Browse All CVEs
9,469 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2024-0443 |
medium | 5.5 | 0.0025 | 2026-10-29 | A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, | |
CVE-2023-6915 |
medium | 5.5 | 0.0028 | 2026-10-29 | A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. | |
CVE-2024-28835 |
medium | 5.0 | 0.0039 | 2026-10-29 | A flaw has been discovered in GnuTLS where an application crash can be induced when attemp | |
CVE-2024-28834 |
medium | 5.3 | 0.0072 | 2026-10-29 | A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that explo | |
CVE-2023-6717 |
medium | 6.0 | 0.0071 | 2026-10-29 | A flaw was found in the SAML client registration in Keycloak that could allow an administr | |
CVE-2023-36640 |
medium | 6.7 | 0.0028 | 2026-10-29 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, Fort | |
CVE-2024-38564 |
medium | 5.5 | 0.0024 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYP | |
CVE-2024-21753 |
medium | 6.0 | 0.0080 | 2026-10-29 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerabi | |
CVE-2024-9355 |
medium | 6.5 | 0.0030 | 2026-10-29 | A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to ran | |
CVE-2024-9407 |
medium | 4.7 | 0.0029 | 2026-10-29 | A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instru | |
CVE-2024-52615 |
medium | 5.3 | 0.0062 | 2026-10-29 | A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS que | |
CVE-2024-52616 |
medium | 5.3 | 0.0073 | 2026-10-29 | A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly on | |
CVE-2024-11831 |
medium | 5.4 | 0.0112 | 2026-10-29 | A flaw was found in npm-serialize-javascript. The vulnerability occurs because the seriali | |
CVE-2024-12133 |
medium | 5.3 | 0.0111 | 2026-10-29 | A flaw in libtasn1 causes inefficient handling of specific certificate data. When processi | |
CVE-2024-12243 |
medium | 5.3 | 0.0129 | 2026-10-29 | A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an | |
CVE-2025-26926 |
medium | 4.3 | 0.0016 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Booknetic Booknetic booknetic allows Cr | |
CVE-2025-2707 |
medium | 5.3 | 0.0073 | 2026-10-29 | A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1. This impacts an unkno | |
CVE-2025-2708 |
medium | 5.3 | 0.0074 | 2026-10-29 | A vulnerability was identified in zhijiantianya ruoyi-vue-pro 2.4.1. Affected is an unknow | |
CVE-2025-6425 |
medium | 4.3 | 0.0031 | 2026-10-29 | An attacker who enumerated resources from the WebCompat extension could have obtained a pe | |
CVE-2025-6430 |
medium | 6.1 | 0.0027 | 2026-10-29 | When a file download is specified via the `Content-Disposition` header, that directive wou | |
CVE-2025-52543 |
medium | 5.3 | 0.0031 | 2026-10-29 | E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) | |
CVE-2025-52546 |
medium | 5.1 | 0.0020 | 2026-10-29 | E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allo | |
CVE-2024-21970 |
medium | 4.4 | 0.0014 | 2026-10-29 | Improper validation of an array index in the AND power Management Firmware could allow a p | |
CVE-2024-36346 |
medium | 6.0 | 0.0013 | 2026-10-29 | Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged | |
CVE-2025-40594 |
medium | 6.9 | 0.0021 | 2026-10-29 | A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAM | |
CVE-2024-45431 |
medium | 5.3 | 0.0563 | 2026-10-29 | OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific | |
CVE-2025-41713 |
medium | 6.5 | 0.0037 | 2026-10-29 | During a short time frame while the device is booting an unauthenticated remote attacker c | |
CVE-2025-10290 |
medium | 6.5 | 0.0025 | 2026-10-29 | Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to l | |
CVE-2025-10529 |
medium | 6.5 | 0.0032 | 2026-10-29 | Same-origin policy bypass in the Layout component. This vulnerability was fixed in Firefox | |
CVE-2025-10532 |
medium | 6.5 | 0.0033 | 2026-10-29 | Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixe | |
CVE-2025-10536 |
medium | 6.2 | 0.0016 | 2026-10-29 | Information disclosure in the Networking: Cache component. This vulnerability was fixed in | |
CVE-2024-5200 |
medium | 4.8 | 0.0018 | 2026-10-29 | The Postie WordPress plugin before 1.9.71 does not sanitise and escape some of its setting | |
CVE-2023-53658 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: spi: bcm-qspi: return | |
CVE-2023-53661 |
medium | 5.5 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow | |
CVE-2023-53662 |
medium | 5.5 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak | |
CVE-2023-53664 |
medium | 5.5 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: OPP: Fix potential nu | |
CVE-2023-53674 |
medium | 5.5 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: clk: Fix memory leak | |
CVE-2023-53677 |
medium | 5.5 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix memory | |
CVE-2023-53678 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix system | |
CVE-2023-53679 |
medium | 5.5 | 0.0024 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt7601u: fix an | |
CVE-2023-53681 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: bcache: Fix __bch_btr | |
CVE-2023-53682 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (xgene) Fix io | |
CVE-2023-53683 |
medium | 5.5 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove W | |
CVE-2023-53684 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: xfrm: Zero padding wh | |
CVE-2023-53685 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: tun: Fix memory leak | |
CVE-2023-53686 |
medium | 5.5 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/handshake: fix nu | |
CVE-2023-53687 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_ | |
CVE-2025-11183 |
medium | 6.9 | 0.0042 | 2026-10-29 | Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 <2025.08.14 allows an a | |
CVE-2025-11184 |
medium | 6.9 | 0.0042 | 2026-10-29 | Cross-site scripting vulnerability in QGIS QWC2 Registration GUI <=v2025.03.31 allows an a | |
CVE-2025-40773 |
medium | 5.1 | 0.0020 | 2026-10-29 | A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected s |