Browse All CVEs
49,628 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-124554 |
medium | 5.5 | 0.0025 | 2026-11-09 | A security flaw has been discovered in JeecgBoot 3.9.5. This affects an unknown part of th | |
CVE-2026-124509 |
medium | 5.5 | 0.0052 | 2026-11-09 | A vulnerability was identified in floci-io Floci up to 2.1.0. The affected element is the | |
CVE-2026-124508 |
medium | 5.5 | 0.0075 | 2026-11-09 | A vulnerability was determined in floci-io Floci up to 2.4.0. Impacted is the function Bui | |
CVE-2026-124507 |
medium | 5.5 | 0.0031 | 2026-11-09 | A vulnerability was found in conductor-oss conductor up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0- | |
CVE-2026-124504 |
low | 2.1 | 0.0021 | 2026-11-09 | A vulnerability was detected in erupts erupt up to 2.3.0. Affected by this issue is the fu | |
CVE-2026-124505 |
low | 2.1 | 0.0025 | 2026-11-09 | A flaw has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This affects the function Handl | |
CVE-2026-124506 |
low | 2.1 | 0.0026 | 2026-11-09 | A vulnerability has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This vulnerability aff | |
CVE-2026-119506 |
critical | 9.1 | 0.0030 | 2026-11-09 | Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps ac | |
CVE-2026-124502 |
low | 2.1 | 0.0022 | 2026-11-09 | A security vulnerability has been detected in yungifez Skuul School Management System up t | |
CVE-2026-124500 |
low | 2.1 | 0.0020 | 2026-11-09 | A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. Th | |
CVE-2026-124501 |
medium | 5.5 | 0.0028 | 2026-11-09 | A weakness has been identified in Tidelift moto up to 5.2.4. Affected is an unknown functi | |
CVE-2026-124499 |
low | 2.0 | 0.0024 | 2026-11-08 | A vulnerability was identified in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This af | |
CVE-2026-124498 |
low | 2.0 | 0.0019 | 2026-11-08 | A vulnerability was determined in Convene Azeus Convene Board Management Portal 7.0.2.7_3 | |
CVE-2024-45161 |
medium | 4.6 | 0.0015 | 2026-11-08 | A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220 | |
CVE-2024-56426 |
high | 7.5 | 0.0051 | 2026-11-08 | 2 PoC | An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990 |
CVE-2024-25621 |
high | 7.8 | 0.0017 | 2026-11-08 | containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta. | |
CVE-2024-57695 |
high | 7.7 | 0.0022 | 2026-11-08 | An issue in Agnitum Outpost Security Suite 7.5.3 (3942.608.1810) and 7.6 (3984.693.1842) a | |
CVE-2024-45301 |
medium | 5.3 | 0.0031 | 2026-11-08 | Mintty is a terminal emulator for Cygwin, MSYS, and WSL. In versions 2.3.6 through 3.7.4, | |
CVE-2024-47866 |
high | 7.5 | 0.0048 | 2026-11-08 | Ceph is a distributed object, block, and file storage platform. In versions up to and incl | |
CVE-2024-42749 |
medium | 6.1 | 0.0028 | 2026-11-08 | Cross Site Scripting vulnerability in Alto CMS v.1.1.13 allows a local attacker to execute | |
CVE-2024-44633 |
medium | 6.5 | 0.0026 | 2026-11-08 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpasswo | |
CVE-2024-44640 |
medium | 6.5 | 0.0026 | 2026-11-08 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, | |
CVE-2024-44644 |
medium | 6.5 | 0.0026 | 2026-11-08 | PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark paramet | |
CVE-2024-44651 |
medium | 6.5 | 0.0026 | 2026-11-08 | Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email param | |
CVE-2024-44654 |
medium | 6.5 | 0.0026 | 2026-11-08 | PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email an | |
CVE-2024-44655 |
medium | 6.1 | 0.0024 | 2026-11-08 | PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via | |
CVE-2024-44658 |
medium | 6.5 | 0.0026 | 2026-11-08 | PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcateg | |
CVE-2024-44660 |
medium | 6.5 | 0.0026 | 2026-11-08 | PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, ema | |
CVE-2024-44663 |
medium | 6.5 | 0.0026 | 2026-11-08 | PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product param | |
CVE-2024-46335 |
medium | 4.6 | 0.0022 | 2026-11-08 | PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting (XSS) via | |
CVE-2024-44661 |
medium | 5.4 | 0.0024 | 2026-11-08 | PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the | |
CVE-2024-44664 |
medium | 6.5 | 0.0026 | 2026-11-08 | PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary | |
CVE-2024-8527 |
high | 8.6 | 0.0017 | 2026-11-08 | Open Redirect in URL parameter in Automated Logic WebCTRL and Carrier i-Vu versions 6.0, 6 | |
CVE-2024-8528 |
medium | 5.4 | 0.0013 | 2026-11-08 | Reflected XSS using a specific URL in Automated Logic WebCTRL and Carrier i-VU can allow d | |
CVE-2024-47856 |
critical | 9.8 | 0.0057 | 2026-11-08 | In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerab | |
CVE-2024-5539 |
critical | 9.2 | 0.0036 | 2026-11-08 | The Access Control Bypass vulnerability found in ALC WebCTRL and Carrier i-Vu in versions | |
CVE-2024-32384 |
high | 7.4 | 0.0019 | 2026-11-08 | Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusivel | |
CVE-2024-32388 |
medium | 5.3 | 0.0099 | 2026-11-08 | Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectl | |
CVE-2024-2104 |
high | 8.8 | 0.0025 | 2026-11-08 | Due to improper BLE security configurations on the device's GATT server, an adjacent unaut | |
CVE-2024-14028 |
medium | 6.5 | 0.0021 | 2026-11-08 | Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allow | |
CVE-2024-36057 |
critical | 9.8 | 0.0187 | 2026-11-08 | 1 PoC | Koha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipp |
CVE-2024-36058 |
critical | 9.8 | 0.0050 | 2026-11-08 | 1 PoC | The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based |
CVE-2024-1490 |
high | 7.2 | 0.0074 | 2026-11-08 | An authenticated remote attacker with high privileges can exploit the OpenVPN configuratio | |
CVE-2024-23104 |
medium | 4.3 | 0.0027 | 2026-11-08 | An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet Fo | |
CVE-2024-33618 |
high | 7.5 | 0.0047 | 2026-11-08 | Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows | |
CVE-2024-53412 |
high | 8.4 | 0.0058 | 2026-11-08 | Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an atta | |
CVE-2024-2374 |
critical | 9.1 | 0.0038 | 2026-11-08 | The XML parsers within multiple WSO2 products accept user-supplied XML data without proper | |
CVE-2024-46636 |
critical | 9.4 | 0.0033 | 2026-11-08 | 1 PoC | NASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovere |
CVE-2024-0391 |
medium | 4.3 | 0.0018 | 2026-11-08 | The check user account lock states feature within the email OTP flow fails to validate use | |
CVE-2026-64231 |
medium | 5.5 | 0.0012 | 2026-11-08 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't du |