Browse All CVEs
11,727 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-10527 |
high | 7.1 | 0.0029 | 2026-10-29 | Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerabili | |
CVE-2025-10528 |
high | 7.3 | 0.0037 | 2026-10-29 | Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D compon | |
CVE-2025-10533 |
high | 8.8 | 0.0078 | 2026-10-29 | Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefo | |
CVE-2025-10537 |
high | 8.8 | 0.0034 | 2026-10-29 | Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Th | |
CVE-2025-54289 |
high | 7.4 | 0.0021 | 2026-10-29 | Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows | |
CVE-2023-53675 |
high | 7.1 | 0.0022 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possib | |
CVE-2023-53676 |
high | 7.8 | 0.0032 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: | |
CVE-2023-53680 |
high | 7.8 | 0.0031 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling O | |
CVE-2025-39664 |
high | 7.1 | 0.0071 | 2026-10-29 | Insufficient escaping in the report scheduler within Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p | |
CVE-2025-11573 |
high | 8.7 | 0.0043 | 2026-10-29 | An infinite loop issue in Amazon.IonDotnet library versions <v1.3.2 may allow a threat act | |
CVE-2025-34248 |
high | 7.2 | 0.0066 | 2026-10-29 | D-Link Nuclias Connect firmware versions < 1.3.1.4 contain a directory traversal vulnerabi | |
CVE-2025-40772 |
high | 7.0 | 0.0032 | 2026-10-29 | A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected s | |
CVE-2025-40809 |
high | 7.3 | 0.0014 | 2026-10-29 | A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14) | |
CVE-2025-40810 |
high | 7.3 | 0.0014 | 2026-10-29 | A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14) | |
CVE-2025-40811 |
high | 7.3 | 0.0014 | 2026-10-29 | A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14) | |
CVE-2025-40812 |
high | 7.3 | 0.0014 | 2026-10-29 | A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14) | |
CVE-2025-11713 |
high | 8.1 | 0.0029 | 2026-10-29 | Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user i | |
CVE-2025-11714 |
high | 8.8 | 0.0034 | 2026-10-29 | Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3 | |
CVE-2025-11715 |
high | 8.8 | 0.0033 | 2026-10-29 | Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Th | |
CVE-2023-46718 |
high | 7.8 | 0.0019 | 2026-10-29 | A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 th | |
CVE-2024-50571 |
high | 7.2 | 0.0054 | 2026-10-29 | A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, | |
CVE-2025-61581 |
high | 7.5 | 0.0074 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** Inefficient Regular Expression Complexity vulnerability in | |
CVE-2025-60751 |
high | 7.5 | 0.0228 | 2026-10-29 | GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode. | |
CVE-2025-52079 |
high | 8.8 | 0.0054 | 2026-10-29 | The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access C | |
CVE-2023-53692 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-f | |
CVE-2023-53695 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: udf: Detect system in | |
CVE-2023-53698 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: xsk: fix refcount und | |
CVE-2023-53705 |
high | 8.2 | 0.0056 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-boun | |
CVE-2023-53707 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix integ | |
CVE-2023-53711 |
high | 8.2 | 0.0039 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential | |
CVE-2023-53713 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: arm64: sme: Use STR P | |
CVE-2023-53718 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not s | |
CVE-2023-53726 |
high | 7.1 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: arm64: csum: Fix OoB | |
CVE-2023-53729 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: qmi_encdec | |
CVE-2025-61035 |
high | 7.7 | 0.0015 | 2026-10-29 | The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permiss | |
CVE-2025-49935 |
high | 7.5 | 0.0048 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-58955 |
high | 8.1 | 0.0052 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-58958 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-58966 |
high | 7.1 | 0.0024 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-58967 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-59550 |
high | 8.1 | 0.0052 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-59555 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-59558 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-59564 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-59571 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-59580 |
high | 8.8 | 0.0039 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core | |
CVE-2025-62005 |
high | 7.1 | 0.0014 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in FantasticPlugins SUMO Memberships for W | |
CVE-2025-60335 |
high | 7.5 | 0.0213 | 2026-10-29 | A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 | |
CVE-2025-50950 |
high | 7.5 | 0.0037 | 2026-10-29 | Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState: | |
CVE-2023-53733 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_u32: |