Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-27918 |
critical | 9.8 | 0.0070 | 2026-11-05 | An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0. | |
CVE-2025-27917 |
high | 7.5 | 0.0050 | 2026-11-05 | An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0. | |
CVE-2025-27916 |
high | 7.5 | 0.0032 | 2026-11-05 | An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before | |
CVE-2025-63588 |
high | 7.1 | 0.0036 | 2026-11-05 | 1 PoC | An unauthenticated reflected cross-site scripting vulnerability in the query handling of C |
CVE-2025-63560 |
high | 7.5 | 0.0051 | 2026-11-05 | An issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 | |
CVE-2025-63307 |
high | 8.1 | 0.0040 | 2026-11-05 | 1 PoC | alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting (XSS). The appl |
CVE-2025-59392 |
medium | 6.8 | 0.0022 | 2026-11-05 | On Elspec G5 devices through 1.2.2.19, a person with physical access to the device can res | |
CVE-2025-63585 |
medium | 6.5 | 0.0021 | 2026-11-05 | 1 PoC | OSSN (Open Source Social Network) 8.6 is vulnerable to SQL Injection in /action/rtcomments |
CVE-2025-60784 |
medium | 6.5 | 0.0039 | 2026-11-05 | A vulnerability in the XiaozhangBang Voluntary Like System V8.8 allows remote attackers to | |
CVE-2025-56232 |
medium | 6.8 | 0.0013 | 2026-11-05 | GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who contro | |
CVE-2025-55343 |
critical | 9.9 | 0.0055 | 2026-11-05 | Quipux 4.0.1 through e1774ac allows authenticated users to conduct SQL injection attacks v | |
CVE-2025-55342 |
medium | 5.3 | 0.0026 | 2026-11-05 | Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean | |
CVE-2025-55341 |
medium | 6.5 | 0.0022 | 2026-11-05 | Cross Site Scripting vulnerability in Quipux 4.0.1 through e1774ac allows anexos/anexos_nu | |
CVE-2025-56231 |
critical | 9.1 | 0.0025 | 2026-11-05 | Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate | |
CVE-2025-59716 |
medium | 5.3 | 0.0095 | 2026-11-05 | ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests | |
CVE-2025-63601 |
critical | 9.9 | 0.0064 | 2026-11-05 | Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows a | |
CVE-2025-61304 |
critical | 9.8 | 0.0192 | 2026-11-05 | 1 PoC | OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via |
CVE-2025-60753 |
medium | 5.5 | 0.0021 | 2026-11-05 | An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substi | |
CVE-2025-57130 |
high | 8.8 | 0.0039 | 2026-11-05 | An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up t | |
CVE-2025-61084 |
high | 7.1 | 0.0024 | 2026-11-05 | MDaemon Mail Server 23.5.2 validates SPF, DKIM, and DMARC using the email enclosed in angl | |
CVE-2025-56230 |
high | 7.5 | 0.0023 | 2026-11-05 | Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in | |
CVE-2025-27374 |
medium | 5.3 | 0.0031 | 2026-11-05 | An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Weara | |
CVE-2025-61431 |
medium | 6.1 | 0.0020 | 2026-11-05 | A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpo | |
CVE-2025-54327 |
medium | 6.5 | 0.0022 | 2026-11-05 | An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1 | |
CVE-2025-49494 |
high | 7.5 | 0.0036 | 2026-11-05 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos | |
CVE-2025-54334 |
high | 7.5 | 0.0036 | 2026-11-05 | An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1 | |
CVE-2025-52513 |
high | 7.5 | 0.0036 | 2026-11-05 | An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condit | |
CVE-2025-54333 |
medium | 5.3 | 0.0031 | 2026-11-05 | An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. | |
CVE-2025-54325 |
medium | 5.3 | 0.0031 | 2026-11-05 | An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1 | |
CVE-2025-54332 |
high | 7.5 | 0.0036 | 2026-11-05 | An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. | |
CVE-2025-54331 |
medium | 5.3 | 0.0031 | 2026-11-05 | An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. | |
CVE-2025-54330 |
medium | 5.3 | 0.0026 | 2026-11-05 | An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. | |
CVE-2025-54329 |
high | 7.5 | 0.0041 | 2026-11-05 | An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem | |
CVE-2025-54323 |
high | 7.5 | 0.0032 | 2026-11-05 | An issue was discovered in the camera in Samsung Mobile Processor Exynos 980, 990, 850, 10 | |
CVE-2025-12695 |
medium | 5.9 | 0.0034 | 2026-11-05 | The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive fi | |
CVE-2025-63293 |
medium | 6.5 | 0.0038 | 2026-11-05 | FairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions | |
CVE-2025-63593 |
medium | 6.1 | 0.0024 | 2026-11-05 | Grav CMS1.7.49.5 is vulnerable to Cross Site Scripting (XSS). | |
CVE-2025-50735 |
high | 7.5 | 0.0092 | 2026-11-05 | Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing | |
CVE-2025-63453 |
critical | 9.8 | 0.0055 | 2026-11-05 | Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/contact.php. | |
CVE-2025-63452 |
critical | 9.4 | 0.0047 | 2026-11-05 | Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/forgot-pass.php. | |
CVE-2025-63451 |
critical | 9.8 | 0.0055 | 2026-11-05 | Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php. | |
CVE-2025-63450 |
medium | 5.4 | 0.0029 | 2026-11-05 | Car-Booking-System-PHP v.1.0 is vulnerable to Cross Site Scripting (XSS) in /carlux/bookin | |
CVE-2025-63449 |
medium | 5.4 | 0.0030 | 2026-11-05 | Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /orders.php. | |
CVE-2025-63447 |
medium | 6.1 | 0.0030 | 2026-11-05 | Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_customer. | |
CVE-2025-63446 |
medium | 6.1 | 0.0030 | 2026-11-05 | Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /add_vendor.ph | |
CVE-2025-60785 |
high | 8.8 | 0.0081 | 2026-11-05 | A remote code execution (RCE) vulnerability in the Postgres Drivers component of iceScrum | |
CVE-2025-63443 |
medium | 5.4 | 0.0024 | 2026-11-05 | School Management System PHP v1.0 is vulnerable to Cross Site Scripting (XSS) in /login.ph | |
CVE-2025-60892 |
medium | 6.8 | 0.0016 | 2026-11-05 | An issue in Raspberry Pi Imager version 1.9.6 for Windows, affecting its OS customization | |
CVE-2025-45663 |
medium | 6.5 | 0.0037 | 2026-11-05 | An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when cr | |
CVE-2025-29699 |
medium | 6.5 | 0.0032 | 2026-11-05 | NetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function. |