Browse All CVEs
50,426 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-56803 |
high | 8.4 | 0.0107 | 2026-11-07 | 1 PoC | Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in th |
CVE-2025-56752 |
critical | 9.4 | 0.0053 | 2026-11-07 | A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote | |
CVE-2025-52494 |
high | 7.5 | 0.0036 | 2026-11-07 | Adacore Ada Web Server (AWS) before 25.2 is vulnerable to a denial-of-service (DoS) condit | |
CVE-2025-45805 |
high | 7.6 | 0.0040 | 2026-11-07 | 1 PoC | In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can i |
CVE-2025-56761 |
medium | 5.4 | 0.0027 | 2026-11-07 | Memos 0.22 is vulnerable to Stored Cross site scripting (XSS) vulnerabilities by the uploa | |
CVE-2025-56760 |
medium | 4.3 | 0.0035 | 2026-11-07 | When Memos 0.22 is configured to store objects locally, an attacker can create a file via | |
CVE-2025-56689 |
medium | 4.6 | 0.0138 | 2026-11-07 | One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerab | |
CVE-2025-56498 |
medium | 5.3 | 0.0172 | 2026-11-07 | An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmwa | |
CVE-2025-56435 |
medium | 5.3 | 0.0035 | 2026-11-07 | SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to execut | |
CVE-2025-55944 |
medium | 6.1 | 0.0027 | 2026-11-07 | Slink v1.4.9 allows stored cross-site scripting (XSS) via crafted SVG uploads. When a user | |
CVE-2025-55852 |
high | 7.5 | 0.0040 | 2026-11-07 | Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function v | |
CVE-2025-57151 |
high | 8.8 | 0.0061 | 2026-11-07 | phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in | |
CVE-2025-57150 |
high | 7.2 | 0.0062 | 2026-11-07 | phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting (X | |
CVE-2025-57149 |
medium | 6.5 | 0.0044 | 2026-11-07 | phpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-de | |
CVE-2025-57148 |
critical | 9.1 | 0.0047 | 2026-11-07 | phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/ins | |
CVE-2025-57147 |
high | 7.5 | 0.0048 | 2026-11-07 | A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0. The | |
CVE-2025-57146 |
high | 8.1 | 0.0044 | 2026-11-07 | phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/r | |
CVE-2025-57052 |
critical | 9.8 | 0.0077 | 2026-11-07 | 1 PoC | cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_poi |
CVE-2025-56608 |
medium | 4.2 | 0.0033 | 2026-11-07 | 1 PoC | The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for d |
CVE-2025-26210 |
high | 8.8 | 0.0060 | 2026-11-07 | DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the contex | |
CVE-2025-55824 |
medium | 6.5 | 0.0025 | 2026-11-07 | ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to wr | |
CVE-2025-55476 |
medium | 6.5 | 0.0027 | 2026-11-07 | FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the | |
CVE-2025-51966 |
medium | 6.1 | 0.0025 | 2026-11-07 | A cross-site scripting (XSS) vulnerability exists in the PDF preview functionality of uToo | |
CVE-2025-50565 |
medium | 6.5 | 0.0025 | 2026-11-07 | 1 PoC | Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, |
CVE-2025-32100 |
medium | 6.5 | 0.0022 | 2026-11-07 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos | |
CVE-2025-32098 |
medium | 5.3 | 0.0025 | 2026-11-07 | An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can ac | |
CVE-2025-55474 |
medium | 6.1 | 0.0038 | 2026-11-07 | Many Notes 0.10.1 is vulnerable to Cross Site Scripting (XSS), which allows malicious Mark | |
CVE-2025-55473 |
medium | 6.1 | 0.0033 | 2026-11-07 | Asian Arts Talents Foundation (AATF) Website v5.1.x and Docker version 2024.12.8.1 are vul | |
CVE-2025-55472 |
medium | 6.5 | 0.0037 | 2026-11-07 | SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers | |
CVE-2025-55373 |
medium | 5.3 | 0.0045 | 2026-11-07 | Incorrect access control in Beakon Application before v5.4.3 allows authenticated attacker | |
CVE-2025-57616 |
high | 7.5 | 0.0036 | 2026-11-07 | An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) A use-after-free vulner | |
CVE-2025-57615 |
high | 7.5 | 0.0036 | 2026-11-07 | An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) An integer overflow vul | |
CVE-2025-57614 |
high | 7.5 | 0.0045 | 2026-11-07 | An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Integer overflow and in | |
CVE-2025-57613 |
high | 7.5 | 0.0036 | 2026-11-07 | An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) A null pointer derefere | |
CVE-2025-57612 |
high | 7.5 | 0.0036 | 2026-11-07 | An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereferenc | |
CVE-2025-57611 |
medium | 5.3 | 0.0027 | 2026-11-07 | An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereferenc | |
CVE-2025-55372 |
medium | 5.3 | 0.0028 | 2026-11-07 | An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attacker | |
CVE-2025-54599 |
high | 7.5 | 0.0043 | 2026-11-07 | The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activi | |
CVE-2025-50757 |
medium | 6.5 | 0.0185 | 2026-11-07 | Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set | |
CVE-2025-50755 |
medium | 6.5 | 0.0108 | 2026-11-07 | Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set | |
CVE-2025-46047 |
medium | 6.5 | 0.0036 | 2026-11-07 | 1 PoC | A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Sil |
CVE-2025-57140 |
critical | 9.8 | 0.0038 | 2026-11-07 | rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path. | |
CVE-2025-56254 |
medium | 4.3 | 0.0021 | 2026-11-07 | PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Referen | |
CVE-2025-56577 |
high | 8.4 | 0.0014 | 2026-11-07 | An issue in Evope Core v.1.1.3.20 allows a local attacker to obtain sensitive information | |
CVE-2025-44033 |
critical | 9.8 | 0.0063 | 2026-11-07 | SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute a | |
CVE-2025-55763 |
high | 7.5 | 0.0120 | 2026-11-07 | 1 PoC | Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote a |
CVE-2025-55580 |
medium | 5.4 | 0.0027 | 2026-11-07 | 1 PoC | SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in t |
CVE-2025-55579 |
medium | 5.4 | 0.0027 | 2026-11-07 | 1 PoC | SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in t |
CVE-2025-54369 |
critical | 9.3 | 0.0044 | 2026-11-07 | Node-SAML is a SAML library not dependent on any frameworks that runs in Node. In versions | |
CVE-2025-52363 |
medium | 6.8 | 0.0024 | 2026-11-07 | Tenda CP3 Pro Firmware V22.5.4.93 contains a hardcoded root password hash in the /etc/pass |