Browse All CVEs
50,426 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-57248 |
high | 7.3 | 0.0024 | 2026-11-07 | A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the pro | |
CVE-2025-56252 |
medium | 6.1 | 0.0023 | 2026-11-07 | Cross Site Scripting (xss) vulnerability in ServitiumCRM 2.10 allowing attackers to execut | |
CVE-2025-56710 |
high | 7.3 | 0.0020 | 2026-11-07 | A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of th | |
CVE-2025-45585 |
medium | 5.4 | 0.0021 | 2026-11-07 | Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal Traff | |
CVE-2025-45584 |
high | 7.5 | 0.0042 | 2026-11-07 | Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 | |
CVE-2025-45583 |
critical | 9.1 | 0.0036 | 2026-11-07 | Incorrect access control in the FTP protocol of Audi UTR 2.0 Universal Traffic Recorder 2. | |
CVE-2025-56467 |
medium | 6.5 | 0.0030 | 2026-11-07 | An issue was discovered in AXIS BANK LIMITED Axis Mobile App 9.9 that allows attackers to | |
CVE-2025-52074 |
medium | 6.1 | 0.0023 | 2026-11-07 | PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) due to l | |
CVE-2025-57579 |
high | 8.0 | 0.0061 | 2026-11-07 | An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacke | |
CVE-2025-57578 |
high | 8.0 | 0.0046 | 2026-11-07 | An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary co | |
CVE-2025-57577 |
high | 8.0 | 0.0059 | 2026-11-07 | An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via | |
CVE-2025-55835 |
critical | 9.8 | 0.0088 | 2026-11-07 | File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrar | |
CVE-2025-55996 |
medium | 6.3 | 0.0019 | 2026-11-07 | 1 PoC | Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message |
CVE-2025-56556 |
low | 3.8 | 0.0020 | 2026-11-07 | An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or mode | |
CVE-2025-57633 |
critical | 9.8 | 0.0143 | 2026-11-07 | A command injection vulnerability in FTP-Flask-python through 5173b68 allows unauthenticat | |
CVE-2025-44595 |
medium | 6.1 | 0.0024 | 2026-11-07 | Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archive | |
CVE-2025-44593 |
medium | 6.1 | 0.0026 | 2026-11-07 | Halo prior to 2.20.13 allows bypassing file type detection and uploading malicious files s | |
CVE-2025-44594 |
critical | 9.1 | 0.0037 | 2026-11-07 | halo v2.20.17 and before is vulnerable to server-side request forgery (SSRF) in /apis/uc.a | |
CVE-2025-57278 |
high | 8.8 | 0.0043 | 2026-11-07 | The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800_B10_ALK_SL_V01.01.02P | |
CVE-2025-57060 |
high | 7.5 | 0.0049 | 2026-11-07 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the rules parame | |
CVE-2025-29089 |
high | 7.5 | 0.0050 | 2026-11-07 | An issue in TP-Link AX10 Ax1500 v.1.3.10 Build (20230130) allows a remote attacker to obta | |
CVE-2025-57665 |
medium | 6.4 | 0.0025 | 2026-11-07 | Element Plus Link component (el-link) through 2.10.6 implements insufficient input validat | |
CVE-2025-57086 |
high | 7.5 | 0.0040 | 2026-11-07 | Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the String par | |
CVE-2025-57061 |
high | 7.5 | 0.0049 | 2026-11-07 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the form | |
CVE-2025-57059 |
high | 7.5 | 0.0049 | 2026-11-07 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex pa | |
CVE-2025-57058 |
high | 7.5 | 0.0049 | 2026-11-07 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the form | |
CVE-2025-57057 |
high | 7.5 | 0.0049 | 2026-11-07 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr para | |
CVE-2025-52322 |
high | 7.5 | 0.0054 | 2026-11-07 | An issue in Open5GS v2.7.2 and before allows a remote attacker to cause a denial of servic | |
CVE-2025-52277 |
medium | 6.1 | 0.0039 | 2026-11-07 | Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute a | |
CVE-2025-52288 |
high | 7.5 | 0.0050 | 2026-11-07 | Assertion failure in function ngap_build_downlink_nas_transport in file src/amf/ngap-build | |
CVE-2025-52389 |
high | 8.8 | 0.0042 | 2026-11-07 | An Insecure Direct Object Reference (IDOR) in Envasadora H2O Eireli - Soda Cristal v40.20. | |
CVE-2025-55849 |
high | 8.4 | 0.0020 | 2026-11-07 | WeiPHP v5.0 and before is vulnerable to SQL Injection via the SucaiController.class.php fi | |
CVE-2025-57285 |
critical | 9.8 | 0.0217 | 2026-11-07 | codeceptjs 3.7.3 contains a command injection vulnerability in the emptyFolder function (l | |
CVE-2025-56267 |
critical | 9.8 | 0.0075 | 2026-11-07 | A CSV injection vulnerability in the /id_profiles endpoint of Avigilon ACM v7.10.0.20 allo | |
CVE-2025-56266 |
critical | 9.8 | 0.0301 | 2026-11-07 | A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execu | |
CVE-2025-56265 |
high | 8.8 | 0.0064 | 2026-11-07 | An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.10 | |
CVE-2025-10099 |
low | 1.9 | 0.0035 | 2026-11-07 | A weakness has been identified in Portabilis i-Educar up to 2.10. Affected by this vulnera | |
CVE-2025-51586 |
low | 3.7 | 0.0085 | 2026-11-07 | 1 PoC | An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop be |
CVE-2025-57141 |
critical | 9.8 | 0.0076 | 2026-11-07 | rsbi-os 4.7 is vulnerable to Remote Code Execution (RCE) in sqlite-jdbc. | |
CVE-2025-56630 |
high | 7.3 | 0.0022 | 2026-11-07 | FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in | |
CVE-2025-55998 |
high | 8.1 | 0.0035 | 2026-11-07 | 1 PoC | A cross-site scripting (XSS) vulnerability in Smart Search & Filter Shopify and BigCommerc |
CVE-2025-52161 |
critical | 9.8 | 0.0039 | 2026-11-07 | Scholl Communications AG Weblication CMS Core v019.004.000.000 was discovered to contain a | |
CVE-2025-22956 |
critical | 9.8 | 0.0037 | 2026-11-07 | OPSI before 4.3 allows any client to retrieve any ProductPropertyState, including those of | |
CVE-2025-10074 |
low | 2.0 | 0.0035 | 2026-11-07 | A vulnerability was identified in Portabilis i-Educar up to 2.10. The affected element is | |
CVE-2025-10071 |
low | 2.1 | 0.0040 | 2026-11-07 | A vulnerability has been found in Portabilis i-Educar up to 2.10. This vulnerability affec | |
CVE-2025-10070 |
low | 2.1 | 0.0040 | 2026-11-07 | A flaw has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of t | |
CVE-2025-58375 |
high | 8.1 | 0.0038 | 2026-11-07 | Frappe is a full-stack web application framework. Versions 14.96.9 and below, and 15.0.0 t | |
CVE-2025-57576 |
medium | 5.4 | 0.0021 | 2026-11-07 | 1 PoC | PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admi |
CVE-2025-57263 |
high | 7.2 | 0.0040 | 2026-11-07 | An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with ad | |
CVE-2025-56139 |
medium | 5.3 | 0.0033 | 2026-11-07 | LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview me |