Browse All CVEs
41,876 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-20354 |
critical | 9.8 | 0.0087 | 2026-11-03 | A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX co | |
CVE-2025-20375 |
medium | 6.5 | 0.0039 | 2026-11-03 | A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote at | |
CVE-2025-20277 |
low | 3.4 | 0.0017 | 2026-11-03 | A vulnerability in the web-based management interface of Cisco Unified CCX could allow an | |
CVE-2025-20338 |
medium | 6.0 | 0.0029 | 2026-11-03 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local at | |
CVE-2025-20258 |
medium | 5.4 | 0.0030 | 2026-11-03 | A vulnerability in the self-service portal of Cisco Duo could allow an unauthenticated, re | |
CVE-2025-20260 |
critical | 9.8 | 0.0164 | 2026-11-03 | 2 PoC | A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, re |
CVE-2025-20198 |
medium | 4.6 | 0.0017 | 2026-11-03 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local at | |
CVE-2025-20213 |
medium | 5.5 | 0.0017 | 2026-11-03 | A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage | |
CVE-2025-20114 |
medium | 4.3 | 0.0035 | 2026-11-03 | A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticat | |
CVE-2025-20164 |
high | 8.3 | 0.0035 | 2026-11-03 | A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS S | |
CVE-2025-1697 |
medium | 6.9 | 0.0021 | 2026-11-03 | A potential security vulnerability has been identified in the HP Touchpoint Analytics Serv | |
CVE-2025-14265 |
critical | 9.1 | 0.0037 | 2026-11-03 | In versions of ScreenConnect™ prior to 25.8, server-side validation and integrity checks w | |
CVE-2025-14727 |
high | 8.3 | 0.0043 | 2026-11-03 | A vulnerability exists in NGINX Ingress Controller's nginx.org/rewrite-target annotation v | |
CVE-2025-13642 |
medium | 5.4 | 0.0048 | 2026-11-03 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & | |
CVE-2025-13780 |
critical | 9.1 | 0.0094 | 2026-11-03 | 3 PoC | pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability th |
CVE-2026-81623 |
high | 8.8 | 0.0034 | 2026-11-03 | IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary c | |
CVE-2026-81049 |
medium | 6.7 | 0.0012 | 2026-11-03 | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Ch | |
CVE-2026-81239 |
high | 8.6 | 0.0040 | 2026-11-03 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload | |
CVE-2026-7363 |
high | 8.8 | 0.0038 | 2026-11-03 | Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allow | |
CVE-2026-7769 |
high | 8.1 | 0.0048 | 2026-11-03 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2. | |
CVE-2026-7312 |
critical | 10.0 | 0.0044 | 2026-11-03 | CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity versi | |
CVE-2026-78892 |
— | — | 0.0011 | 2026-11-03 | Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.6 | |
CVE-2026-79206 |
— | — | 0.0032 | 2026-11-03 | Out of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote | |
CVE-2026-74985 |
critical | 9.8 | 0.0053 | 2026-11-03 | Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in | |
CVE-2026-75034 |
high | 7.4 | 0.0032 | 2026-11-03 | A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by th | |
CVE-2026-73466 |
medium | 6.3 | 0.0013 | 2026-11-03 | On affected platforms running Arista EOS, under certain circumstances user passwordss may | |
CVE-2026-73755 |
medium | 5.7 | 0.0031 | 2026-11-03 | A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful expl | |
CVE-2026-71312 |
high | 8.0 | 0.0049 | 2026-11-03 | rclone is a command-line program to sync files and directories to and from different cloud | |
CVE-2026-70603 |
medium | 6.0 | 0.0013 | 2026-11-03 | Electron is a framework for writing cross-platform desktop applications using JavaScript, | |
CVE-2026-70611 |
medium | 6.9 | 0.0019 | 2026-11-03 | Electron is a framework for writing cross-platform desktop applications using JavaScript, | |
CVE-2026-70482 |
high | 8.8 | 0.0057 | 2026-11-03 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From | |
CVE-2026-65643 |
high | 8.7 | 0.0088 | 2026-11-03 | 2 PoC | Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execu |
CVE-2026-67305 |
critical | 9.4 | 0.0077 | 2026-11-03 | FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the | |
CVE-2026-62196 |
high | 8.7 | 0.0040 | 2026-11-03 | OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability | |
CVE-2026-63694 |
medium | 5.0 | 0.0084 | 2026-11-03 | Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutrali | |
CVE-2026-61511 |
critical | 9.3 | 0.0561 | 2026-11-03 | 5 PoC | vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability |
CVE-2026-57156 |
high | 8.6 | 0.0070 | 2026-11-03 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit | |
CVE-2026-52811 |
critical | 9.0 | 0.0047 | 2026-11-03 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, (*Repository).UploadRepoF | |
CVE-2026-52805 |
high | 8.7 | 0.0038 | 2026-11-03 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, a Server-Side Request For | |
CVE-2026-52809 |
medium | 6.8 | 0.0019 | 2026-11-03 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, password-reset tokens are | |
CVE-2026-51772 |
— | — | 0.0030 | 2026-11-03 | 1 PoC | A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenSta |
CVE-2026-52804 |
medium | 5.5 | 0.0050 | 2026-11-03 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, a repository admin collab | |
CVE-2026-50573 |
high | 8.1 | 0.0017 | 2026-11-03 | pnpm is a package manager. Prior to 10.34.0 and 11.4.0, `pnpm install` in non-frozen mode | |
CVE-2026-50014 |
high | 7.3 | 0.0032 | 2026-11-03 | pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm passes the lockfile-controlle | |
CVE-2026-50021 |
high | 8.1 | 0.0018 | 2026-11-03 | pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's tarball extraction worker s | |
CVE-2026-49845 |
critical | 9.8 | 0.0089 | 2026-11-03 | SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before | |
CVE-2026-48613 |
medium | 5.9 | 0.0015 | 2026-11-03 | SQL injection vulnerability in phpBB profile field migration due to improper handling of u | |
CVE-2026-45434 |
— | — | 0.2126 | 2026-11-03 | Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leadi | |
CVE-2026-44420 |
high | 8.8 | 0.0456 | 2026-11-03 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malici | |
CVE-2026-40369 |
high | 7.8 | 0.0473 | 2026-11-03 | 7 PoC | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv |