Browse All CVEs
11,722 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-60424 |
high | 7.6 | 0.0072 | 2026-10-29 | A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v | |
CVE-2023-7324 |
high | 8.1 | 0.0031 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possib | |
CVE-2025-61196 |
high | 8.8 | 0.0056 | 2026-10-29 | An issue in BusinessNext CRMnext v.10.8.3.0 allows a remote attacker to execute arbitrary | |
CVE-2025-61498 |
high | 7.5 | 0.0038 | 2026-10-29 | A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers | |
CVE-2025-60749 |
high | 7.8 | 0.0016 | 2026-10-29 | DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used b | |
CVE-2025-63462 |
high | 7.5 | 0.0041 | 2026-10-29 | Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the | |
CVE-2025-63464 |
high | 7.5 | 0.0041 | 2026-10-29 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the s | |
CVE-2025-63465 |
high | 7.5 | 0.0041 | 2026-10-29 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the s | |
CVE-2025-63561 |
high | 7.5 | 0.0040 | 2026-10-29 | Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is susceptible to a | |
CVE-2025-63248 |
high | 7.5 | 0.0032 | 2026-10-29 | DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, | |
CVE-2023-43000 |
high | 8.8 | 0.0404 | 2026-10-29 | KEV | Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to th |
CVE-2025-63417 |
high | 7.2 | 0.0025 | 2026-10-29 | A Stored Cross-Site Scripting (XSS) vulnerability in the chat functionality of the SelfBes | |
CVE-2025-39463 |
high | 7.5 | 0.0061 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-48090 |
high | 8.1 | 0.0044 | 2026-10-29 | Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme b | |
CVE-2025-58629 |
high | 7.5 | 0.0038 | 2026-10-29 | Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploitin | |
CVE-2025-58964 |
high | 7.1 | 0.0023 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-59556 |
high | 7.1 | 0.0023 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62034 |
high | 8.8 | 0.0035 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: f | |
CVE-2025-62035 |
high | 8.8 | 0.0045 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo | |
CVE-2025-62036 |
high | 7.1 | 0.0023 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62053 |
high | 8.1 | 0.0043 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-62055 |
high | 8.1 | 0.0043 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-62057 |
high | 7.1 | 0.0024 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62066 |
high | 7.5 | 0.0039 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-13012 |
high | 7.5 | 0.0024 | 2026-10-29 | Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Fir | |
CVE-2025-13014 |
high | 8.8 | 0.0032 | 2026-10-29 | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 145, | |
CVE-2025-13016 |
high | 7.5 | 0.0041 | 2026-10-29 | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability | |
CVE-2025-13017 |
high | 8.1 | 0.0027 | 2026-10-29 | Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixe | |
CVE-2025-13018 |
high | 8.1 | 0.0027 | 2026-10-29 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox | |
CVE-2025-13019 |
high | 8.1 | 0.0027 | 2026-10-29 | Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in F | |
CVE-2025-13020 |
high | 8.8 | 0.0031 | 2026-10-29 | Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firef | |
CVE-2025-13032 |
high | 7.8 | 0.0025 | 2026-10-29 | Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows loca | |
CVE-2024-32008 |
high | 8.5 | 0.0013 | 2026-10-29 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update | |
CVE-2024-32009 |
high | 8.5 | 0.0012 | 2026-10-29 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update | |
CVE-2024-32010 |
high | 8.5 | 0.0013 | 2026-10-29 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update | |
CVE-2024-32011 |
high | 8.7 | 0.0042 | 2026-10-29 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update | |
CVE-2025-40827 |
high | 8.5 | 0.0017 | 2026-10-29 | A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Soli | |
CVE-2025-11700 |
high | 8.4 | 0.3168 | 2026-10-29 | N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection lea | |
CVE-2022-4984 |
high | 8.7 | 0.0048 | 2026-10-29 | ZenTao Biz < 6.5, ZenTao Max < 3.0, ZenTao Open Source Edition < 16.5, and ZenTao Open Sou | |
CVE-2025-40936 |
high | 7.3 | 0.0020 | 2026-10-29 | A vulnerability has been identified in PS/IGES Parasolid Translator Component (All version | |
CVE-2025-66020 |
high | 7.5 | 0.0036 | 2026-10-29 | Valibot helps validate data using a schema. In versions from 0.31.0 to 1.1.0, the EMOJI_RE | |
CVE-2025-46175 |
high | 7.5 | 0.0033 | 2026-10-29 | Ruoyi v4.8.0 is vulnerable to Incorrect Access Control. There is a missing checkUserDataSc | |
CVE-2025-51735 |
high | 7.5 | 0.0036 | 2026-10-29 | CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0. | |
CVE-2025-63365 |
high | 7.1 | 0.0030 | 2026-10-29 | SoftSea EPUB File Reader 1.0.0.0 is vulnerable to Directory Traversal. The vulnerability r | |
CVE-2025-65840 |
high | 8.8 | 0.0018 | 2026-10-29 | PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery (CSRF) in the CkEditorAd | |
CVE-2025-65877 |
high | 7.5 | 0.0030 | 2026-10-29 | Lvzhou CMS before commit c4ea0eb9cab5f6739b2c87e77d9ef304017ed615 (2025-09-22) is vulnerab | |
CVE-2025-65883 |
high | 8.4 | 0.0038 | 2026-10-29 | A vulnerability has been identified in Genexis Platinum P4410 router (Firmware P4410-V2–1. | |
CVE-2024-56835 |
high | 8.7 | 0.0051 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56836 |
high | 7.7 | 0.0043 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56837 |
high | 8.6 | 0.0052 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG |