Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-40796 |
high | 8.7 | 0.0050 | 2026-10-29 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS ne | |
CVE-2025-40795 |
critical | 9.3 | 0.0072 | 2026-10-29 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS ne | |
CVE-2025-40594 |
medium | 6.9 | 0.0021 | 2026-10-29 | A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAM | |
CVE-2024-36346 |
medium | 6.0 | 0.0013 | 2026-10-29 | Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged | |
CVE-2024-36342 |
high | 8.8 | 0.0017 | 2026-10-29 | Improper input validation in the GPU driver could allow an attacker to exploit a heap over | |
CVE-2024-21970 |
medium | 4.4 | 0.0014 | 2026-10-29 | Improper validation of an array index in the AND power Management Firmware could allow a p | |
CVE-2025-58628 |
critical | 9.3 | 0.0031 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2025-58214 |
high | 8.1 | 0.0059 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-6519 |
critical | 9.3 | 0.0054 | 2026-10-29 | E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a d | |
CVE-2025-52547 |
high | 8.7 | 0.0034 | 2026-10-29 | E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lack | |
CVE-2025-52546 |
medium | 5.1 | 0.0020 | 2026-10-29 | E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allo | |
CVE-2025-52545 |
high | 7.7 | 0.0026 | 2026-10-29 | E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call t | |
CVE-2025-52544 |
high | 8.8 | 0.0036 | 2026-10-29 | E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allo | |
CVE-2025-52543 |
medium | 5.3 | 0.0031 | 2026-10-29 | E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) | |
CVE-2025-34522 |
critical | 9.2 | 0.0056 | 2026-10-29 | A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve U | |
CVE-2025-8556 |
low | 3.7 | 0.0057 | 2026-10-29 | A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability | |
CVE-2025-6430 |
medium | 6.1 | 0.0027 | 2026-10-29 | When a file download is specified via the `Content-Disposition` header, that directive wou | |
CVE-2025-6426 |
high | 8.8 | 0.0021 | 2026-10-29 | The executable file warning did not warn users before opening files with the `terminal` ex | |
CVE-2025-6425 |
medium | 4.3 | 0.0031 | 2026-10-29 | An attacker who enumerated resources from the WebCompat extension could have obtained a pe | |
CVE-2025-6424 |
critical | 9.8 | 0.0790 | 2026-10-29 | A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerab | |
CVE-2025-49710 |
critical | 9.8 | 0.0075 | 2026-10-29 | An integer overflow was present in `OrderedHashTable` used by the JavaScript engine. This | |
CVE-2025-2708 |
medium | 5.3 | 0.0074 | 2026-10-29 | A vulnerability was identified in zhijiantianya ruoyi-vue-pro 2.4.1. Affected is an unknow | |
CVE-2025-2707 |
medium | 5.3 | 0.0073 | 2026-10-29 | A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1. This impacts an unkno | |
CVE-2025-26926 |
medium | 4.3 | 0.0016 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Booknetic Booknetic booknetic allows Cr | |
CVE-2024-3220 |
low | 2.3 | 0.0072 | 2026-10-29 | There is a defect in the CPython standard library module “mimetypes” where on Windows the | |
CVE-2024-12243 |
medium | 5.3 | 0.0129 | 2026-10-29 | A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an | |
CVE-2024-12133 |
medium | 5.3 | 0.0111 | 2026-10-29 | A flaw in libtasn1 causes inefficient handling of specific certificate data. When processi | |
CVE-2024-11831 |
medium | 5.4 | 0.0112 | 2026-10-29 | A flaw was found in npm-serialize-javascript. The vulnerability occurs because the seriali | |
CVE-2024-48884 |
critical | 9.1 | 0.1521 | 2026-10-29 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerabi | |
CVE-2024-52616 |
medium | 5.3 | 0.0073 | 2026-10-29 | A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly on | |
CVE-2024-52615 |
medium | 5.3 | 0.0062 | 2026-10-29 | A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS que | |
CVE-2024-26011 |
critical | 9.8 | 0.0060 | 2026-10-29 | A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4. | |
CVE-2024-9407 |
medium | 4.7 | 0.0029 | 2026-10-29 | A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instru | |
CVE-2024-9355 |
medium | 6.5 | 0.0030 | 2026-10-29 | A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to ran | |
CVE-2024-21753 |
medium | 6.0 | 0.0080 | 2026-10-29 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerabi | |
CVE-2024-38564 |
medium | 5.5 | 0.0024 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYP | |
CVE-2024-26010 |
high | 7.5 | 0.0079 | 2026-10-29 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, Forti | |
CVE-2024-32507 |
high | 8.8 | 0.0046 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login | |
CVE-2023-45583 |
high | 7.2 | 0.0066 | 2026-10-29 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, Fort | |
CVE-2023-36640 |
medium | 6.7 | 0.0028 | 2026-10-29 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, Fort | |
CVE-2024-3727 |
high | 8.3 | 0.0128 | 2026-10-29 | A flaw was found in the github.com/containers/image library. This flaw allows attackers to | |
CVE-2023-6717 |
medium | 6.0 | 0.0071 | 2026-10-29 | A flaw was found in the SAML client registration in Keycloak that could allow an administr | |
CVE-2024-1249 |
high | 7.4 | 0.0045 | 2026-10-29 | A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unva | |
CVE-2023-41677 |
high | 8.8 | 0.0075 | 2026-10-29 | A insufficiently protected credentials vulnerability in Fortinet FortiOS 7.4.0 through 7.4 | |
CVE-2024-28834 |
medium | 5.3 | 0.0072 | 2026-10-29 | A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that explo | |
CVE-2024-28835 |
medium | 5.0 | 0.0039 | 2026-10-29 | A flaw has been discovered in GnuTLS where an application crash can be induced when attemp | |
CVE-2023-47534 |
high | 8.8 | 0.0105 | 2026-10-29 | A improper neutralization of formula elements in a csv file vulnerability in Fortinet Fort | |
CVE-2023-29181 |
high | 8.8 | 0.0072 | 2026-10-29 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 throu | |
CVE-2023-29180 |
high | 7.5 | 0.0280 | 2026-10-29 | A null pointer dereference vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS | |
CVE-2023-45581 |
high | 7.2 | 0.0088 | 2026-10-29 | An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiCl |