Browse All CVEs
50,481 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-50736 |
medium | 6.1 | 0.0023 | 2026-11-05 | An open redirect vulnerability exists in Byaidu PDFMathTranslate v1.9.9 that allows attack | |
CVE-2025-63608 |
medium | 5.4 | 0.0022 | 2026-11-05 | A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functiona | |
CVE-2025-60320 |
medium | 6.7 | 0.0014 | 2026-11-05 | memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in t | |
CVE-2025-61876 |
medium | 5.0 | 0.0022 | 2026-11-05 | Insecure Direct Object Reference (IDOR) in /tenants/{id} API endpoint in Inforcer Platform | |
CVE-2025-57227 |
high | 7.8 | 0.0014 | 2026-11-05 | An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attacke | |
CVE-2025-61234 |
high | 7.5 | 0.0034 | 2026-11-05 | Incorrect access control on Dataphone A920 v2025.07.161103 exposes a service on port 8888 | |
CVE-2025-60595 |
high | 8.2 | 0.0032 | 2026-11-05 | 1 PoC | SPH Engineering UgCS 5.13.0 is vulnerable to Arbitary code execution. |
CVE-2025-60898 |
medium | 5.8 | 0.0029 | 2026-11-05 | An unauthenticated server-side request forgery (SSRF) vulnerability in the Thumbnail via-u | |
CVE-2025-63622 |
critical | 9.8 | 0.0035 | 2026-11-05 | A vulnerability was found in code-projects Online Complaint Site 1.0. This issue affects s | |
CVE-2025-61429 |
high | 8.8 | 0.0029 | 2026-11-05 | An issue in NCR Atleos Terminal Manager (ConfigApp) v3.4.0 allows attackers to escalate pr | |
CVE-2025-61161 |
high | 8.4 | 0.0017 | 2026-11-05 | DLL hijacking vulnerability in Evope Collector 1.1.6.9.0 and related components load the w | |
CVE-2025-61235 |
critical | 9.1 | 0.0039 | 2026-11-05 | An issue was discovered in Dataphone A920 v2025.07.161103. A custom packet based on public | |
CVE-2025-61080 |
medium | 5.4 | 0.0021 | 2026-11-05 | A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Clear2Pay Bank | |
CVE-2025-60805 |
high | 7.5 | 0.0036 | 2026-11-05 | An issue was discovered in BESSystem BES Application Server thru 9.5.x allowing unauthoriz | |
CVE-2025-60800 |
high | 7.5 | 0.0032 | 2026-11-05 | 1 PoC | Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90 |
CVE-2025-60354 |
high | 7.5 | 0.0026 | 2026-11-05 | Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboo | |
CVE-2025-61105 |
high | 7.5 | 0.0050 | 2026-11-05 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereferen | |
CVE-2025-61102 |
high | 7.5 | 0.0050 | 2026-11-05 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereferen | |
CVE-2025-61101 |
high | 7.5 | 0.0050 | 2026-11-05 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereferen | |
CVE-2025-61100 |
high | 7.5 | 0.0050 | 2026-11-05 | FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereferen | |
CVE-2025-61099 |
high | 7.5 | 0.0050 | 2026-11-05 | FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereferen | |
CVE-2025-61385 |
critical | 9.6 | 0.0036 | 2026-11-05 | SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arb | |
CVE-2025-60983 |
medium | 5.4 | 0.0017 | 2026-11-05 | Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Sea | |
CVE-2025-60982 |
medium | 5.4 | 0.0018 | 2026-11-05 | IDOR vulnerability in Educare ERP 1.0 (2025-04-22) allows unauthorized access to sensitive | |
CVE-2025-54965 |
medium | 6.1 | 0.0020 | 2026-11-05 | An XSS issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Serv | |
CVE-2025-54970 |
medium | 6.5 | 0.0025 | 2026-11-05 | An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service | |
CVE-2025-54969 |
medium | 6.1 | 0.0014 | 2026-11-05 | An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service | |
CVE-2025-54968 |
high | 8.8 | 0.0041 | 2026-11-05 | An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Service does no | |
CVE-2025-54967 |
medium | 6.5 | 0.0036 | 2026-11-05 | An issue was discovered in BAE SOCET GXP before 4.6.0.3. It permits external entities in c | |
CVE-2025-27225 |
high | 7.5 | 0.1979 | 2026-11-05 | TRUfusion Enterprise through 7.10.4.0 exposes the /trufusionPortal/jsp/internal_admin_cont | |
CVE-2025-27224 |
critical | 9.8 | 0.0087 | 2026-11-05 | TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to upl | |
CVE-2025-27223 |
high | 7.5 | 0.0220 | 2026-11-05 | TRUfusion Enterprise through 7.10.4.0 exposes the encrypted COOKIEID as an authentication | |
CVE-2025-27222 |
high | 8.6 | 0.0198 | 2026-11-05 | TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint | |
CVE-2025-61247 |
high | 8.2 | 0.0025 | 2026-11-05 | indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in the password p | |
CVE-2025-60791 |
medium | 6.2 | 0.0011 | 2026-11-05 | 1 PoC | Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information |
CVE-2025-60425 |
high | 8.6 | 0.0098 | 2026-11-05 | 1 PoC | Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens wh |
CVE-2025-61482 |
high | 7.2 | 0.0015 | 2026-11-05 | Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4 | |
CVE-2025-52268 |
high | 7.5 | 0.0032 | 2026-11-05 | StarCharge Artemis AC Charger 7-22 kW v1.0.4 was discovered to contain a hardcoded AES key | |
CVE-2025-52264 |
high | 8.0 | 0.0029 | 2026-11-05 | StarCharge Artemis AC Charger 7-22 kW v1.0.4 was discovered to contain a stack overflow vi | |
CVE-2025-61481 |
critical | 10.0 | 0.0029 | 2026-11-05 | An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management inter | |
CVE-2025-60291 |
critical | 9.1 | 0.0033 | 2026-11-05 | An issue was discovered in eTimeTrackLite Web thru 12.0 (20250704). There is a permission | |
CVE-2025-52263 |
high | 8.0 | 0.0017 | 2026-11-05 | An issue in the Web Configuration module of Startcharge Artemis AC Charger 7-22 kW v1.0.4 | |
CVE-2025-60954 |
high | 8.3 | 0.0046 | 2026-11-05 | Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimu | |
CVE-2025-60419 |
medium | 6.2 | 0.0013 | 2026-11-05 | An issue was discovered in the NDIS Usermode IO driver (RtkIOAC60.sys, version 6.0.5600.16 | |
CVE-2025-60735 |
high | 7.6 | 0.0027 | 2026-11-05 | PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function | |
CVE-2025-60731 |
high | 7.6 | 0.0027 | 2026-11-05 | PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function | |
CVE-2025-60730 |
high | 7.6 | 0.0029 | 2026-11-05 | PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme fun | |
CVE-2025-60729 |
medium | 5.3 | 0.0032 | 2026-11-05 | PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath fun | |
CVE-2025-60803 |
critical | 9.8 | 0.0061 | 2026-11-05 | Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remo | |
CVE-2025-60801 |
high | 8.2 | 0.0046 | 2026-11-05 | jshERP up to commit fbda24da was discovered to contain an unauthenticated remote code exec |