CVEs published in November 2025
47 tracked CVEs from 8 vendors had their first vendor advisory published in November 2025: 4 critical, 17 high, 1 in CISA KEV. Newest first.
11 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2025-60753High
Libarchive Vulnerability in NetApp Products
NetApp · 1 advisory - Added
Python Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-47914Medium
Golang.Org/X/Crypto Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-47913High
Golang.Org/X/Crypto Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-37997High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-59302Unrated
Apache CloudStack: Potential remote code execution on Javascript engine defined rules
Apache · 1 advisory - Added
CVE-2025-13601High
Glib: integer overflow in in g_escape_uri_string
NetApp, Red Hat · 2 advisories - Added
CVE-2025-52881High
Runc Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-52565High
Runc Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-31133High
Runc Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-3566Critical
Node.js Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-64408Unrated
Apache Causeway: Java deserialization vulnerability to authenticated attackers
Apache · 1 advisory - Added
CVE-2025-37159Medium
vulnerability in the web management interface of the AOS-CX OS user authentication service could
Aruba · 1 advisory - Added
CVE-2025-37158Medium
AOS-CX: command injection vulnerability exists in the AOS-CX Operating System.
Aruba · 1 advisory - Added
CVE-2025-37157Medium
AOS-CX: command injection vulnerability exists in the AOS-CX Operating System.
Aruba · 1 advisory - Added
CVE-2025-37156Medium
ArubaOS-CX: platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software.
Aruba · 1 advisory - Added
CVE-2025-53843High
stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2…
Fortinet · 1 advisory - Added
CVE-2025-58413High
stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2…
Fortinet · 1 advisory - Added
CVE-2025-46373High
Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.8 may allow an authenticated local IPSec user to execute arbitrary code or commands via "fortips_74.sys"
Fortinet · 1 advisory - Added
CVE-2025-47761High
Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9 may allow an authenticated local user to execute unauthorized code via fortips driver
Fortinet · 1 advisory - Added
Trusted hosts bypass via SSH
Fortinet · 1 advisory - Added
CVE-2025-48988High
Apache Tomcat Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-37944High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-60710HighCISA KEV
Microsoft Windows Link Following Vulnerability
MS Server · 1 advisory - Added
CVE-2017-20210Critical
Photo Station 5.4.1 & 5.2.7 include the security fix for the vulnerability related to the XMR mining programs identified by…
QNAP · 1 advisory - Added
CVE-2025-58469High
cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center.
QNAP · 1 advisory - Added
CVE-2025-58465Medium
cross-site scripting (XSS) vulnerability has been reported to affect Download Station.
QNAP · 1 advisory - Added
CVE-2025-58464High
QuMagie: relative path traversal vulnerability has been reported to affect QuMagie.
QNAP · 1 advisory - Added
CVE-2025-58463Medium
relative path traversal vulnerability has been reported to affect Download Station.
QNAP · 1 advisory - Added
CVE-2025-57712Medium
Qsync: path traversal vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-57706Medium
cross-site scripting (XSS) vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-54168Medium
cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center.
QNAP · 1 advisory - Added
CVE-2025-54167Unrated
cross-site scripting (XSS) vulnerability has been reported to affect Notification Center.
QNAP · 1 advisory - Added
CVE-2025-53413Medium
allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-53412Medium
NULL pointer dereference vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-53411Medium
allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-53410Medium
allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-53409Medium
allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-53408Medium
NULL pointer dereference vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-52865Medium
NULL pointer dereference vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-52425Critical
QuMagie: SQL injection vulnerability has been reported to affect QuMagie.
QNAP · 1 advisory - Added
CVE-2025-47207Medium
NULL pointer dereference vulnerability has been reported to affect several product versions.
QNAP · 1 advisory - Added
CVE-2025-55752High
Apache Tomcat Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-23167Medium
Node.js Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-20375Medium
Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability
Cisco · 1 advisory - Added
CVE-2025-20376Medium
Cisco Unified Contact Center Express Remote Code Execution Vulnerability
Cisco · 1 advisory - Added
CVE-2025-20354Critical
Cisco Unified Contact Center Express Remote Code Execution Vulnerability
Cisco · 1 advisory