Browse All CVEs
48,523 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-55824 |
medium | 6.5 | 0.0025 | 2026-11-07 | ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to wr | |
CVE-2025-26210 |
high | 8.8 | 0.0060 | 2026-11-07 | DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the contex | |
CVE-2025-56608 |
medium | 4.2 | 0.0033 | 2026-11-07 | 1 PoC | The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for d |
CVE-2025-57052 |
critical | 9.8 | 0.0077 | 2026-11-07 | 1 PoC | cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_poi |
CVE-2025-57146 |
high | 8.1 | 0.0044 | 2026-11-07 | phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/r | |
CVE-2025-57147 |
high | 7.5 | 0.0048 | 2026-11-07 | A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0. The | |
CVE-2025-57148 |
critical | 9.1 | 0.0047 | 2026-11-07 | phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/ins | |
CVE-2025-57149 |
medium | 6.5 | 0.0044 | 2026-11-07 | phpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-de | |
CVE-2025-57150 |
high | 7.2 | 0.0062 | 2026-11-07 | phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting (X | |
CVE-2025-57151 |
high | 8.8 | 0.0061 | 2026-11-07 | phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in | |
CVE-2025-55852 |
high | 7.5 | 0.0040 | 2026-11-07 | Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function v | |
CVE-2025-55944 |
medium | 6.1 | 0.0027 | 2026-11-07 | Slink v1.4.9 allows stored cross-site scripting (XSS) via crafted SVG uploads. When a user | |
CVE-2025-56435 |
medium | 5.3 | 0.0035 | 2026-11-07 | SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to execut | |
CVE-2025-56498 |
medium | 5.3 | 0.0172 | 2026-11-07 | An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmwa | |
CVE-2025-56689 |
medium | 4.6 | 0.0138 | 2026-11-07 | One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerab | |
CVE-2025-56760 |
medium | 4.3 | 0.0035 | 2026-11-07 | When Memos 0.22 is configured to store objects locally, an attacker can create a file via | |
CVE-2025-56761 |
medium | 5.4 | 0.0027 | 2026-11-07 | Memos 0.22 is vulnerable to Stored Cross site scripting (XSS) vulnerabilities by the uploa | |
CVE-2025-45805 |
high | 7.6 | 0.0040 | 2026-11-07 | 1 PoC | In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can i |
CVE-2025-52494 |
high | 7.5 | 0.0036 | 2026-11-07 | Adacore Ada Web Server (AWS) before 25.2 is vulnerable to a denial-of-service (DoS) condit | |
CVE-2025-56752 |
critical | 9.4 | 0.0053 | 2026-11-07 | A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote | |
CVE-2025-56803 |
high | 8.4 | 0.0107 | 2026-11-07 | 1 PoC | Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in th |
CVE-2025-56139 |
medium | 5.3 | 0.0033 | 2026-11-07 | LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview me | |
CVE-2025-57263 |
high | 7.2 | 0.0040 | 2026-11-07 | An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with ad | |
CVE-2025-57576 |
medium | 5.4 | 0.0021 | 2026-11-07 | 1 PoC | PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admi |
CVE-2025-58375 |
high | 8.1 | 0.0038 | 2026-11-07 | Frappe is a full-stack web application framework. Versions 14.96.9 and below, and 15.0.0 t | |
CVE-2025-10070 |
low | 2.1 | 0.0040 | 2026-11-07 | A flaw has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of t | |
CVE-2025-10071 |
low | 2.1 | 0.0040 | 2026-11-07 | A vulnerability has been found in Portabilis i-Educar up to 2.10. This vulnerability affec | |
CVE-2025-10074 |
low | 2.0 | 0.0035 | 2026-11-07 | A vulnerability was identified in Portabilis i-Educar up to 2.10. The affected element is | |
CVE-2025-22956 |
critical | 9.8 | 0.0037 | 2026-11-07 | OPSI before 4.3 allows any client to retrieve any ProductPropertyState, including those of | |
CVE-2025-52161 |
critical | 9.8 | 0.0039 | 2026-11-07 | Scholl Communications AG Weblication CMS Core v019.004.000.000 was discovered to contain a | |
CVE-2025-55998 |
high | 8.1 | 0.0035 | 2026-11-07 | 1 PoC | A cross-site scripting (XSS) vulnerability in Smart Search & Filter Shopify and BigCommerc |
CVE-2025-56630 |
high | 7.3 | 0.0022 | 2026-11-07 | FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in | |
CVE-2025-57141 |
critical | 9.8 | 0.0076 | 2026-11-07 | rsbi-os 4.7 is vulnerable to Remote Code Execution (RCE) in sqlite-jdbc. | |
CVE-2025-51586 |
low | 3.7 | 0.0085 | 2026-11-07 | 1 PoC | An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop be |
CVE-2025-10099 |
low | 1.9 | 0.0035 | 2026-11-07 | A weakness has been identified in Portabilis i-Educar up to 2.10. Affected by this vulnera | |
CVE-2025-56265 |
high | 8.8 | 0.0064 | 2026-11-07 | An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.10 | |
CVE-2025-56266 |
critical | 9.8 | 0.0301 | 2026-11-07 | A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execu | |
CVE-2025-56267 |
critical | 9.8 | 0.0075 | 2026-11-07 | A CSV injection vulnerability in the /id_profiles endpoint of Avigilon ACM v7.10.0.20 allo | |
CVE-2025-57285 |
critical | 9.8 | 0.0217 | 2026-11-07 | codeceptjs 3.7.3 contains a command injection vulnerability in the emptyFolder function (l | |
CVE-2025-55849 |
high | 8.4 | 0.0020 | 2026-11-07 | WeiPHP v5.0 and before is vulnerable to SQL Injection via the SucaiController.class.php fi | |
CVE-2025-52389 |
high | 8.8 | 0.0042 | 2026-11-07 | An Insecure Direct Object Reference (IDOR) in Envasadora H2O Eireli - Soda Cristal v40.20. | |
CVE-2025-52288 |
high | 7.5 | 0.0050 | 2026-11-07 | Assertion failure in function ngap_build_downlink_nas_transport in file src/amf/ngap-build | |
CVE-2025-52277 |
medium | 6.1 | 0.0039 | 2026-11-07 | Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute a | |
CVE-2025-52322 |
high | 7.5 | 0.0054 | 2026-11-07 | An issue in Open5GS v2.7.2 and before allows a remote attacker to cause a denial of servic | |
CVE-2025-57057 |
high | 7.5 | 0.0049 | 2026-11-07 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr para | |
CVE-2025-57058 |
high | 7.5 | 0.0049 | 2026-11-07 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the form | |
CVE-2025-57059 |
high | 7.5 | 0.0049 | 2026-11-07 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex pa | |
CVE-2025-57061 |
high | 7.5 | 0.0049 | 2026-11-07 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the form | |
CVE-2025-57086 |
high | 7.5 | 0.0040 | 2026-11-07 | Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the String par | |
CVE-2025-57665 |
medium | 6.4 | 0.0025 | 2026-11-07 | Element Plus Link component (el-link) through 2.10.6 implements insufficient input validat |