Browse All CVEs
13,097 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2023-53713 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: arm64: sme: Use STR P | |
CVE-2023-53718 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not s | |
CVE-2023-53726 |
high | 7.1 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: arm64: csum: Fix OoB | |
CVE-2023-53729 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: qmi_encdec | |
CVE-2025-61035 |
high | 7.7 | 0.0015 | 2026-10-29 | The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permiss | |
CVE-2025-49935 |
high | 7.5 | 0.0048 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-58955 |
high | 8.1 | 0.0052 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-58958 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-58966 |
high | 7.1 | 0.0024 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-58967 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-59550 |
high | 8.1 | 0.0052 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-59555 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-59558 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-59564 |
high | 8.1 | 0.0053 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-59571 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-59580 |
high | 8.8 | 0.0039 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core | |
CVE-2025-62005 |
high | 7.1 | 0.0014 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in FantasticPlugins SUMO Memberships for W | |
CVE-2025-60335 |
high | 7.5 | 0.0213 | 2026-10-29 | A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 | |
CVE-2025-50950 |
high | 7.5 | 0.0037 | 2026-10-29 | Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState: | |
CVE-2023-53733 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_u32: | |
CVE-2025-60570 |
high | 7.5 | 0.0046 | 2026-10-29 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60549 |
high | 7.5 | 0.0037 | 2026-10-29 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60550 |
high | 7.5 | 0.0037 | 2026-10-29 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2025-60552 |
high | 7.5 | 0.0037 | 2026-10-29 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime p | |
CVE-2023-49440 |
high | 8.8 | 0.0032 | 2026-10-29 | 1 PoC | AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter." |
CVE-2025-60424 |
high | 7.6 | 0.0072 | 2026-10-29 | A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v | |
CVE-2023-7324 |
high | 8.1 | 0.0031 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possib | |
CVE-2025-61196 |
high | 8.8 | 0.0056 | 2026-10-29 | An issue in BusinessNext CRMnext v.10.8.3.0 allows a remote attacker to execute arbitrary | |
CVE-2025-61498 |
high | 7.5 | 0.0038 | 2026-10-29 | A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers | |
CVE-2025-60749 |
high | 7.8 | 0.0016 | 2026-10-29 | DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used b | |
CVE-2025-63462 |
high | 7.5 | 0.0041 | 2026-10-29 | Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the | |
CVE-2025-63464 |
high | 7.5 | 0.0041 | 2026-10-29 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the s | |
CVE-2025-63465 |
high | 7.5 | 0.0041 | 2026-10-29 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the s | |
CVE-2025-63561 |
high | 7.5 | 0.0040 | 2026-10-29 | Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is susceptible to a | |
CVE-2025-63248 |
high | 7.5 | 0.0032 | 2026-10-29 | DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, | |
CVE-2023-43000 |
high | 8.8 | 0.0404 | 2026-10-29 | KEV | Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to th |
CVE-2025-63417 |
high | 7.2 | 0.0025 | 2026-10-29 | A Stored Cross-Site Scripting (XSS) vulnerability in the chat functionality of the SelfBes | |
CVE-2025-39463 |
high | 7.5 | 0.0061 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-48090 |
high | 8.1 | 0.0044 | 2026-10-29 | Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme b | |
CVE-2025-58629 |
high | 7.5 | 0.0038 | 2026-10-29 | Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploitin | |
CVE-2025-58964 |
high | 7.1 | 0.0023 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-59556 |
high | 7.1 | 0.0023 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62034 |
high | 8.8 | 0.0035 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: f | |
CVE-2025-62035 |
high | 8.8 | 0.0045 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo | |
CVE-2025-62036 |
high | 7.1 | 0.0023 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62053 |
high | 8.1 | 0.0043 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-62055 |
high | 8.1 | 0.0043 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-62057 |
high | 7.1 | 0.0024 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62066 |
high | 7.5 | 0.0039 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-13012 |
high | 7.5 | 0.0024 | 2026-10-29 | Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Fir |