Browse All CVEs
10,181 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2023-53678 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix system | |
CVE-2023-53679 |
medium | 5.5 | 0.0024 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt7601u: fix an | |
CVE-2023-53681 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: bcache: Fix __bch_btr | |
CVE-2023-53682 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (xgene) Fix io | |
CVE-2023-53683 |
medium | 5.5 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove W | |
CVE-2023-53684 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: xfrm: Zero padding wh | |
CVE-2023-53685 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: tun: Fix memory leak | |
CVE-2023-53686 |
medium | 5.5 | 0.0013 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/handshake: fix nu | |
CVE-2023-53687 |
medium | 5.5 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_ | |
CVE-2025-11183 |
medium | 6.9 | 0.0042 | 2026-10-29 | Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 <2025.08.14 allows an a | |
CVE-2025-11184 |
medium | 6.9 | 0.0042 | 2026-10-29 | Cross-site scripting vulnerability in QGIS QWC2 Registration GUI <=v2025.03.31 allows an a | |
CVE-2025-40773 |
medium | 5.1 | 0.0020 | 2026-10-29 | A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected s | |
CVE-2025-40774 |
medium | 6.7 | 0.0014 | 2026-10-29 | A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected s | |
CVE-2025-11711 |
medium | 6.5 | 0.0023 | 2026-10-29 | There was a way to change the value of JavaScript Object properties that were supposed to | |
CVE-2025-11712 |
medium | 6.1 | 0.0022 | 2026-10-29 | A malicious page could have used the type attribute of an OBJECT tag to override the defau | |
CVE-2024-47569 |
medium | 4.3 | 0.0047 | 2026-10-29 | A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7. | |
CVE-2025-34282 |
medium | 6.9 | 0.0182 | 2026-10-29 | ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in | |
CVE-2025-60934 |
medium | 6.1 | 0.0019 | 2026-10-29 | Multiple stored cross-site scripting (XSS) vulnerabilities in the index.php component of H | |
CVE-2025-60790 |
medium | 6.5 | 0.0043 | 2026-10-29 | ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZI | |
CVE-2025-61457 |
medium | 6.1 | 0.0032 | 2026-10-29 | code16 Sharp v9.6.6 is vulnerable to Cross Site Scripting (XSS) src/Form/Fields/SharpFormU | |
CVE-2025-49936 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-59593 |
medium | 5.9 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62058 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62396 |
medium | 5.3 | 0.0030 | 2026-10-29 | An error-handling issue in the Moodle router (r.php) could cause the application to displa | |
CVE-2025-50949 |
medium | 6.5 | 0.0026 | 2026-10-29 | FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8. | |
CVE-2025-34155 |
medium | 6.9 | 0.0053 | 2026-10-29 | Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in i | |
CVE-2025-34156 |
medium | 6.9 | 0.0037 | 2026-10-29 | Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an | |
CVE-2025-46185 |
medium | 6.2 | 0.0014 | 2026-10-29 | An Insecure Permission vulnerability in pgcodekeeper 10.12.0 allows a local attacker to ob | |
CVE-2023-37749 |
medium | 5.3 | 0.0035 | 2026-10-29 | Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticat | |
CVE-2025-64197 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-64202 |
medium | 6.5 | 0.0016 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-64212 |
medium | 5.4 | 0.0022 | 2026-10-29 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms- | |
CVE-2025-60542 |
medium | 6.5 | 0.0027 | 2026-10-29 | SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.sav | |
CVE-2025-60319 |
medium | 6.5 | 0.0026 | 2026-10-29 | PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authoriz | |
CVE-2025-63448 |
medium | 6.1 | 0.0030 | 2026-10-29 | Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit_product. | |
CVE-2025-50363 |
medium | 5.4 | 0.0025 | 2026-10-29 | Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) i | |
CVE-2025-60925 |
medium | 5.3 | 0.0033 | 2026-10-29 | codeshare v1.0.0 was discovered to contain an information leakage vulnerability. | |
CVE-2025-54335 |
medium | 6.5 | 0.0022 | 2026-10-29 | An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1 | |
CVE-2025-57244 |
medium | 5.4 | 0.0022 | 2026-10-29 | OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting (XSS) in the | |
CVE-2025-63418 |
medium | 6.1 | 0.0023 | 2026-10-29 | A DOM-based Cross-Site Scripting (XSS) vulnerability in the SelfBest platform 2023.3 allow | |
CVE-2025-62028 |
medium | 4.3 | 0.0024 | 2026-10-29 | Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Sali | |
CVE-2025-62032 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62033 |
medium | 6.5 | 0.0030 | 2026-10-29 | Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a t | |
CVE-2025-62037 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a t | |
CVE-2025-13013 |
medium | 6.1 | 0.0022 | 2026-10-29 | Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firef | |
CVE-2025-40760 |
medium | 6.8 | 0.0014 | 2026-10-29 | A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affe | |
CVE-2025-9316 |
medium | 6.9 | 0.3739 | 2026-10-29 | N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affec | |
CVE-2024-44632 |
medium | 6.5 | 0.0026 | 2026-10-29 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emaili | |
CVE-2024-44635 |
medium | 6.1 | 0.0024 | 2026-10-29 | PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via admi | |
CVE-2024-44636 |
medium | 6.5 | 0.0021 | 2026-10-29 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and |