Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-63408 |
high | 7.8 | 0.0043 | 2026-11-05 | 1 PoC | Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an |
CVE-2025-63892 |
medium | 6.8 | 0.0039 | 2026-11-05 | 1 PoC | A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Aff |
CVE-2025-63883 |
medium | 5.4 | 0.0027 | 2026-11-05 | A DOM-based cross-site scripting vulnerability exists in electic-shop v1.0 (Bhabishya-123/ | |
CVE-2025-63292 |
low | 3.5 | 0.0011 | 2026-11-05 | Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révo | |
CVE-2025-63918 |
medium | 6.2 | 0.0043 | 2026-11-05 | PDFPatcher executable does not validate user-supplied file paths, allowing directory trave | |
CVE-2025-63917 |
high | 7.1 | 0.0043 | 2026-11-05 | PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restric | |
CVE-2025-64046 |
medium | 6.1 | 0.0019 | 2026-11-05 | OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run | |
CVE-2025-63916 |
high | 8.1 | 0.0159 | 2026-11-05 | MyScreenTools v2.2.1.0 contains a critical OS command injection vulnerability in the GIF c | |
CVE-2025-63748 |
high | 8.8 | 0.0043 | 2026-11-05 | QaTraq 6.9.2 allows authenticated users to upload arbitrary files via the "Add Attachment" | |
CVE-2025-63747 |
critical | 9.8 | 0.0047 | 2026-11-05 | QaTraq 6.9.2 ships with administrative account credentials which are enabled in default in | |
CVE-2025-63708 |
medium | 6.1 | 0.0029 | 2026-11-05 | 1 PoC | Cross-Site Scripting (XSS) vulnerability exists in SourceCodester AI Font Matcher (nid=184 |
CVE-2025-64084 |
medium | 5.4 | 0.0033 | 2026-11-05 | An authenticated SQL injection vulnerability exists in Cloudlog 2.7.5 and earlier. The vuc | |
CVE-2025-63891 |
high | 7.5 | 0.0049 | 2026-11-05 | Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book | |
CVE-2025-63745 |
medium | 5.5 | 0.0016 | 2026-11-05 | A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier withi | |
CVE-2025-63744 |
medium | 4.3 | 0.0031 | 2026-11-05 | A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier withi | |
CVE-2025-63701 |
medium | 6.8 | 0.0022 | 2026-11-05 | A heap corruption vulnerability exists in the Advantech TP-3250 printer driver's DrvUI_x64 | |
CVE-2025-63680 |
high | 8.6 | 0.0031 | 2026-11-05 | Nero BackItUp in the Nero Productline is vulnerable to a path parsing/UI rendering flaw (C | |
CVE-2025-63291 |
medium | 5.4 | 0.0026 | 2026-11-05 | When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB ob | |
CVE-2025-63830 |
medium | 6.1 | 0.0027 | 2026-11-05 | 1 PoC | CKFinder 1.4.3 is vulnerable to Cross Site Scripting (XSS) in the File Upload function. An |
CVE-2025-63725 |
medium | 6.1 | 0.0024 | 2026-11-05 | Reflected Cross-Site Scripting (XSS) vulnerability in SVX Portal 2.7A via the id parameter | |
CVE-2025-63724 |
medium | 6.0 | 0.0029 | 2026-11-05 | SQL injection (SQL-i) vulnerability in SVX Portal 2.7A via crafted POST request to admin/u | |
CVE-2025-54562 |
medium | 4.3 | 0.0024 | 2026-11-05 | A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1 | |
CVE-2025-54561 |
medium | 4.3 | 0.0021 | 2026-11-05 | An Incorrect Access Control vulnerability was found in the Application Server of Desktop A | |
CVE-2025-54560 |
low | 3.8 | 0.0020 | 2026-11-05 | A Server-side Request Forgery vulnerability was found in the Application Server of Desktop | |
CVE-2025-54559 |
low | 3.7 | 0.0029 | 2026-11-05 | An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 t | |
CVE-2025-54348 |
medium | 6.5 | 0.0018 | 2026-11-05 | A Stored Cross Site Scripting (XSS) vulnerability was found in the Application Server of D | |
CVE-2025-54346 |
high | 7.6 | 0.0027 | 2026-11-05 | A Reflected Cross Site Scripting (XSS) vulnerability was found in the Application Server o | |
CVE-2025-54345 |
high | 7.5 | 0.0032 | 2026-11-05 | An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 t | |
CVE-2025-54343 |
critical | 9.6 | 0.0028 | 2026-11-05 | An Incorrect Access Control vulnerability was found in the Application Server of Desktop A | |
CVE-2025-54342 |
low | 3.3 | 0.0009 | 2026-11-05 | A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1 | |
CVE-2025-54340 |
medium | 4.1 | 0.0009 | 2026-11-05 | A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1 | |
CVE-2025-54339 |
critical | 10.0 | 0.0033 | 2026-11-05 | An Incorrect Access Control vulnerability was found in the Application Server of Desktop A | |
CVE-2025-47222 |
medium | 6.5 | 0.0032 | 2026-11-05 | A class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2. Settin | |
CVE-2025-47221 |
medium | 5.3 | 0.0027 | 2026-11-05 | An arbitrary file write was found in Keyfactor SignServer versions prior to 7.3.2. The pro | |
CVE-2025-47220 |
medium | 5.3 | 0.0029 | 2026-11-05 | A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The pr | |
CVE-2025-60702 |
medium | 6.5 | 0.0256 | 2026-11-05 | A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592 | |
CVE-2025-60699 |
medium | 6.5 | 0.0090 | 2026-11-05 | A buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B | |
CVE-2025-55810 |
medium | 6.8 | 0.0025 | 2026-11-05 | A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with h | |
CVE-2025-63406 |
high | 8.8 | 0.0080 | 2026-11-05 | 2 PoC | An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remo |
CVE-2025-60675 |
medium | 5.4 | 0.0147 | 2026-11-05 | A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1 | |
CVE-2025-60674 |
medium | 6.8 | 0.0058 | 2026-11-05 | A stack buffer overflow vulnerability exists in the D-Link DIR-878A1 router firmware FW101 | |
CVE-2025-60673 |
medium | 6.5 | 0.0353 | 2026-11-05 | An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router f | |
CVE-2025-60672 |
medium | 6.5 | 0.0363 | 2026-11-05 | An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router f | |
CVE-2025-60701 |
medium | 6.5 | 0.0316 | 2026-11-05 | A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW | |
CVE-2025-60700 |
medium | 6.5 | 0.0316 | 2026-11-05 | A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW | |
CVE-2025-60698 |
high | 7.3 | 0.0393 | 2026-11-05 | A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW | |
CVE-2025-60697 |
high | 7.3 | 0.0382 | 2026-11-05 | A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW | |
CVE-2025-60693 |
medium | 6.5 | 0.0082 | 2026-11-05 | A stack-based buffer overflow exists in the get_merge_mac function of the httpd binary on | |
CVE-2025-60671 |
medium | 5.4 | 0.0143 | 2026-11-05 | A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1 | |
CVE-2025-60696 |
high | 8.4 | 0.0025 | 2026-11-05 | A stack-based buffer overflow vulnerability exists in the makeRequest.cgi binary of Linksy |