Browse All CVEs
50,426 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-22183 |
— | — | — | 2026-11-07 | Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record b | |
CVE-2025-22182 |
— | — | — | 2026-11-07 | Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record b | |
CVE-2025-22181 |
— | — | — | 2026-11-07 | Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record b | |
CVE-2025-22180 |
— | — | — | 2026-11-07 | Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record b | |
CVE-2025-22155 |
— | — | — | 2026-11-07 | Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record b | |
CVE-2025-22154 |
— | — | — | 2026-11-07 | Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record b | |
CVE-2025-5448 |
— | — | — | 2026-11-07 | Rejected reason: This CVE id was assigned but later discarded. | |
CVE-2025-10863 |
— | — | — | 2026-11-07 | Rejected reason: This CVE id was assigned but later discarded. | |
CVE-2025-48864 |
— | — | — | 2026-11-07 | Rejected reason: This CVE id was assigned but later discarded. | |
CVE-2025-48863 |
— | — | — | 2026-11-07 | Rejected reason: This CVE id was assigned but later discarded. | |
CVE-2025-67048 |
— | — | — | 2026-11-07 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-67039. Reason: This reco | |
CVE-2025-67047 |
— | — | — | 2026-11-07 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-67036. Reason: This reco | |
CVE-2025-67046 |
— | — | — | 2026-11-07 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-67037. Reason: This reco | |
CVE-2025-67045 |
— | — | — | 2026-11-07 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-67041. Reason: This reco | |
CVE-2025-67044 |
— | — | — | 2026-11-07 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-67035. Reason: This reco | |
CVE-2025-67043 |
— | — | — | 2026-11-07 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-67038. Reason: This reco | |
CVE-2025-14828 |
— | — | — | 2026-11-07 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was | |
CVE-2025-0852 |
— | — | — | 2026-11-07 | Rejected reason: Voluntarily withdrawn | |
CVE-2026-120531 |
high | 7.2 | 0.0024 | 2026-11-07 | The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable | |
CVE-2026-124060 |
high | 8.5 | 0.0050 | 2026-11-07 | A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the | |
CVE-2026-99284 |
— | — | 0.0021 | 2026-11-07 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagat | |
CVE-2026-99283 |
— | — | 0.0021 | 2026-11-07 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: | |
CVE-2026-124059 |
critical | 9.4 | 0.0049 | 2026-11-07 | A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by thi | |
CVE-2026-124058 |
high | 8.5 | 0.0049 | 2026-11-07 | A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. Affected is the function se | |
CVE-2025-65826 |
critical | 9.8 | 0.0032 | 2026-11-07 | The mobile application was found to contain stored credentials for the network it was deve | |
CVE-2025-63362 |
critical | 9.8 | 0.0061 | 2026-11-07 | Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW | |
CVE-2025-63363 |
high | 7.5 | 0.0030 | 2026-11-07 | A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Eth | |
CVE-2025-63603 |
medium | 6.5 | 0.0086 | 2026-11-07 | A command injection vulnerability exists in the MCP Data Science Server's (reading-plus-ai | |
CVE-2025-63785 |
medium | 6.1 | 0.0029 | 2026-11-07 | A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the text editor feature of | |
CVE-2025-55888 |
high | 7.3 | 0.0044 | 2026-11-07 | 1 PoC | Cross-Site Scripting (XSS) vulnerability was discovered in the Ajax transaction manager en |
CVE-2025-54391 |
critical | 9.1 | 0.0064 | 2026-11-07 | A vulnerability in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration (Z | |
CVE-2025-56557 |
critical | 9.1 | 0.0031 | 2026-11-07 | An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged cont | |
CVE-2025-57625 |
high | 8.8 | 0.0073 | 2026-11-07 | CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerab | |
CVE-2025-57624 |
high | 7.8 | 0.0015 | 2026-11-07 | A DLL hijacking vulnerability in CYRISMA Agent before 444 allows local users to escalate p | |
CVE-2025-56562 |
high | 7.5 | 0.0033 | 2026-11-07 | An incorrect API discovered in Signify Wiz Connected 1.9.1 allows attackers to remotely la | |
CVE-2025-57145 |
medium | 5.4 | 0.0018 | 2026-11-07 | A cross-site scripting (XSS) vulnerability exists in the search-autootaxi.php endpoint of | |
CVE-2025-56295 |
high | 7.3 | 0.0032 | 2026-11-07 | code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can up | |
CVE-2025-56293 |
medium | 5.4 | 0.0021 | 2026-11-07 | code-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting ( | |
CVE-2025-56289 |
medium | 5.4 | 0.0017 | 2026-11-07 | code-projects Document Management System 1.0 has a Cross Site Scripting (XSS) vulnerabilit | |
CVE-2025-56280 |
medium | 5.4 | 0.0022 | 2026-11-07 | code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting (XSS) | |
CVE-2025-57119 |
critical | 9.8 | 0.0056 | 2026-11-07 | An issue in Online Library Management System v.3.0 allows an attacker to escalate privileg | |
CVE-2025-56276 |
medium | 5.4 | 0.0022 | 2026-11-07 | code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting (XSS) | |
CVE-2025-52044 |
high | 7.5 | 0.0039 | 2026-11-07 | In Frappe ERPNext v15.57.5, the function get_stock_balance() at erpnext/stock/utils.py is | |
CVE-2025-44034 |
high | 8.0 | 0.0050 | 2026-11-07 | SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute a | |
CVE-2025-55834 |
medium | 6.1 | 0.0033 | 2026-11-07 | A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker t | |
CVE-2025-57118 |
critical | 9.8 | 0.0056 | 2026-11-07 | An issue in PHPGurukul Online-Library-Management-System v3.0 allows an attacker to escalat | |
CVE-2025-57117 |
medium | 5.4 | 0.0034 | 2026-11-07 | A Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw all | |
CVE-2025-56274 |
high | 8.1 | 0.0043 | 2026-11-07 | SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect | |
CVE-2025-56448 |
medium | 6.8 | 0.0029 | 2026-11-07 | The Positron PX360BT SW REV 8 car alarm system is vulnerable to a replay attack due to a f | |
CVE-2025-49089 |
medium | 6.3 | 0.0031 | 2026-11-07 | wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such a |