Browse All CVEs
42,945 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-65379 |
medium | 6.5 | 0.0022 | 2026-11-04 | PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the /admin/password-recove | |
CVE-2025-65380 |
medium | 6.5 | 0.0022 | 2026-11-04 | PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoi | |
CVE-2025-65657 |
medium | 6.5 | 0.0043 | 2026-11-04 | FeehiCMS version 2.1.1 has a Remote Code Execution via Unrestricted File Upload in Ad Mana | |
CVE-2025-65955 |
medium | 6.1 | 0.0017 | 2026-11-04 | ImageMagick is free and open-source software used for editing and manipulating digital ima | |
CVE-2025-57200 |
medium | 6.5 | 0.0239 | 2026-11-04 | AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain | |
CVE-2025-65267 |
critical | 9.0 | 0.0037 | 2026-11-04 | In ERPNext v15.83.2 and Frappe Framework v15.86.0, improper validation of uploaded SVG ava | |
CVE-2025-57198 |
high | 8.8 | 0.0281 | 2026-11-04 | AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain | |
CVE-2025-57199 |
high | 8.8 | 0.0333 | 2026-11-04 | 1 PoC | AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain |
CVE-2025-57201 |
high | 8.8 | 0.1706 | 2026-11-04 | AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain | |
CVE-2025-57202 |
medium | 6.1 | 0.0052 | 2026-11-04 | A stored cross-site scripting (XSS) vulnerability in the PwdGrp.cgi endpoint of AVTECH SEC | |
CVE-2025-65320 |
high | 7.5 | 0.0026 | 2026-11-04 | 2 PoC | Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storag |
CVE-2025-53965 |
medium | 5.3 | 0.0031 | 2026-11-04 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos | |
CVE-2025-54326 |
high | 7.5 | 0.0036 | 2026-11-04 | An issue was discovered in Camera in Samsung Mobile Processor Exynos 1280 and 2200. Unnece | |
CVE-2025-65841 |
medium | 6.2 | 0.0022 | 2026-11-04 | Aquarius Desktop 3.0.069 for macOS stores user authentication credentials in the local fil | |
CVE-2025-65842 |
medium | 5.1 | 0.0018 | 2026-11-04 | The Aquarius HelperTool (1.0.003) privileged XPC service on macOS contains multiple flaws | |
CVE-2025-65843 |
high | 7.7 | 0.0030 | 2026-11-04 | Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its | |
CVE-2025-50360 |
high | 8.4 | 0.0026 | 2026-11-04 | 1 PoC | A heap buffer overflow in compiler.c and compiler.h in Pepper language 0.1.1commit 961a5d9 |
CVE-2025-63401 |
medium | 5.5 | 0.0035 | 2026-11-04 | Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6 | |
CVE-2025-50361 |
medium | 5.1 | 0.0022 | 2026-11-04 | 1 PoC | Buffer Overflow was found in SmallBASIC community SmallBASIC with SDL Before v12_28, and c |
CVE-2025-65345 |
medium | 6.5 | 0.0059 | 2026-11-04 | 1 PoC | alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The z |
CVE-2025-65868 |
high | 7.5 | 0.0046 | 2026-11-04 | XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a d | |
CVE-2025-53963 |
critical | 9.8 | 0.0049 | 2026-11-04 | An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They r | |
CVE-2025-54303 |
critical | 9.8 | 0.0041 | 2026-11-04 | The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, wh | |
CVE-2025-54304 |
critical | 9.8 | 0.0053 | 2026-11-04 | An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. When t | |
CVE-2025-54305 |
high | 7.8 | 0.0016 | 2026-11-04 | An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. One | |
CVE-2025-54306 |
high | 7.2 | 0.0087 | 2026-11-04 | An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. A re | |
CVE-2025-54307 |
high | 8.8 | 0.0081 | 2026-11-04 | An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. The | |
CVE-2025-65346 |
critical | 9.1 | 0.0102 | 2026-11-04 | 1 PoC | alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The u |
CVE-2025-56427 |
high | 7.5 | 0.0095 | 2026-11-04 | Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtai | |
CVE-2025-57210 |
high | 7.5 | 0.0031 | 2026-11-04 | Incorrect access control in the component ApiPayController.java of platform v1.0.0 allows | |
CVE-2025-57213 |
high | 7.5 | 0.0031 | 2026-11-04 | Incorrect access control in the component orderService.queryObject of platform v1.0.0 allo | |
CVE-2025-61148 |
medium | 6.5 | 0.0037 | 2026-11-04 | 1 PoC | An Insecure Direct Object Reference (IDOR) vulnerability in the EduplusCampus 3.0.1 Studen |
CVE-2025-63681 |
medium | 4.3 | 0.0030 | 2026-11-04 | open-webui v0.6.33 is vulnerable to Incorrect Access Control. The API /api/tasks/stop/ dir | |
CVE-2025-65516 |
medium | 6.1 | 0.0024 | 2026-11-04 | A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edit | |
CVE-2025-66287 |
high | 8.8 | 0.0051 | 2026-11-04 | A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected pr | |
CVE-2025-66373 |
medium | 4.8 | 0.0026 | 2026-11-04 | Akamai Ghost on Akamai CDN edge servers before 2025-11-17 has a chunked request body proce | |
CVE-2025-65637 |
high | 7.5 | 0.0067 | 2026-11-04 | 1 PoC | A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Wr |
CVE-2025-29268 |
critical | 9.8 | 0.0908 | 2026-11-04 | ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so | |
CVE-2025-29269 |
critical | 9.8 | 0.0198 | 2026-11-04 | ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability | |
CVE-2025-65806 |
medium | 4.3 | 0.0033 | 2026-11-04 | The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive fi | |
CVE-2025-55948 |
high | 7.3 | 0.0031 | 2026-11-04 | This vulnerability fundamentally arises from yzcheng90 X-SpringBoot 6.0's implementation o | |
CVE-2025-63896 |
high | 7.6 | 0.0032 | 2026-11-04 | An issue in the Bluetooth Human Interface Device (HID) of JXL 9 Inch Car Android Double Di | |
CVE-2025-65899 |
medium | 5.3 | 0.0037 | 2026-11-04 | 1 PoC | Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication m |
CVE-2025-65900 |
medium | 6.5 | 0.0033 | 2026-11-04 | 1 PoC | Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-ap |
CVE-2025-64052 |
medium | 5.1 | 0.0302 | 2026-11-04 | An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on th | |
CVE-2025-64054 |
critical | 9.6 | 0.0047 | 2026-11-04 | A reflected Cross Site Scripting (XSS) vulnerability on Fanvil x210 2.12.20 devices allows | |
CVE-2025-64056 |
medium | 4.3 | 0.0024 | 2026-11-04 | File upload vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on th | |
CVE-2025-65730 |
high | 8.8 | 0.0055 | 2026-11-04 | Authentication Bypass via Hardcoded Credentials GoAway up to v0.62.18, fixed in 0.62.19, u | |
CVE-2025-61078 |
medium | 6.1 | 0.0027 | 2026-11-04 | Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3 allows remot | |
CVE-2025-61258 |
high | 7.5 | 0.0064 | 2026-11-04 | Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via |