Browse All CVEs
9,470 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-66056 |
medium | 4.3 | 0.0027 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2025-65675 |
medium | 5.4 | 0.0025 | 2026-10-29 | Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authentic | |
CVE-2024-5540 |
medium | 6.9 | 0.0034 | 2026-10-29 | The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in | |
CVE-2025-51734 |
medium | 5.4 | 0.0019 | 2026-10-29 | Cross-site scripting (XSS) vulnerability in HCL Technologies Ltd. Unica 12.0.0. | |
CVE-2025-63528 |
medium | 5.4 | 0.0033 | 2026-10-29 | A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 | |
CVE-2025-55076 |
medium | 6.2 | 0.0021 | 2026-10-29 | A local privilege escalation vulnerability exists in the InstallationHelper service includ | |
CVE-2025-62686 |
medium | 6.2 | 0.0019 | 2026-10-29 | A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelpe | |
CVE-2025-63402 |
medium | 5.5 | 0.0033 | 2026-10-29 | An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacke | |
CVE-2025-63499 |
medium | 6.1 | 0.0030 | 2026-10-29 | Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter. | |
CVE-2025-40806 |
medium | 6.9 | 0.0046 | 2026-10-29 | A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The aff | |
CVE-2025-40807 |
medium | 5.3 | 0.0030 | 2026-10-29 | A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The aff | |
CVE-2025-40819 |
medium | 4.3 | 0.0025 | 2026-10-29 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 S | |
CVE-2025-40939 |
medium | 5.1 | 0.0021 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-40940 |
medium | 6.9 | 0.0037 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-40941 |
medium | 5.3 | 0.0028 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-66532 |
medium | 4.3 | 0.0028 | 2026-10-29 | Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting | |
CVE-2025-66533 |
medium | 6.5 | 0.0031 | 2026-10-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in Liquid Web / St | |
CVE-2025-67538 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-67539 |
medium | 6.5 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-67544 |
medium | 6.5 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-67562 |
medium | 5.4 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-captio | |
CVE-2025-67572 |
medium | 5.3 | 0.0025 | 2026-10-29 | Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incor | |
CVE-2025-67573 |
medium | 5.3 | 0.0025 | 2026-10-29 | Missing Authorization vulnerability in ThimPress Sailing sailing allows Exploiting Incorre | |
CVE-2025-67591 |
medium | 4.3 | 0.0012 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in jegtheme JNews Paywall jnews-paywall al | |
CVE-2024-2105 |
medium | 6.5 | 0.0020 | 2026-10-29 | An unauthorised attacker within bluetooth range may use an improper validation during the | |
CVE-2024-58289 |
medium | 5.3 | 0.0026 | 2026-10-29 | Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authent | |
CVE-2024-58291 |
medium | 5.3 | 0.0037 | 2026-10-29 | Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticat | |
CVE-2024-58297 |
medium | 5.3 | 0.0026 | 2026-10-29 | PyroCMS v3.0.1 contains a stored cross-site scripting vulnerability in the admin redirects | |
CVE-2024-58304 |
medium | 5.3 | 0.0031 | 2026-10-29 | SPA-CART CMS before 2.0.0 contains a stored cross-site scripting vulnerability in the prod | |
CVE-2024-29370 |
medium | 5.3 | 0.0019 | 2026-10-29 | In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allows an attacker to cau | |
CVE-2025-54748 |
medium | 6.5 | 0.0039 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2025-59529 |
medium | 5.5 | 0.0022 | 2026-10-29 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS- | |
CVE-2025-67443 |
medium | 6.1 | 0.0019 | 2026-10-29 | Schlix CMS before v2.2.9-5 is vulnerable to Cross Site Scripting (XSS). Due to lack of jav | |
CVE-2024-25814 |
medium | 6.1 | 0.0022 | 2026-10-29 | MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulner | |
CVE-2024-35321 |
medium | 4.3 | 0.0031 | 2026-10-29 | MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting (XSS) vulner | |
CVE-2025-45493 |
medium | 6.5 | 0.0090 | 2026-10-29 | Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in th | |
CVE-2025-65713 |
medium | 4.0 | 0.0040 | 2026-10-29 | Home Assistant Core before v2025.8.0 is vulnerable to Directory Traversal. The Downloader | |
CVE-2024-58335 |
medium | 5.0 | 0.0020 | 2026-10-29 | OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disall | |
CVE-2025-68532 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2024-35322 |
medium | 6.1 | 0.0022 | 2026-10-29 | MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulner | |
CVE-2024-39037 |
medium | 6.5 | 0.0024 | 2026-10-29 | MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerab | |
CVE-2024-29720 |
medium | 5.5 | 0.0018 | 2026-10-29 | An issue in Terra Informatica Software, Inc Sciter v.4.4.7.0 allows a local attacker to ob | |
CVE-2024-42718 |
medium | 6.5 | 0.0065 | 2026-10-29 | A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitra | |
CVE-2025-63031 |
medium | 5.3 | 0.0021 | 2026-10-29 | Missing Authorization vulnerability in WP Grids EasyTest – Simplify A/B Testing convertpro | |
CVE-2023-7331 |
medium | 5.1 | 0.0024 | 2026-10-29 | A vulnerability was detected in PKrystian Full-Stack-Bank up to bf73a0179e3ff07c0d7dc35297 | |
CVE-2026-0546 |
medium | 5.5 | 0.0044 | 2026-10-29 | A vulnerability was determined in code-projects Content Management System 1.0. This impact | |
CVE-2026-0578 |
medium | 5.5 | 0.0054 | 2026-10-29 | A vulnerability has been found in code-projects Online Product Reservation System 1.0. Aff | |
CVE-2026-0585 |
medium | 5.5 | 0.0044 | 2026-10-29 | A security vulnerability has been detected in code-projects Online Product Reservation Sys | |
CVE-2026-0589 |
medium | 5.5 | 0.0057 | 2026-10-29 | A vulnerability was found in code-projects Online Product Reservation System 1.0. Impacted | |
CVE-2026-0592 |
medium | 5.5 | 0.0044 | 2026-10-29 | A security flaw has been discovered in code-projects Online Product Reservation System 1.0 |