Browse All CVEs
50,473 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-61115 |
high | 7.5 | 0.0037 | 2026-11-05 | ABC Fine Wine & Spirits Android App version v.11.27.5 and before (package name com.cta.abc | |
CVE-2025-61430 |
medium | 6.5 | 0.0026 | 2026-11-05 | Improper handling of DNS over TCP in Simple DNS Plus v9 allows a remote attacker with quer | |
CVE-2025-60572 |
high | 7.5 | 0.0046 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60571 |
high | 7.5 | 0.0046 | 2026-11-05 | D-Link DIR600LAx FW116WWb01 was discovered to contain a buffer overflow via the curTime pa | |
CVE-2025-56447 |
critical | 9.8 | 0.0029 | 2026-11-05 | TM2 Monitoring v3.04 contains an authentication bypass and plaintext credential disclosure | |
CVE-2025-61255 |
medium | 6.1 | 0.0025 | 2026-11-05 | Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting (XSS) vu | |
CVE-2025-56802 |
medium | 5.1 | 0.0013 | 2026-11-05 | 1 PoC | The Reolink desktop application uses a hard-coded and predictable AES encryption key to en |
CVE-2025-56801 |
medium | 5.1 | 0.0014 | 2026-11-05 | 1 PoC | The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initializati |
CVE-2025-56800 |
medium | 5.1 | 0.0025 | 2026-11-05 | 1 PoC | Reolink desktop application 8.18.12 contains a vulnerability in its local authentication m |
CVE-2025-56799 |
medium | 6.5 | 0.0122 | 2026-11-05 | 1 PoC | Reolink desktop application 8.18.12 contains a command injection vulnerability in its sche |
CVE-2025-60507 |
high | 8.9 | 0.0032 | 2026-11-05 | Cross site scripting vulnerability in Moodle GeniAI plugin (local_geniai) 2.3.6. An authen | |
CVE-2025-60427 |
medium | 6.5 | 0.0042 | 2026-11-05 | LibreTime 3.0.0-alpha.10 and possibly earlier is vulnerable to Broken Access Control, wher | |
CVE-2025-60772 |
critical | 9.8 | 0.0060 | 2026-11-05 | Improper authentication in the web-based management interface of NETLINK HG322G V1.0.00-23 | |
CVE-2025-60511 |
medium | 4.3 | 0.0022 | 2026-11-05 | Moodle OpenAI Chat Block plugin 3.0.1 (2025021700) suffers from an Insecure Direct Object | |
CVE-2025-60506 |
medium | 5.4 | 0.0022 | 2026-11-05 | Moodle PDF Annotator plugin v1.5 release 9 allows stored cross-site scripting (XSS) via th | |
CVE-2025-60500 |
high | 7.2 | 0.0053 | 2026-11-05 | 1 PoC | QDocs Smart School Management System 7.1 allows authenticated users with roles such as "ac |
CVE-2025-61220 |
high | 7.5 | 0.0033 | 2026-11-05 | The incomplete verification mechanism in the AutoBizLine com.mysecondline.app 1.2.91 allow | |
CVE-2025-61194 |
medium | 6.5 | 0.0024 | 2026-11-05 | daicuocms V1.3.13 contains a SQL injection vulnerability in the file library\think\db\Buil | |
CVE-2025-61181 |
medium | 6.5 | 0.0025 | 2026-11-05 | daicuocms V1.3.13 contains an arbitrary file upload vulnerability in the image upload feat | |
CVE-2025-60280 |
medium | 6.1 | 0.0025 | 2026-11-05 | Cross-Site Scripting (XSS) vulnerability in Bang Resto v1.0 could allow an attacker to inj | |
CVE-2025-60933 |
medium | 6.1 | 0.0019 | 2026-11-05 | Multiple stored cross-site scripting (XSS) vulnerabilities in the Future Goals function of | |
CVE-2025-60932 |
medium | 6.1 | 0.0019 | 2026-11-05 | Multiple stored cross-site scripting (XSS) vulnerabilities in the Current Goals function o | |
CVE-2025-59438 |
medium | 5.3 | 0.0026 | 2026-11-05 | Mbed TLS through 3.6.4 has an Observable Timing Discrepancy. | |
CVE-2025-57521 |
medium | 6.1 | 0.0016 | 2026-11-05 | Bambu Studio 2.1.1.52 and earlier is affected by a vulnerability that allows arbitrary cod | |
CVE-2025-56450 |
medium | 6.5 | 0.0034 | 2026-11-05 | Log2Space Subscriber Management Software 1.1 is vulnerable to unauthenticated SQL injectio | |
CVE-2025-54764 |
medium | 6.2 | 0.0022 | 2026-11-05 | Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and dir | |
CVE-2025-61303 |
critical | 9.8 | 0.0046 | 2026-11-05 | 1 PoC | Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-0 |
CVE-2025-61301 |
high | 7.5 | 0.0036 | 2026-11-05 | 1 PoC | Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 (commit 52e |
CVE-2025-60783 |
medium | 6.5 | 0.0027 | 2026-11-05 | There is a SQL injection vulnerability in Restaurant Management System DBMS Project v1.0 v | |
CVE-2025-61488 |
high | 7.6 | 0.0036 | 2026-11-05 | An issue in Senayan Library Management System (SLiMS) 9 Bulian v.9.6.1 allows a remote att | |
CVE-2025-60856 |
medium | 6.8 | 0.0031 | 2026-11-05 | Reolink Video Doorbell WiFi DB_566128M5MP_W allows root shell access through an unsecured | |
CVE-2025-48025 |
medium | 4.3 | 0.0029 | 2026-11-05 | In Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480 | |
CVE-2025-26782 |
high | 7.5 | 0.0060 | 2026-11-05 | An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem E | |
CVE-2025-26781 |
high | 7.5 | 0.0060 | 2026-11-05 | An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem E | |
CVE-2025-61456 |
medium | 6.1 | 0.0027 | 2026-11-05 | 1 PoC | A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifi |
CVE-2025-61417 |
high | 8.8 | 0.0061 | 2026-11-05 | Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admi | |
CVE-2025-54957 |
critical | 9.8 | 0.0159 | 2026-11-05 | 1 PoC | An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process |
CVE-2025-61455 |
critical | 9.8 | 0.0058 | 2026-11-05 | 1 PoC | SQL Injection vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within th |
CVE-2025-61454 |
medium | 6.1 | 0.0026 | 2026-11-05 | 1 PoC | A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifi |
CVE-2025-56224 |
high | 8.1 | 0.0039 | 2026-11-05 | 1 PoC | A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub |
CVE-2025-56223 |
high | 7.5 | 0.0046 | 2026-11-05 | 1 PoC | A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 a |
CVE-2025-56219 |
high | 7.1 | 0.0033 | 2026-11-05 | 1 PoC | Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user acc |
CVE-2025-56320 |
medium | 5.4 | 0.0036 | 2026-11-05 | CobbleStone Enterprise Contract Management Portal v.22.4.0 is vulnerable to Stored Cross-S | |
CVE-2025-56316 |
critical | 9.8 | 0.0064 | 2026-11-05 | A SQL injection vulnerability in the content_title parameter of the /cms/content/list endp | |
CVE-2025-56221 |
critical | 9.8 | 0.0060 | 2026-11-05 | 1 PoC | A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to by |
CVE-2025-56218 |
critical | 9.8 | 0.0063 | 2026-11-05 | 1 PoC | An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute ar |
CVE-2025-60514 |
medium | 6.5 | 0.0029 | 2026-11-05 | Tillywork v0.1.3 and below is vulnerable to SQL Injection in app/common/helpers/query.buil | |
CVE-2025-57164 |
medium | 6.5 | 0.0064 | 2026-11-05 | Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation o | |
CVE-2025-60279 |
critical | 9.6 | 0.0044 | 2026-11-05 | A server-side request forgery (SSRF) vulnerability in Illia Cloud illia-Builder before v4. | |
CVE-2025-57567 |
critical | 9.1 | 0.0090 | 2026-11-05 | A remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor, specifi |