Browse All CVEs
11,717 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-40937 |
high | 8.7 | 0.0059 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-67521 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67525 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67526 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67527 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67529 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67531 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-63895 |
high | 7.5 | 0.0031 | 2026-10-29 | An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12 | |
CVE-2024-58287 |
high | 8.7 | 0.0342 | 2026-10-29 | reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan | |
CVE-2024-58293 |
high | 8.6 | 0.0035 | 2026-10-29 | Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authen | |
CVE-2024-58294 |
high | 8.7 | 0.0357 | 2026-10-29 | FreePBX 16 contains an authenticated remote code execution vulnerability in the API module | |
CVE-2024-58306 |
high | 8.7 | 0.0049 | 2026-10-29 | minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to c | |
CVE-2024-58309 |
high | 8.7 | 0.0058 | 2026-10-29 | xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote | |
CVE-2024-58312 |
high | 8.7 | 0.0120 | 2026-10-29 | xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attacke | |
CVE-2024-58313 |
high | 8.6 | 0.0061 | 2026-10-29 | xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated at | |
CVE-2025-40829 |
high | 7.3 | 0.0020 | 2026-10-29 | A vulnerability has been identified in Simcenter Femap (All versions < V2512). The affecte | |
CVE-2024-14010 |
high | 8.5 | 0.0115 | 2026-10-29 | Typora 1.7.4 contains a command injection vulnerability in the PDF export preferences that | |
CVE-2024-58305 |
high | 8.6 | 0.0043 | 2026-10-29 | WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inj | |
CVE-2025-34179 |
high | 8.7 | 0.0040 | 2026-10-29 | NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in | |
CVE-2025-34181 |
high | 8.7 | 0.0104 | 2026-10-29 | NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Conn | |
CVE-2024-44598 |
high | 8.8 | 0.0039 | 2026-10-29 | FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module. | |
CVE-2024-44599 |
high | 8.3 | 0.0047 | 2026-10-29 | FNT Command 13.4.0 is vulnerable to Directory Traversal. | |
CVE-2024-29371 |
high | 7.5 | 0.0026 | 2026-10-29 | In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by craft | |
CVE-2024-46062 |
high | 7.8 | 0.0020 | 2026-10-29 | Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerab | |
CVE-2025-60182 |
high | 7.1 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-64189 |
high | 7.1 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-64193 |
high | 7.5 | 0.0046 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-64213 |
high | 7.5 | 0.0036 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes MasterSt | |
CVE-2025-64376 |
high | 7.1 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-14874 |
high | 7.5 | 0.0060 | 2026-10-29 | A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a | |
CVE-2025-10021 |
high | 7.0 | 0.0015 | 2026-10-29 | A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK | |
CVE-2025-63663 |
high | 7.5 | 0.0029 | 2026-10-29 | Incorrect access control in the /api/v1/conversations/*/files API of GT Edge AI Platform b | |
CVE-2025-66735 |
high | 7.5 | 0.0044 | 2026-10-29 | youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in | |
CVE-2023-53965 |
high | 8.6 | 0.0024 | 2026-10-29 | SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows | |
CVE-2023-53973 |
high | 8.5 | 0.0025 | 2026-10-29 | Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows | |
CVE-2024-24844 |
high | 7.5 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allow | |
CVE-2024-9684 |
high | 7.5 | 0.0040 | 2026-10-29 | FreyrSCADA/IEC-60870-5-104 server v21.06.008 allows remote attackers to cause a denial of | |
CVE-2024-30855 |
high | 8.8 | 0.0022 | 2026-10-29 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability v | |
CVE-2024-25183 |
high | 7.5 | 0.0073 | 2026-10-29 | givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php. | |
CVE-2023-54193 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: r | |
CVE-2023-54198 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bound | |
CVE-2023-54200 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: | |
CVE-2023-54201 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix wrong r | |
CVE-2023-54202 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix race co | |
CVE-2023-54206 |
high | 7.8 | 0.0014 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: fi | |
CVE-2023-54207 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Correct | |
CVE-2023-54210 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: | |
CVE-2023-54214 |
high | 8.8 | 0.0030 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix | |
CVE-2023-54216 |
high | 7.8 | 0.0014 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix us | |
CVE-2023-54219 |
high | 7.5 | 0.0069 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Revert "IB/isert: Fix |