Browse All CVEs
43,697 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-27916 |
high | 7.5 | 0.0032 | 2026-11-05 | An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before | |
CVE-2025-27917 |
high | 7.5 | 0.0050 | 2026-11-05 | An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0. | |
CVE-2025-27918 |
critical | 9.8 | 0.0070 | 2026-11-05 | An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0. | |
CVE-2025-27919 |
high | 8.2 | 0.0032 | 2026-11-05 | An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Cont | |
CVE-2025-60541 |
high | 7.3 | 0.0025 | 2026-11-05 | A Server-Side Request Forgery (SSRF) in the /api/proxy/ component of linshenkx prompt-opti | |
CVE-2025-63551 |
high | 7.5 | 0.0050 | 2026-11-05 | A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Ent | |
CVE-2025-63686 |
medium | 6.5 | 0.0038 | 2026-11-05 | There is an arbitrary file download vulnerability in GuoMinJim PersonManage thru commit 5a | |
CVE-2025-63687 |
medium | 6.5 | 0.0027 | 2026-11-05 | An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBef | |
CVE-2025-63689 |
critical | 10.0 | 0.0092 | 2026-11-05 | Multiple SQL injection vulnerabilitites in ycf1998 money-pos system before commit 11f276bd | |
CVE-2025-63690 |
critical | 9.1 | 0.0106 | 2026-11-05 | In pig-mesh Pig versions 3.8.2 and below, when setting up scheduled tasks in the Quartz ma | |
CVE-2025-63691 |
critical | 9.6 | 0.0038 | 2026-11-05 | In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the | |
CVE-2025-57698 |
high | 7.5 | 0.0083 | 2026-11-05 | AstrBot Project v3.5.22 contains a directory traversal vulnerability. The handler function | |
CVE-2025-63784 |
medium | 6.5 | 0.0045 | 2026-11-05 | An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/we | |
CVE-2025-57697 |
medium | 6.5 | 0.0034 | 2026-11-05 | AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function _encode_image | |
CVE-2025-63713 |
medium | 6.1 | 0.0036 | 2026-11-05 | Cross-Site Scripting (XSS) vulnerability in SourceCodester "MatchMaster" 1.0 allows remote | |
CVE-2025-63714 |
medium | 6.1 | 0.0028 | 2026-11-05 | Cross-Site Scripting (XSS) vulnerability in SourceCodester User Account Generator 1.0 allo | |
CVE-2025-63716 |
medium | 6.5 | 0.0016 | 2026-11-05 | The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery (CS | |
CVE-2025-63718 |
medium | 6.5 | 0.0026 | 2026-11-05 | A SQL injection vulnerability exists in the SourceCodester PQMS (Patient Queue Management | |
CVE-2025-7700 |
medium | 5.3 | 0.0039 | 2026-11-05 | A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memor | |
CVE-2025-63678 |
high | 7.2 | 0.0048 | 2026-11-05 | An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made | |
CVE-2025-63666 |
critical | 9.8 | 0.0050 | 2026-11-05 | 1 PoC | Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account pa |
CVE-2025-63667 |
high | 7.5 | 0.0051 | 2026-11-05 | 1 PoC | Incorrect access control in SIMICAM v1.16.41-20250725, KEVIEW v1.14.92-20241120, ASECAM v1 |
CVE-2025-63289 |
critical | 9.1 | 0.0020 | 2026-11-05 | Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered | |
CVE-2025-63353 |
critical | 9.8 | 0.0133 | 2026-11-05 | 5 PoC | A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default |
CVE-2025-64280 |
critical | 9.8 | 0.0037 | 2026-11-05 | A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attacke | |
CVE-2025-64281 |
critical | 9.8 | 0.0047 | 2026-11-05 | An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attack | |
CVE-2025-52331 |
medium | 6.1 | 0.0033 | 2026-11-05 | Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab Wi | |
CVE-2025-59491 |
medium | 6.1 | 0.0021 | 2026-11-05 | Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form | |
CVE-2025-63419 |
medium | 6.1 | 0.0025 | 2026-11-05 | 2 PoC | Cross Site Scripting (XSS) vulnerability in CrushFTP 11.3.6_48. The Web-Based Server has a |
CVE-2025-60645 |
medium | 6.5 | 0.0016 | 2026-11-05 | A Cross-Site Request Forgery (CSRF) in xxl-api v1.3.0 allows attackers to arbitrarily add | |
CVE-2025-63811 |
high | 7.5 | 0.0028 | 2026-11-05 | An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to c | |
CVE-2025-56385 |
critical | 9.8 | 0.0044 | 2026-11-05 | A SQL injection vulnerability exists in the login functionality of WellSky Harmony version | |
CVE-2025-57310 |
high | 8.8 | 0.0027 | 2026-11-05 | 1 PoC | A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2/Simple-Faucet-Script v1.07 vi |
CVE-2025-60646 |
medium | 6.1 | 0.0021 | 2026-11-05 | A stored cross-site scripting (XSS) in the Business Line Management module of Xxl-api v1.3 | |
CVE-2025-63679 |
high | 7.5 | 0.0043 | 2026-11-05 | free5gc v4.1.0 and before is vulnerable to Buffer Overflow. When AMF receives an UplinkRAN | |
CVE-2025-63927 |
medium | 4.0 | 0.0021 | 2026-11-05 | A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019- | |
CVE-2025-63929 |
high | 7.5 | 0.0037 | 2026-11-05 | A null pointer dereference vulnerability exists in airpig2011 IEC104 thru Commit be6d841 ( | |
CVE-2025-63396 |
low | 3.3 | 0.0013 | 2026-11-05 | An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause | |
CVE-2025-63645 |
medium | 5.4 | 0.0022 | 2026-11-05 | A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating- | |
CVE-2025-52186 |
medium | 6.5 | 0.0034 | 2026-11-05 | Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c (2025-06-02) contains | |
CVE-2025-60682 |
medium | 6.5 | 0.0145 | 2026-11-05 | A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.61 | |
CVE-2025-60683 |
medium | 6.5 | 0.0101 | 2026-11-05 | A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.61 | |
CVE-2025-60684 |
medium | 6.5 | 0.0055 | 2026-11-05 | A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230 | |
CVE-2025-60685 |
medium | 5.1 | 0.0024 | 2026-11-05 | A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614_B2023063 | |
CVE-2025-60686 |
medium | 5.1 | 0.0024 | 2026-11-05 | A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.c | |
CVE-2025-60687 |
medium | 6.5 | 0.0661 | 2026-11-05 | An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router | |
CVE-2025-60688 |
medium | 6.5 | 0.0055 | 2026-11-05 | A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230 | |
CVE-2025-60689 |
medium | 5.4 | 0.1832 | 2026-11-05 | An unauthenticated command injection vulnerability exists in the Start_EPI function of the | |
CVE-2025-60690 |
high | 8.8 | 0.0415 | 2026-11-05 | A stack-based buffer overflow exists in the get_merge_ipaddr function of the httpd binary | |
CVE-2025-60691 |
high | 8.8 | 0.0076 | 2026-11-05 | A stack-based buffer overflow exists in the httpd binary of Linksys E1200 v2 routers (Firm |