Browse All CVEs
50,472 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-59404 |
high | 7.5 | 0.0043 | 2026-11-05 | Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 ships with its bootlo | |
CVE-2025-59402 |
medium | 5.4 | 0.0023 | 2026-11-05 | Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default T | |
CVE-2025-57632 |
high | 7.5 | 0.0058 | 2026-11-05 | libsmb2 6.2+ is vulnerable to Buffer Overflow. When processing SMB2 chained PDUs (NextComm | |
CVE-2025-29157 |
medium | 6.5 | 0.0053 | 2026-11-05 | An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via access | |
CVE-2025-29156 |
medium | 6.1 | 0.0037 | 2026-11-05 | Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute | |
CVE-2025-57623 |
medium | 5.3 | 0.0039 | 2026-11-05 | A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866_B2022506 allows attack | |
CVE-2025-48707 |
high | 7.5 | 0.0034 | 2026-11-05 | An issue was discovered in Stormshield Network Security (SNS) before 5.0.1. TPM authentica | |
CVE-2025-29155 |
medium | 6.5 | 0.0043 | 2026-11-05 | An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DE | |
CVE-2025-57446 |
high | 7.5 | 0.0042 | 2026-11-05 | An issue in O-RAN Near Realtime RIC ric-plt-submgr in the J-Release environment, allows re | |
CVE-2025-55560 |
high | 7.5 | 0.0041 | 2026-11-05 | An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model cons | |
CVE-2025-55559 |
high | 7.5 | 0.0021 | 2026-11-05 | An issue was discovered TensorFlow v2.18.0. A Denial of Service (DoS) occurs when padding | |
CVE-2025-55558 |
high | 7.5 | 0.0045 | 2026-11-05 | A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2 | |
CVE-2025-55557 |
high | 7.5 | 0.0041 | 2026-11-05 | A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is | |
CVE-2025-55556 |
medium | 6.5 | 0.0017 | 2026-11-05 | TensorFlow v2.18.0 was discovered to output random results when compiling Embedding, leadi | |
CVE-2025-55554 |
medium | 5.3 | 0.0032 | 2026-11-05 | pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to | |
CVE-2025-55553 |
high | 7.5 | 0.0041 | 2026-11-05 | A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to caus | |
CVE-2025-55552 |
high | 7.5 | 0.0042 | 2026-11-05 | pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot | |
CVE-2025-55551 |
high | 7.5 | 0.0042 | 2026-11-05 | An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a De | |
CVE-2025-46153 |
medium | 5.3 | 0.0042 | 2026-11-05 | PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though | |
CVE-2025-46152 |
medium | 5.3 | 0.0045 | 2026-11-05 | In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of- | |
CVE-2025-46150 |
medium | 5.3 | 0.0039 | 2026-11-05 | In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent | |
CVE-2025-46149 |
medium | 5.3 | 0.0036 | 2026-11-05 | In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error. | |
CVE-2025-46148 |
medium | 5.3 | 0.0040 | 2026-11-05 | In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect | |
CVE-2025-57317 |
high | 7.5 | 0.0036 | 2026-11-05 | apidoc-core is the core parser library to generate apidoc result following the apidoc-spec | |
CVE-2025-56311 |
medium | 6.5 | 0.0014 | 2026-11-05 | 1 PoC | In Shenzhen C-Data Technology Co. FD602GW-DX-R410 (firmware v2.2.14), the web management i |
CVE-2025-57636 |
medium | 6.5 | 0.0112 | 2026-11-05 | OS Command injection vulnerability in D-Link C1 2020-02-21. The sub_47F028 function in jht | |
CVE-2025-57638 |
high | 7.5 | 0.0040 | 2026-11-05 | Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configurat | |
CVE-2025-57637 |
high | 7.5 | 0.0065 | 2026-11-05 | Buffer overflow vulnerability in D-Link DI-7100G 2020-02-21 in the sub_451754 function of | |
CVE-2025-56146 |
medium | 5.3 | 0.0016 | 2026-11-05 | Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation | |
CVE-2025-57639 |
medium | 6.5 | 0.0098 | 2026-11-05 | OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command in | |
CVE-2025-56394 |
high | 7.5 | 0.0042 | 2026-11-05 | Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobi | |
CVE-2025-55780 |
high | 7.5 | 0.0045 | 2026-11-05 | 1 PoC | A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF |
CVE-2025-29084 |
medium | 6.5 | 0.0038 | 2026-11-05 | SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitra | |
CVE-2025-29083 |
medium | 6.5 | 0.0038 | 2026-11-05 | SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitra | |
CVE-2025-56304 |
medium | 6.1 | 0.0020 | 2026-11-05 | Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the | |
CVE-2025-57407 |
medium | 5.4 | 0.0022 | 2026-11-05 | A stored cross-site scripting (XSS) vulnerability in the Admin Log Viewer of S-Cart <=10.0 | |
CVE-2025-57205 |
medium | 5.4 | 0.0026 | 2026-11-05 | iNiLabs School Express (SMS Express) 6.2 is affected by a Stored Cross-Site Scripting (XSS | |
CVE-2025-57204 |
medium | 5.4 | 0.0026 | 2026-11-05 | Stocky POS with Inventory Management & HRM (ui-lib) version 5.0 is affected by a Stored Cr | |
CVE-2025-57203 |
medium | 4.8 | 0.0024 | 2026-11-05 | MagicProject AI version 9.1 is affected by a Cross-Site Scripting (XSS) vulnerability with | |
CVE-2025-57685 |
high | 8.8 | 0.0117 | 2026-11-05 | The LB-Link routers, including the BL-AC2100_AZ3 V1.0.4, BL-WR4000 v2.5.0, BL-WR9000_AE4 v | |
CVE-2025-55887 |
medium | 6.1 | 0.0035 | 2026-11-05 | 1 PoC | Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service AR |
CVE-2025-57441 |
critical | 9.8 | 0.0055 | 2026-11-05 | The Blackmagic ATEM Mini Pro 2.7 exposes sensitive device and stream configuration informa | |
CVE-2025-57440 |
high | 7.5 | 0.0028 | 2026-11-05 | The Blackmagic ATEM Mini Pro 2.7 exposes an undocumented Telnet service on TCP port 9993, | |
CVE-2025-57439 |
high | 8.8 | 0.0083 | 2026-11-05 | Creacast Creabox Manager 4.4.4 contains a critical Remote Code Execution vulnerability acc | |
CVE-2025-57438 |
medium | 6.8 | 0.0033 | 2026-11-05 | The 2wcom IP-4c 2.15.5 device suffers from a Broken Access Control vulnerability. Certain | |
CVE-2025-57437 |
critical | 9.8 | 0.0053 | 2026-11-05 | The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an | |
CVE-2025-55886 |
medium | 6.5 | 0.0037 | 2026-11-05 | 1 PoC | An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ARD. The flaw e |
CVE-2025-55885 |
medium | 6.3 | 0.0037 | 2026-11-05 | 1 PoC | SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2 |
CVE-2025-43953 |
high | 8.8 | 0.0888 | 2026-11-05 | In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary | |
CVE-2025-57434 |
high | 8.8 | 0.0049 | 2026-11-05 | Creacast Creabox Manager contains a critical authentication flaw that allows an attacker t |