Browse All CVEs
13,098 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-34181 |
high | 8.7 | 0.0104 | 2026-10-29 | NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Conn | |
CVE-2024-44598 |
high | 8.8 | 0.0039 | 2026-10-29 | FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module. | |
CVE-2024-44599 |
high | 8.3 | 0.0047 | 2026-10-29 | FNT Command 13.4.0 is vulnerable to Directory Traversal. | |
CVE-2024-29371 |
high | 7.5 | 0.0026 | 2026-10-29 | In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by craft | |
CVE-2024-46062 |
high | 7.8 | 0.0020 | 2026-10-29 | Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerab | |
CVE-2025-60182 |
high | 7.1 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-64189 |
high | 7.1 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-64193 |
high | 7.5 | 0.0046 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-64213 |
high | 7.5 | 0.0036 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes MasterSt | |
CVE-2025-64376 |
high | 7.1 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-14874 |
high | 7.5 | 0.0060 | 2026-10-29 | A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a | |
CVE-2025-10021 |
high | 7.0 | 0.0015 | 2026-10-29 | A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK | |
CVE-2025-63663 |
high | 7.5 | 0.0029 | 2026-10-29 | Incorrect access control in the /api/v1/conversations/*/files API of GT Edge AI Platform b | |
CVE-2025-66735 |
high | 7.5 | 0.0044 | 2026-10-29 | youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in | |
CVE-2023-53965 |
high | 8.6 | 0.0024 | 2026-10-29 | SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows | |
CVE-2023-53973 |
high | 8.5 | 0.0025 | 2026-10-29 | Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows | |
CVE-2024-24844 |
high | 7.5 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allow | |
CVE-2024-9684 |
high | 7.5 | 0.0040 | 2026-10-29 | FreyrSCADA/IEC-60870-5-104 server v21.06.008 allows remote attackers to cause a denial of | |
CVE-2024-30855 |
high | 8.8 | 0.0022 | 2026-10-29 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability v | |
CVE-2024-25183 |
high | 7.5 | 0.0073 | 2026-10-29 | givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php. | |
CVE-2023-54193 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: r | |
CVE-2023-54198 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bound | |
CVE-2023-54200 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: | |
CVE-2023-54201 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix wrong r | |
CVE-2023-54202 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix race co | |
CVE-2023-54206 |
high | 7.8 | 0.0014 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: fi | |
CVE-2023-54207 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Correct | |
CVE-2023-54210 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: | |
CVE-2023-54214 |
high | 8.8 | 0.0030 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix | |
CVE-2023-54216 |
high | 7.8 | 0.0014 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix us | |
CVE-2023-54219 |
high | 7.5 | 0.0069 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: Revert "IB/isert: Fix | |
CVE-2023-54220 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix oop | |
CVE-2023-54227 |
high | 7.5 | 0.0051 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix tags leak | |
CVE-2023-54234 |
high | 7.8 | 0.0015 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix mis | |
CVE-2023-7332 |
high | 7.1 | 0.0040 | 2026-10-29 | PocketMine-MP versions prior to 4.18.1 contain an improper input validation vulnerability | |
CVE-2025-53966 |
high | 8.4 | 0.0016 | 2026-10-29 | An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Inc | |
CVE-2026-0621 |
high | 8.7 | 0.0044 | 2026-10-29 | Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expre | |
CVE-2026-0640 |
high | 7.4 | 0.0348 | 2026-10-29 | A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf | |
CVE-2026-0628 |
high | 8.8 | 0.2095 | 2026-10-29 | Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 al | |
CVE-2025-65805 |
high | 7.5 | 0.0038 | 2026-10-29 | OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS me | |
CVE-2026-0669 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2025-69035 |
high | 8.8 | 0.0042 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in Strongholdthemes Dental Care CPT dental | |
CVE-2026-0631 |
high | 8.5 | 0.0162 | 2026-10-29 | An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in T | |
CVE-2026-20649 |
high | 7.5 | 0.0046 | 2026-10-29 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26. | |
CVE-2026-28039 |
high | 7.5 | 0.0037 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-22742 |
high | 8.6 | 0.0036 | 2026-10-29 | Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulne | |
CVE-2026-22743 |
high | 7.5 | 0.0026 | 2026-10-29 | Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVector | |
CVE-2026-22744 |
high | 7.5 | 0.0026 | 2026-10-29 | In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string | |
CVE-2026-27650 |
high | 8.6 | 0.0094 | 2026-10-29 | OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulner | |
CVE-2026-32669 |
high | 8.7 | 0.0027 | 2026-10-29 | Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerabilit |