Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-64202 |
medium | 6.5 | 0.0016 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-64197 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-60355 |
critical | 9.8 | 0.0053 | 2026-10-29 | zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI (Server-Side Template Injection | |
CVE-2025-60424 |
high | 7.6 | 0.0072 | 2026-10-29 | A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v | |
CVE-2023-49440 |
high | 8.8 | 0.0032 | 2026-10-29 | 1 PoC | AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter." |
CVE-2023-37749 |
medium | 5.3 | 0.0035 | 2026-10-29 | Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticat | |
CVE-2025-60553 |
critical | 9.8 | 0.0041 | 2026-10-29 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60552 |
high | 7.5 | 0.0037 | 2026-10-29 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60550 |
high | 7.5 | 0.0037 | 2026-10-29 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60549 |
high | 7.5 | 0.0037 | 2026-10-29 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60570 |
high | 7.5 | 0.0046 | 2026-10-29 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-46185 |
medium | 6.2 | 0.0014 | 2026-10-29 | An Insecure Permission vulnerability in pgcodekeeper 10.12.0 allows a local attacker to ob | |
CVE-2023-53733 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_u32: | |
CVE-2025-34156 |
medium | 6.9 | 0.0037 | 2026-10-29 | Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an | |
CVE-2025-34155 |
medium | 6.9 | 0.0053 | 2026-10-29 | Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in i | |
CVE-2025-50950 |
high | 7.5 | 0.0037 | 2026-10-29 | Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState: | |
CVE-2025-50949 |
medium | 6.5 | 0.0026 | 2026-10-29 | FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8. | |
CVE-2025-62396 |
medium | 5.3 | 0.0030 | 2026-10-29 | An error-handling issue in the Moodle router (r.php) could cause the application to displa | |
CVE-2025-60335 |
high | 7.5 | 0.0213 | 2026-10-29 | A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 | |
CVE-2025-62058 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62025 |
critical | 9.8 | 0.0058 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issu | |
CVE-2025-62005 |
high | 7.1 | 0.0014 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in FantasticPlugins SUMO Memberships for W | |
CVE-2025-59593 |
medium | 5.9 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-59580 |
high | 8.8 | 0.0040 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core | |
CVE-2025-59571 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-59564 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-59558 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-59555 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-59550 |
high | 8.1 | 0.0052 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-58967 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-58966 |
high | 7.1 | 0.0024 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-58963 |
critical | 10.0 | 0.0049 | 2026-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in 7oroof Medcity medcity al | |
CVE-2025-58958 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-58955 |
high | 8.1 | 0.0052 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-49936 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-49935 |
high | 7.5 | 0.0049 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-49901 |
critical | 9.8 | 0.0073 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Sim | |
CVE-2025-61035 |
high | 7.7 | 0.0015 | 2026-10-29 | The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permiss | |
CVE-2023-53732 |
— | — | 0.0020 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL de | |
CVE-2023-53731 |
— | — | 0.0023 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: netlink: fix potentia | |
CVE-2023-53730 |
— | — | 0.0021 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: blk-iocost: use spin_ | |
CVE-2023-53729 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: qmi_encdec | |
CVE-2023-53727 |
— | — | 0.0020 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_pie: av | |
CVE-2023-53726 |
high | 7.1 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: arm64: csum: Fix OoB | |
CVE-2023-53725 |
— | — | 0.0021 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/c | |
CVE-2023-53724 |
— | — | 0.0021 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: mfd: pcf50633-adc: Fi | |
CVE-2023-53723 |
— | — | 0.0021 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: disable s | |
CVE-2023-53722 |
— | — | 0.0021 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: md: raid1: fix potent | |
CVE-2023-53721 |
— | — | 0.0018 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix a N | |
CVE-2023-53720 |
— | — | 0.0018 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Release th |