Browse All CVEs
50,473 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-60266 |
medium | 6.5 | 0.0022 | 2026-11-05 | In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in add | |
CVE-2025-61577 |
high | 7.5 | 0.0584 | 2026-11-05 | D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the statusche | |
CVE-2025-61532 |
medium | 6.1 | 0.0028 | 2026-11-05 | Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the | |
CVE-2025-60302 |
medium | 6.1 | 0.0023 | 2026-11-05 | code-projects Client Details System 1.0 is vulnerable to Cross Site Scripting (XSS). When | |
CVE-2025-60265 |
medium | 6.5 | 0.0026 | 2026-11-05 | In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in use | |
CVE-2025-56426 |
medium | 6.5 | 0.0041 | 2026-11-05 | An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the | |
CVE-2025-56683 |
critical | 9.6 | 0.0046 | 2026-11-05 | A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logse | |
CVE-2025-45095 |
high | 7.3 | 0.0029 | 2026-11-05 | Lavasoft Web Companion (also known as Ad-Aware WebCompanion) versions 8.9.0.1091 through 1 | |
CVE-2025-60311 |
high | 8.8 | 0.0046 | 2026-11-05 | ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" paramet | |
CVE-2025-61524 |
high | 7.2 | 0.0066 | 2026-11-05 | An issue in the permission verification module and organization/application editing interf | |
CVE-2025-57457 |
high | 8.8 | 0.0098 | 2026-11-05 | 1 PoC | An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 all |
CVE-2025-60318 |
medium | 6.1 | 0.0024 | 2026-11-05 | SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting | |
CVE-2025-60834 |
medium | 6.5 | 0.0036 | 2026-11-05 | A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execut | |
CVE-2025-60313 |
medium | 6.1 | 0.0036 | 2026-11-05 | Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting (XSS) in th | |
CVE-2025-61183 |
medium | 6.1 | 0.0030 | 2026-11-05 | 1 PoC | Cross Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code |
CVE-2025-60830 |
medium | 6.5 | 0.0036 | 2026-11-05 | redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused b | |
CVE-2025-60828 |
medium | 6.5 | 0.0036 | 2026-11-05 | WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via | |
CVE-2025-60299 |
medium | 5.4 | 0.0022 | 2026-11-05 | Novel-Plus with 5.2.0 was discovered to contain a Stored Cross-Site Scripting (XSS) vulner | |
CVE-2025-60298 |
medium | 5.4 | 0.0027 | 2026-11-05 | Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting (XSS) vulne | |
CVE-2026-6390 |
medium | 6.8 | 0.0015 | 2026-11-05 | A flaw was found in GNU nano's multi-buffer error message handling. When a user opens mult | |
CVE-2026-31440 |
medium | 5.5 | 0.0012 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix | |
CVE-2026-31438 |
medium | 5.5 | 0.0012 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel BUG | |
CVE-2026-31430 |
high | 7.1 | 0.0008 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: X.509: Fix out-of-bou | |
CVE-2026-31428 |
medium | 5.5 | 0.0014 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_ | |
CVE-2026-31427 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntra | |
CVE-2026-31424 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: | |
CVE-2026-31423 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: | |
CVE-2026-31422 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: | |
CVE-2026-31421 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fi | |
CVE-2026-31418 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: dro | |
CVE-2026-31416 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_ | |
CVE-2026-31415 |
medium | 5.5 | 0.0012 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid overflows | |
CVE-2026-31411 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash d | |
CVE-2026-31400 |
medium | 5.5 | 0.0012 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix cache_req | |
CVE-2026-31399 |
high | 7.8 | 0.0012 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: nvdimm/bus: Fix poten | |
CVE-2026-31395 |
high | 7.1 | 0.0012 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix OOB acce | |
CVE-2026-31394 |
medium | 5.5 | 0.0012 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: mac80211: fix crash i | |
CVE-2026-31390 |
medium | 5.5 | 0.0012 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory le | |
CVE-2026-23475 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: spi: fix statistics a | |
CVE-2026-23468 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO | |
CVE-2026-23467 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Fix an | |
CVE-2026-23454 |
high | 7.0 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: net: mana: fix use-af | |
CVE-2026-23452 |
medium | 4.7 | 0.0009 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: PM: runtime: Fix a ra | |
CVE-2026-23448 |
high | 7.8 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc_ncm: ad | |
CVE-2026-23447 |
high | 7.8 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc_ncm: ad | |
CVE-2026-23442 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: ipv6: add NULL checks | |
CVE-2026-23441 |
medium | 4.7 | 0.0009 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent co | |
CVE-2026-23439 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: fix NULL | |
CVE-2026-23436 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: net: shaper: protect | |
CVE-2026-23430 |
medium | 5.5 | 0.0013 | 2026-11-05 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't ove |