Browse All CVEs
50,472 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-57431 |
high | 8.8 | 0.0035 | 2026-11-05 | The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Cod | |
CVE-2025-57682 |
medium | 6.5 | 0.0071 | 2026-11-05 | Directory Traversal vulnerability in Papermark 0.20.0 and prior allows authenticated attac | |
CVE-2025-57605 |
high | 8.8 | 0.0030 | 2026-11-05 | Lack of server-side authorisation on department admin assignment APIs in AiKaan IoT Platfo | |
CVE-2025-57601 |
critical | 9.8 | 0.0042 | 2026-11-05 | AiKaan Cloud Controller uses a single hardcoded SSH private key and the username `proxyuse | |
CVE-2025-57433 |
medium | 6.5 | 0.0037 | 2026-11-05 | The 2wcom IP-4c 2.15.5 device's web interface includes an information disclosure vulnerabi | |
CVE-2025-57432 |
critical | 9.8 | 0.0064 | 2026-11-05 | Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts un | |
CVE-2025-57430 |
high | 7.5 | 0.0040 | 2026-11-05 | Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessi | |
CVE-2025-56075 |
medium | 5.4 | 0.0026 | 2026-11-05 | A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php fil | |
CVE-2025-56074 |
critical | 9.8 | 0.0048 | 2026-11-05 | A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php | |
CVE-2025-51006 |
high | 7.8 | 0.0019 | 2026-11-05 | Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dlt_ | |
CVE-2025-10854 |
high | 8.1 | 0.0046 | 2026-11-05 | The txtai framework allows the loading of compressed tar files as embedding indices. While | |
CVE-2025-57396 |
medium | 6.5 | 0.0024 | 2026-11-05 | Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalati | |
CVE-2025-56762 |
medium | 6.1 | 0.0027 | 2026-11-05 | 1 PoC | Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting (XSS) in error.php. |
CVE-2025-54815 |
high | 8.8 | 0.0061 | 2026-11-05 | Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to ex | |
CVE-2025-54761 |
high | 8.0 | 0.0033 | 2026-11-05 | An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges vi | |
CVE-2025-52159 |
high | 8.8 | 0.0042 | 2026-11-05 | Hardcoded credentials in default configuration of PPress 0.0.9. | |
CVE-2025-57296 |
medium | 6.5 | 0.0329 | 2026-11-05 | Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the fo | |
CVE-2025-55910 |
medium | 6.3 | 0.0022 | 2026-11-05 | CMSEasy v7.7.8.0 and before is vulnerable to Arbitrary file deletion in database_admin.php | |
CVE-2025-57293 |
high | 8.8 | 0.0168 | 2026-11-05 | A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi | |
CVE-2025-55912 |
high | 7.3 | 0.0153 | 2026-11-05 | An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exp | |
CVE-2025-57452 |
medium | 6.1 | 0.0026 | 2026-11-05 | In realme BackupRestore app v15.1.12_2810c08_250314, improper URI scheme handling in com.c | |
CVE-2025-55911 |
medium | 6.5 | 0.0107 | 2026-11-05 | An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes | |
CVE-2025-56706 |
high | 8.0 | 0.0202 | 2026-11-05 | Edimax BR-6473AX v1.0.28 was discovered to contain a remote code execution (RCE) vulnerabi | |
CVE-2025-45091 |
medium | 5.4 | 0.0021 | 2026-11-05 | Seafile versions 11.0.18-Pro, 12.0.10, and 12.0.10-Pro are vulnerable to a stored Cross-Si | |
CVE-2025-52344 |
medium | 6.1 | 0.0033 | 2026-11-05 | Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1 | |
CVE-2025-57174 |
critical | 9.8 | 0.0221 | 2026-11-05 | 1 PoC | An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmw |
CVE-2025-57104 |
medium | 5.4 | 0.0020 | 2026-11-05 | Teampel 5.1.6 is vulnerable to SQL Injection in /Common/login.aspx. | |
CVE-2025-52048 |
medium | 6.5 | 0.0026 | 2026-11-05 | In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function add_tag() at ` | |
CVE-2025-52053 |
critical | 9.8 | 0.0462 | 2026-11-05 | TOTOLINK X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerabi | |
CVE-2025-50110 |
high | 8.8 | 0.0027 | 2026-11-05 | 1 PoC | An issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in A |
CVE-2025-46408 |
critical | 9.8 | 0.0066 | 2026-11-05 | 1 PoC | An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and |
CVE-2025-45587 |
high | 7.0 | 0.0027 | 2026-11-05 | A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows | |
CVE-2025-45586 |
high | 7.5 | 0.0032 | 2026-11-05 | An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily ov | |
CVE-2026-92695 |
high | 8.2 | 0.0026 | 2026-11-05 | FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, t | |
CVE-2026-92694 |
medium | 5.9 | 0.0025 | 2026-11-05 | FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, F | |
CVE-2026-88982 |
medium | 5.4 | 0.0015 | 2026-11-05 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning w | |
CVE-2026-93424 |
high | 7.5 | 0.0028 | 2026-11-05 | FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, p | |
CVE-2026-92698 |
high | 8.2 | 0.0032 | 2026-11-05 | FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, p | |
CVE-2026-92697 |
high | 7.5 | 0.0114 | 2026-11-05 | FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, t | |
CVE-2026-92693 |
high | 8.2 | 0.0026 | 2026-11-05 | FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, p | |
CVE-2026-110390 |
medium | 6.9 | 0.0041 | 2026-11-05 | Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager | |
CVE-2026-68509 |
medium | 6.3 | 0.0014 | 2026-11-05 | FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior | |
CVE-2026-102943 |
medium | 6.5 | 0.0041 | 2026-11-05 | Dagu is a workflow engine with a built-in Web user interface. Prior to version 2.11.0, its | |
CVE-2026-71462 |
medium | 4.1 | 0.0026 | 2026-11-05 | StringListPathField.to_internal_value() calls os.path.exists() on unbounded | |
CVE-2026-71460 |
medium | 4.3 | 0.0022 | 2026-11-05 | /api/v2/config/ is protected only by IsAuthenticated. license_info (account_ | |
CVE-2026-71459 |
medium | 5.0 | 0.0028 | 2026-11-05 | JobJobEventsChildrenSummary view has no model/parent_model. ModelAccessPermi | |
CVE-2026-71458 |
medium | 5.0 | 0.0030 | 2026-11-05 | URLModificationMiddleware resolves named-URL lookups against unfiltered Mode | |
CVE-2026-71224 |
medium | 4.7 | 0.0014 | 2026-11-05 | A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk | |
CVE-2026-71222 |
medium | 6.3 | 0.0011 | 2026-11-05 | A heap out-of-bounds read vulnerability was found in gfs2-utils. The ea_num_ptrs field fro | |
CVE-2026-71221 |
high | 7.0 | 0.0013 | 2026-11-05 | A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height |