Browse All CVEs
9,465 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-34282 |
medium | 6.9 | 0.0182 | 2026-10-29 | ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in | |
CVE-2025-60934 |
medium | 6.1 | 0.0019 | 2026-10-29 | Multiple stored cross-site scripting (XSS) vulnerabilities in the index.php component of H | |
CVE-2025-60790 |
medium | 6.5 | 0.0043 | 2026-10-29 | ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZI | |
CVE-2025-61457 |
medium | 6.1 | 0.0032 | 2026-10-29 | code16 Sharp v9.6.6 is vulnerable to Cross Site Scripting (XSS) src/Form/Fields/SharpFormU | |
CVE-2025-49936 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-59593 |
medium | 5.9 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62058 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62396 |
medium | 5.3 | 0.0030 | 2026-10-29 | An error-handling issue in the Moodle router (r.php) could cause the application to displa | |
CVE-2025-50949 |
medium | 6.5 | 0.0026 | 2026-10-29 | FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8. | |
CVE-2025-34155 |
medium | 6.9 | 0.0053 | 2026-10-29 | Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in i | |
CVE-2025-34156 |
medium | 6.9 | 0.0037 | 2026-10-29 | Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an | |
CVE-2025-46185 |
medium | 6.2 | 0.0014 | 2026-10-29 | An Insecure Permission vulnerability in pgcodekeeper 10.12.0 allows a local attacker to ob | |
CVE-2023-37749 |
medium | 5.3 | 0.0035 | 2026-10-29 | Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticat | |
CVE-2025-64197 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-64202 |
medium | 6.5 | 0.0016 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-64212 |
medium | 5.4 | 0.0022 | 2026-10-29 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms- | |
CVE-2025-60542 |
medium | 6.5 | 0.0027 | 2026-10-29 | SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.sav | |
CVE-2025-60319 |
medium | 6.5 | 0.0026 | 2026-10-29 | PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authoriz | |
CVE-2025-63448 |
medium | 6.1 | 0.0030 | 2026-10-29 | Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit_product. | |
CVE-2025-50363 |
medium | 5.4 | 0.0025 | 2026-10-29 | Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) i | |
CVE-2025-60925 |
medium | 5.3 | 0.0033 | 2026-10-29 | codeshare v1.0.0 was discovered to contain an information leakage vulnerability. | |
CVE-2025-54335 |
medium | 6.5 | 0.0022 | 2026-10-29 | An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1 | |
CVE-2025-57244 |
medium | 5.4 | 0.0022 | 2026-10-29 | OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting (XSS) in the | |
CVE-2025-63418 |
medium | 6.1 | 0.0023 | 2026-10-29 | A DOM-based Cross-Site Scripting (XSS) vulnerability in the SelfBest platform 2023.3 allow | |
CVE-2025-62028 |
medium | 4.3 | 0.0024 | 2026-10-29 | Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Sali | |
CVE-2025-62032 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62033 |
medium | 6.5 | 0.0030 | 2026-10-29 | Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a t | |
CVE-2025-62037 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a t | |
CVE-2025-13013 |
medium | 6.1 | 0.0022 | 2026-10-29 | Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firef | |
CVE-2025-40760 |
medium | 6.8 | 0.0014 | 2026-10-29 | A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affe | |
CVE-2025-9316 |
medium | 6.9 | 0.3739 | 2026-10-29 | N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affec | |
CVE-2024-44632 |
medium | 6.5 | 0.0026 | 2026-10-29 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emaili | |
CVE-2024-44635 |
medium | 6.1 | 0.0024 | 2026-10-29 | PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via admi | |
CVE-2024-44636 |
medium | 6.5 | 0.0021 | 2026-10-29 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and | |
CVE-2024-44639 |
medium | 6.5 | 0.0026 | 2026-10-29 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, s | |
CVE-2024-55016 |
medium | 6.5 | 0.0026 | 2026-10-29 | PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id | |
CVE-2025-40834 |
medium | 6.8 | 0.0025 | 2026-10-29 | A vulnerability has been identified in Mendix RichText (All versions >= V4.0.0 < V4.6.1). | |
CVE-2024-44647 |
medium | 6.1 | 0.0024 | 2026-10-29 | PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark param | |
CVE-2024-44648 |
medium | 6.5 | 0.0026 | 2026-10-29 | PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters | |
CVE-2024-44652 |
medium | 6.5 | 0.0026 | 2026-10-29 | Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, usernam | |
CVE-2024-46334 |
medium | 6.1 | 0.0024 | 2026-10-29 | kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the | |
CVE-2024-46336 |
medium | 6.1 | 0.0024 | 2026-10-29 | kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /cl | |
CVE-2024-44653 |
medium | 6.5 | 0.0026 | 2026-10-29 | Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email paramete | |
CVE-2024-44662 |
medium | 6.5 | 0.0026 | 2026-10-29 | PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username para | |
CVE-2025-34336 |
medium | 6.9 | 0.0046 | 2026-10-29 | eGovFramework/egovframe-common-components versions up to and including 4.3.1 contain an un | |
CVE-2025-66056 |
medium | 4.3 | 0.0027 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2025-65675 |
medium | 5.4 | 0.0025 | 2026-10-29 | Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authentic | |
CVE-2024-5540 |
medium | 6.9 | 0.0034 | 2026-10-29 | The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in | |
CVE-2025-51734 |
medium | 5.4 | 0.0019 | 2026-10-29 | Cross-site scripting (XSS) vulnerability in HCL Technologies Ltd. Unica 12.0.0. | |
CVE-2025-63528 |
medium | 5.4 | 0.0033 | 2026-10-29 | A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 |