Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-63563 |
medium | 6.5 | 0.0027 | 2026-11-05 | Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly i | |
CVE-2025-63562 |
medium | 6.3 | 0.0020 | 2026-11-05 | Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insuff | |
CVE-2025-63458 |
high | 7.5 | 0.0040 | 2026-11-05 | Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone paramet | |
CVE-2025-63454 |
high | 7.5 | 0.0040 | 2026-11-05 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId par | |
CVE-2025-63459 |
high | 7.5 | 0.0041 | 2026-11-05 | Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the | |
CVE-2025-63463 |
high | 7.5 | 0.0041 | 2026-11-05 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the w | |
CVE-2025-63461 |
high | 7.5 | 0.0041 | 2026-11-05 | Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the | |
CVE-2025-63460 |
high | 7.5 | 0.0041 | 2026-11-05 | Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the | |
CVE-2025-63469 |
high | 7.5 | 0.0041 | 2026-11-05 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the s | |
CVE-2025-63468 |
high | 7.5 | 0.0041 | 2026-11-05 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the h | |
CVE-2025-63467 |
high | 7.5 | 0.0041 | 2026-11-05 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the s | |
CVE-2025-63466 |
high | 7.5 | 0.0041 | 2026-11-05 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the p | |
CVE-2025-29270 |
critical | 10.0 | 0.0036 | 2026-11-05 | Incorrect access control in the realtime.cgi endpoint of Deep Sea Electronics devices DSE8 | |
CVE-2025-61427 |
medium | 6.1 | 0.0023 | 2026-11-05 | A reflected cross-site scripting (XSS) vulnerability in BEO GmbH BEO Atlas Einfuhr Ausfuhr | |
CVE-2025-57108 |
critical | 9.8 | 0.0040 | 2026-11-05 | Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerabi | |
CVE-2025-57107 |
high | 7.1 | 0.0018 | 2026-11-05 | Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerab | |
CVE-2025-57106 |
high | 7.5 | 0.0043 | 2026-11-05 | Kitware VTK (Visualization Toolkit) up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLT | |
CVE-2025-63422 |
high | 7.5 | 0.0033 | 2026-11-05 | Incorrect access control in the Web management interface in Each Italy Wireless Mini Route | |
CVE-2025-63298 |
high | 8.2 | 0.0052 | 2026-11-05 | 1 PoC | A path traversal vulnerability was identified in SourceCodester Pet Grooming Management Sy |
CVE-2025-57109 |
medium | 6.5 | 0.0028 | 2026-11-05 | Kitware VTK (Visualization Toolkit) 9.5.0 is vulnerable to Heap Use-After-Free in vtkGLTFI | |
CVE-2025-52180 |
medium | 6.1 | 0.0026 | 2026-11-05 | Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier allo | |
CVE-2025-52179 |
medium | 6.1 | 0.0026 | 2026-11-05 | Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Revolution 4.1 and earlier al | |
CVE-2025-56313 |
medium | 6.1 | 0.0024 | 2026-11-05 | A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the /publix/run end | |
CVE-2025-63885 |
medium | 6.1 | 0.0020 | 2026-11-05 | A stored cross-site scripting (XSS) vulnerability in AIxBlock commit 04f305 allows attacke | |
CVE-2025-61121 |
high | 7.5 | 0.0030 | 2026-11-05 | Mobile Scanner Android App version 2.12.38 (package name com.glority.everlens), developed | |
CVE-2025-61120 |
high | 7.5 | 0.0030 | 2026-11-05 | AG Life Logger Android App version v1.0.2.72 and before (package name com.donki.healthy), | |
CVE-2025-61119 |
high | 7.5 | 0.0030 | 2026-11-05 | Kanova Android App version 1.0.27 (package name com.karelane), developed by Karely L.L.C., | |
CVE-2025-61114 |
high | 7.5 | 0.0034 | 2026-11-05 | 2nd Line Android App version v1.2.92 and before (package name com.mysecondline.app), devel | |
CVE-2025-60950 |
medium | 6.1 | 0.0028 | 2026-11-05 | An arbitrary file upload vulnerability in the Data Preparation function of AIxBlock commit | |
CVE-2025-61118 |
high | 7.5 | 0.0031 | 2026-11-05 | mCarFix Motorists App version 2.3 (package name com.skytop.mcarfix), developed by Paniel M | |
CVE-2025-61116 |
high | 7.5 | 0.0034 | 2026-11-05 | AdForest - Classified Android App version 4.0.12 (package name scriptsbundle.adforest), de | |
CVE-2025-61113 |
high | 7.5 | 0.0030 | 2026-11-05 | TalkTalk 3.3.6 Android App contains improper access control vulnerabilities in multiple AP | |
CVE-2024-4418 |
medium | 6.2 | 0.0049 | 2026-11-05 | A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad | |
CVE-2026-123023 |
medium | 5.5 | 0.0059 | 2026-11-05 | A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function c | |
CVE-2026-114277 |
medium | 6.5 | 0.0055 | 2026-11-05 | Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBi | |
CVE-2026-114272 |
medium | 6.5 | 0.0045 | 2026-11-05 | Authorization Bypass Through User-Controlled Key in the content viewing component in Apach | |
CVE-2026-114271 |
medium | 6.5 | 0.0045 | 2026-11-05 | Authorization Bypass Through User-Controlled Key in the shopping list services in Apache O | |
CVE-2026-114235 |
medium | 6.5 | 0.0045 | 2026-11-05 | Direct Request ('Forced Browsing') in the Order component in Apache OFBiz 24.09 before 24. | |
CVE-2026-114233 |
high | 8.1 | 0.0045 | 2026-11-05 | Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 | |
CVE-2026-114229 |
medium | 6.1 | 0.0042 | 2026-11-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in th | |
CVE-2026-109928 |
high | 7.4 | 0.0038 | 2026-11-05 | Incorrect Implementation of Authentication Algorithm in the password-reset and login JWT v | |
CVE-2026-109856 |
medium | 6.5 | 0.0047 | 2026-11-05 | Direct Request ('Forced Browsing') to Financial Account services in Apache OFBiz 24.09 bef | |
CVE-2026-109837 |
medium | 5.4 | 0.0044 | 2026-11-05 | Authorization Bypass Through User-Controlled Key in Order Returns in Apache OFBiz 24.09 be | |
CVE-2026-109129 |
medium | 5.4 | 0.0044 | 2026-11-05 | Authorization Bypass Through User-Controlled Key in the Order Manager component in Apache | |
CVE-2026-105461 |
high | 7.5 | 0.0027 | 2026-11-05 | Missing check for ORDERMGR_UPDATE in ordermgr allows user with only ORDERMGR_VIEW permiss | |
CVE-2026-105330 |
critical | 9.8 | 0.0061 | 2026-11-05 | Use of Hard-coded Cryptographic Key in JWT token authentication in Apache OFBiz 24.09.06 a | |
CVE-2024-5148 |
high | 7.5 | 0.0057 | 2026-11-05 | A flaw was found in the gnome-remote-desktop package. The gnome-remote-desktop system daem | |
CVE-2026-97356 |
medium | 6.5 | 0.0050 | 2026-11-05 | External Control of File Name or Path vulnerability in the ViewFile component of Label Man | |
CVE-2026-97355 |
medium | 6.5 | 0.0028 | 2026-11-05 | Use of Hard-coded Password vulnerability in the AdminServer component in Apache OFBiz 24.0 | |
CVE-2026-92887 |
high | 7.3 | 0.0069 | 2026-11-05 | Incorrect default value in the REST API framework's .rest.xml definition parser (ModelApiR |