Browse All CVEs
13,095 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-13017 |
high | 8.1 | 0.0027 | 2026-10-29 | Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixe | |
CVE-2025-13018 |
high | 8.1 | 0.0027 | 2026-10-29 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox | |
CVE-2025-13019 |
high | 8.1 | 0.0027 | 2026-10-29 | Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in F | |
CVE-2025-13020 |
high | 8.8 | 0.0031 | 2026-10-29 | Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firef | |
CVE-2025-13032 |
high | 7.8 | 0.0025 | 2026-10-29 | Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows loca | |
CVE-2024-32008 |
high | 8.5 | 0.0013 | 2026-10-29 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update | |
CVE-2024-32009 |
high | 8.5 | 0.0012 | 2026-10-29 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update | |
CVE-2024-32010 |
high | 8.5 | 0.0013 | 2026-10-29 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update | |
CVE-2024-32011 |
high | 8.7 | 0.0042 | 2026-10-29 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update | |
CVE-2025-40827 |
high | 8.5 | 0.0017 | 2026-10-29 | A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Soli | |
CVE-2025-11700 |
high | 8.4 | 0.3168 | 2026-10-29 | N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection lea | |
CVE-2022-4984 |
high | 8.7 | 0.0048 | 2026-10-29 | ZenTao Biz < 6.5, ZenTao Max < 3.0, ZenTao Open Source Edition < 16.5, and ZenTao Open Sou | |
CVE-2025-40936 |
high | 7.3 | 0.0020 | 2026-10-29 | A vulnerability has been identified in PS/IGES Parasolid Translator Component (All version | |
CVE-2025-66020 |
high | 7.5 | 0.0036 | 2026-10-29 | Valibot helps validate data using a schema. In versions from 0.31.0 to 1.1.0, the EMOJI_RE | |
CVE-2025-46175 |
high | 7.5 | 0.0033 | 2026-10-29 | Ruoyi v4.8.0 is vulnerable to Incorrect Access Control. There is a missing checkUserDataSc | |
CVE-2025-51735 |
high | 7.5 | 0.0036 | 2026-10-29 | CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0. | |
CVE-2025-63365 |
high | 7.1 | 0.0030 | 2026-10-29 | SoftSea EPUB File Reader 1.0.0.0 is vulnerable to Directory Traversal. The vulnerability r | |
CVE-2025-65840 |
high | 8.8 | 0.0018 | 2026-10-29 | PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery (CSRF) in the CkEditorAd | |
CVE-2025-65877 |
high | 7.5 | 0.0030 | 2026-10-29 | Lvzhou CMS before commit c4ea0eb9cab5f6739b2c87e77d9ef304017ed615 (2025-09-22) is vulnerab | |
CVE-2025-65883 |
high | 8.4 | 0.0038 | 2026-10-29 | A vulnerability has been identified in Genexis Platinum P4410 router (Firmware P4410-V2–1. | |
CVE-2024-56835 |
high | 8.7 | 0.0051 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56836 |
high | 7.7 | 0.0043 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56837 |
high | 8.6 | 0.0052 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56838 |
high | 8.6 | 0.0039 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56839 |
high | 8.6 | 0.0064 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56840 |
high | 7.5 | 0.0064 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2025-40830 |
high | 8.4 | 0.0016 | 2026-10-29 | A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). Th | |
CVE-2025-40831 |
high | 7.1 | 0.0039 | 2026-10-29 | A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). Th | |
CVE-2025-40937 |
high | 8.7 | 0.0059 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-67521 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67525 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67526 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67527 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67529 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67531 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-63895 |
high | 7.5 | 0.0031 | 2026-10-29 | An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12 | |
CVE-2024-58287 |
high | 8.7 | 0.0342 | 2026-10-29 | reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan | |
CVE-2024-58293 |
high | 8.6 | 0.0035 | 2026-10-29 | Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authen | |
CVE-2024-58294 |
high | 8.7 | 0.0357 | 2026-10-29 | FreePBX 16 contains an authenticated remote code execution vulnerability in the API module | |
CVE-2024-58306 |
high | 8.7 | 0.0049 | 2026-10-29 | minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to c | |
CVE-2024-58309 |
high | 8.7 | 0.0058 | 2026-10-29 | xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote | |
CVE-2024-58312 |
high | 8.7 | 0.0120 | 2026-10-29 | xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attacke | |
CVE-2024-58313 |
high | 8.6 | 0.0061 | 2026-10-29 | xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated at | |
CVE-2025-40829 |
high | 7.3 | 0.0020 | 2026-10-29 | A vulnerability has been identified in Simcenter Femap (All versions < V2512). The affecte | |
CVE-2024-14010 |
high | 8.5 | 0.0115 | 2026-10-29 | Typora 1.7.4 contains a command injection vulnerability in the PDF export preferences that | |
CVE-2024-58305 |
high | 8.6 | 0.0043 | 2026-10-29 | WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inj | |
CVE-2025-34179 |
high | 8.7 | 0.0040 | 2026-10-29 | NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in | |
CVE-2025-34181 |
high | 8.7 | 0.0104 | 2026-10-29 | NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Conn | |
CVE-2024-44598 |
high | 8.8 | 0.0039 | 2026-10-29 | FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module. | |
CVE-2024-44599 |
high | 8.3 | 0.0047 | 2026-10-29 | FNT Command 13.4.0 is vulnerable to Directory Traversal. |