Browse All CVEs
50,481 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-60566 |
high | 7.5 | 0.0042 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60565 |
high | 7.5 | 0.0037 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60564 |
high | 7.5 | 0.0037 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60563 |
high | 7.5 | 0.0037 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60562 |
high | 7.5 | 0.0037 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60561 |
high | 7.5 | 0.0037 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60559 |
high | 7.5 | 0.0037 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60558 |
high | 7.5 | 0.0037 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60557 |
high | 7.5 | 0.0037 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60556 |
high | 7.5 | 0.0037 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60555 |
high | 7.5 | 0.0037 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60554 |
critical | 9.8 | 0.0041 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60551 |
high | 7.5 | 0.0037 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the next_page | |
CVE-2025-60548 |
critical | 9.8 | 0.0041 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60547 |
high | 7.5 | 0.0037 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60938 |
high | 7.5 | 0.0062 | 2026-11-05 | Emoncms 11.7.3 has a remote code execution vulnerability in the firmware upload feature th | |
CVE-2025-60936 |
medium | 6.1 | 0.0019 | 2026-11-05 | Emoncms 11.7.3 is vulnerable to Cross Site in the input handling mechanism. This vulnerabi | |
CVE-2025-60569 |
high | 7.5 | 0.0051 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60568 |
high | 7.5 | 0.0037 | 2026-11-05 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-56438 |
medium | 6.8 | 0.0014 | 2026-11-05 | An issue in the firmware update mechanism of Nous W3 Smart WiFi Camera v1.33.50.82 allows | |
CVE-2025-46183 |
high | 8.2 | 0.0034 | 2026-11-05 | The Utils.deserialize function in pgCodeKeeper 10.12.0 processes serialized data from untr | |
CVE-2025-54966 |
medium | 4.3 | 0.0024 | 2026-11-05 | An issue was discovered in BAE SOCET GXP before 4.6.0.2. Some endpoints on the SOCET GXP J | |
CVE-2025-54964 |
high | 8.4 | 0.0031 | 2026-11-05 | An issue was discovered in BAE SOCET GXP before 4.6.0.2. An attacker with the ability to i | |
CVE-2025-54963 |
medium | 6.5 | 0.0070 | 2026-11-05 | An issue was discovered in BAE SOCET GXP before 4.6.0.2. An attacker with the ability to i | |
CVE-2025-60859 |
medium | 6.1 | 0.0028 | 2026-11-05 | Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers | |
CVE-2025-60837 |
medium | 6.1 | 0.0020 | 2026-11-05 | A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to ex | |
CVE-2025-61464 |
medium | 6.5 | 0.0023 | 2026-11-05 | gnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the | |
CVE-2025-61413 |
medium | 6.1 | 0.0029 | 2026-11-05 | A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piran | |
CVE-2025-57240 |
medium | 6.1 | 0.0023 | 2026-11-05 | Cross site scripting (XSS) vulnerability in 17gz International Student service system 1.0 | |
CVE-2025-50951 |
medium | 6.5 | 0.0026 | 2026-11-05 | FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy functi | |
CVE-2025-61136 |
high | 7.1 | 0.0046 | 2026-11-05 | A Host Header Injection vulnerability in the password reset component in axewater sharewar | |
CVE-2025-61132 |
high | 7.1 | 0.0038 | 2026-11-05 | A Host Header Injection vulnerability in the password reset component in levlaz braindump | |
CVE-2025-56009 |
medium | 5.3 | 0.0019 | 2026-11-05 | Cross site request forgery (CSRF) vulnerability in KeeneticOS before 4.3 at "/rci" API end | |
CVE-2025-56008 |
medium | 6.1 | 0.0024 | 2026-11-05 | Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page a | |
CVE-2025-56007 |
medium | 6.5 | 0.0034 | 2026-11-05 | CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take o | |
CVE-2025-60852 |
medium | 6.5 | 0.0041 | 2026-11-05 | 1 PoC | A CSV Injection vulnerability existed in Instant Developer Foundation versions prior to 25 |
CVE-2025-62401 |
medium | 4.3 | 0.0023 | 2026-11-05 | An issue in Moodle’s timed assignment feature allowed students to bypass the time restrict | |
CVE-2025-62400 |
medium | 6.5 | 0.0027 | 2026-11-05 | Moodle exposed the names of hidden groups to users who had permission to create calendar e | |
CVE-2025-62399 |
high | 7.5 | 0.0040 | 2026-11-05 | Moodle’s mobile and web service authentication endpoints did not sufficiently restrict rep | |
CVE-2025-62398 |
medium | 5.4 | 0.0025 | 2026-11-05 | A serious authentication flaw allowed attackers with valid credentials to bypass multi-fac | |
CVE-2025-62397 |
medium | 5.3 | 0.0028 | 2026-11-05 | The router’s inconsistent response to invalid course IDs allowed attackers to infer which | |
CVE-2025-62395 |
medium | 4.3 | 0.0025 | 2026-11-05 | A flaw in the cohort search web service allowed users with permissions in lower contexts t | |
CVE-2025-62394 |
medium | 4.3 | 0.0023 | 2026-11-05 | Moodle failed to verify enrolment status correctly when sending quiz notifications. As a r | |
CVE-2025-62393 |
medium | 4.3 | 0.0025 | 2026-11-05 | A flaw was found in the course overview output function where user access permissions were | |
CVE-2025-60343 |
high | 7.5 | 0.0041 | 2026-11-05 | Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allow | |
CVE-2025-60342 |
high | 7.5 | 0.0042 | 2026-11-05 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page paramete | |
CVE-2025-60341 |
high | 7.5 | 0.0040 | 2026-11-05 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid paramete | |
CVE-2025-60340 |
high | 7.5 | 0.0041 | 2026-11-05 | Multiple buffer overflows in the SetClientState function of Tenda AC6 v.15.03.06.50 allows | |
CVE-2025-60339 |
high | 7.5 | 0.0041 | 2026-11-05 | Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.0 | |
CVE-2025-60337 |
high | 7.5 | 0.0041 | 2026-11-05 | Tenda AC6 V2.0 15.03.06.50 was discovered to contain a buffer overflow in the speed_dir pa |