Browse All CVEs
50,472 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-56243 |
medium | 6.1 | 0.0023 | 2026-11-05 | 1 PoC | A Cross-Site Scripting (XSS) vulnerability was found in the register.php page of PuneethRe |
CVE-2025-52021 |
critical | 9.8 | 0.0033 | 2026-11-05 | 1 PoC | A SQL Injection vulnerability exists in the edit_product.php file of PuneethReddyHC Online |
CVE-2025-60312 |
medium | 6.1 | 0.0028 | 2026-11-05 | Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting (XS | |
CVE-2025-57564 |
high | 8.2 | 0.0037 | 2026-11-05 | CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entri | |
CVE-2025-50505 |
high | 7.8 | 0.0024 | 2026-11-05 | 1 PoC | Clash Verge Rev thru 2.2.3 (fixed in 2.3.0) forces the installation of system services(cla |
CVE-2025-57515 |
critical | 9.8 | 0.0054 | 2026-11-05 | A SQL injection vulnerability has been identified in Uniclare Student Portal v2. This flaw | |
CVE-2025-56382 |
medium | 6.1 | 0.0024 | 2026-11-05 | A stored Cross-site scripting (XSS) vulnerability exists in the Customer Management Module | |
CVE-2025-28129 |
medium | 5.4 | 0.0022 | 2026-11-05 | Phpgurukul Hostel Management System 2.1 is vulnerable to clickjacking. | |
CVE-2025-60969 |
medium | 5.7 | 0.0057 | 2026-11-05 | Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server (G | |
CVE-2025-60967 |
high | 7.3 | 0.0027 | 2026-11-05 | Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Se | |
CVE-2025-60965 |
critical | 9.1 | 0.0121 | 2026-11-05 | OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server ( | |
CVE-2025-60964 |
critical | 9.1 | 0.0121 | 2026-11-05 | OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server ( | |
CVE-2025-60963 |
high | 8.2 | 0.0092 | 2026-11-05 | OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server ( | |
CVE-2025-60962 |
high | 8.2 | 0.0074 | 2026-11-05 | OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server ( | |
CVE-2025-60961 |
medium | 6.1 | 0.0019 | 2026-11-05 | Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Se | |
CVE-2025-60960 |
high | 8.2 | 0.0091 | 2026-11-05 | OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server ( | |
CVE-2025-60959 |
high | 8.2 | 0.0074 | 2026-11-05 | OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server ( | |
CVE-2025-60958 |
high | 7.3 | 0.0027 | 2026-11-05 | Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Se | |
CVE-2025-60957 |
critical | 9.9 | 0.0117 | 2026-11-05 | OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server ( | |
CVE-2025-60956 |
high | 8.0 | 0.0020 | 2026-11-05 | Cross Site Request Forgery (CSRF) vulnerability in EndRun Technologies Sonoma D12 Network | |
CVE-2025-57247 |
critical | 9.1 | 0.0036 | 2026-11-05 | The BATBToken smart contract (address 0xfbf1388408670c02f0dbbb74251d8ded1d63b7a2, Compiler | |
CVE-2025-61224 |
medium | 6.5 | 0.0145 | 2026-11-05 | Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'[56.1] allows a remo | |
CVE-2025-61198 |
medium | 5.4 | 0.0026 | 2026-11-05 | A stored cross-site scripting (XSS) vulnerability in Optimod 5950 - Optimod 5950HD - Optim | |
CVE-2025-61197 |
high | 8.9 | 0.0036 | 2026-11-05 | An issue in Orban Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio | |
CVE-2025-56551 |
high | 8.2 | 0.0036 | 2026-11-05 | An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout | |
CVE-2025-60787 |
high | 7.2 | 0.1863 | 2026-11-05 | 9 PoC | MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration para |
CVE-2025-57423 |
medium | 6.5 | 0.0046 | 2026-11-05 | A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affe | |
CVE-2025-55972 |
high | 7.5 | 0.0054 | 2026-11-05 | 1 PoC | A TCL Smart TV running a vulnerable UPnP/DLNA MediaRenderer implementation is affected by |
CVE-2025-60454 |
medium | 6.1 | 0.0026 | 2026-11-05 | A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS versi | |
CVE-2025-60453 |
medium | 6.1 | 0.0026 | 2026-11-05 | A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS versi | |
CVE-2025-60452 |
medium | 6.1 | 0.0023 | 2026-11-05 | A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS versi | |
CVE-2025-60451 |
medium | 6.1 | 0.0023 | 2026-11-05 | A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS versi | |
CVE-2025-60450 |
medium | 6.1 | 0.0023 | 2026-11-05 | A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS versi | |
CVE-2025-60449 |
medium | 4.9 | 0.0037 | 2026-11-05 | An information disclosure vulnerability has been discovered in SeaCMS 13.1. The vulnerabil | |
CVE-2025-60448 |
medium | 6.1 | 0.0023 | 2026-11-05 | A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19. | |
CVE-2025-60447 |
medium | 5.9 | 0.0026 | 2026-11-05 | A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19. | |
CVE-2025-60445 |
medium | 6.1 | 0.0023 | 2026-11-05 | A stored Cross-Site Scripting (XSS) vulnerability has been discovered in XunRuiCMS version | |
CVE-2025-56019 |
medium | 6.5 | 0.0033 | 2026-11-05 | 1 PoC | An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The de |
CVE-2025-60663 |
high | 7.5 | 0.0040 | 2026-11-05 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanMTU paramete | |
CVE-2025-60661 |
medium | 5.3 | 0.0042 | 2026-11-05 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the cloneType param | |
CVE-2025-59409 |
high | 7.5 | 0.0031 | 2026-11-05 | Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with developmen | |
CVE-2025-59407 |
critical | 9.8 | 0.0067 | 2026-11-05 | The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 f | |
CVE-2025-59406 |
medium | 6.2 | 0.0017 | 2026-11-05 | The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android (inst | |
CVE-2025-59405 |
high | 7.5 | 0.0048 | 2026-11-05 | The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Andr | |
CVE-2025-59403 |
critical | 9.8 | 0.0107 | 2026-11-05 | The Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 | |
CVE-2025-60662 |
high | 7.5 | 0.0049 | 2026-11-05 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanSpeed parame | |
CVE-2025-60660 |
high | 7.5 | 0.0049 | 2026-11-05 | Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the mac parameter i | |
CVE-2025-57305 |
medium | 6.5 | 0.0038 | 2026-11-05 | VitaraCharts 5.3.5 is vulnerable to Server-Side Request Forgery in fileLoader.jsp. | |
CVE-2025-56162 |
medium | 6.5 | 0.0049 | 2026-11-05 | YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the | |
CVE-2025-56161 |
high | 7.5 | 0.0054 | 2026-11-05 | YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in |