (2025-04-24) allowing malicious actors to gain escalated privileges via crafted password reset to tak

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    monnit · imonnitNov 26, 2025

  • CVE-2025-65670
    17Monitor

    An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating

    MediumCVSS 4.3Proof of conceptEPSS 0%

    classroomio · classroomioNov 26, 2025

  • CVE-2025-65675
    21Monitor

    Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via craft

    MediumCVSS 5.4Proof of conceptEPSS 0%

    classroomio · classroomioNov 26, 2025

  • CVE-2025-62593
    85Now

    Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack

    CriticalCVSS 9.4KEVWeaponizedEPSS 60%

    anyscale · rayNov 26, 2025

  • CVE-2025-66031
    34Monitor

    node-forge ASN.1 Unbounded Recursion

    HighCVSS 8.7No exploitEPSS 0%

    digitalbazaar · forgeNov 26, 2025

  • CVE-2025-12758
    30Monitor

    Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the

    HighCVSS 7.7Proof of conceptEPSS 0%

    validator project · validatorNov 27, 2025

  • CVE-2025-66034
    39Monitor

    fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    fonttools · fonttoolsNov 29, 2025

  • CVE-2025-66224
    36Monitor

    OrangeHRM is Vulnerable to Code Execution Through Arbitrary File Write from Sendmail Parameter Injection

    CriticalCVSS 9.0Proof of conceptEPSS 0%

    orangehrm · orangehrmNov 29, 2025