Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-64061 |
medium | 4.3 | 0.0023 | 2026-11-05 | Primakon Pi Portal 1.0.18 /api/v2/users endpoint is vulnerable to unauthorized data exposu | |
CVE-2025-63729 |
critical | 9.0 | 0.0009 | 2026-11-05 | 1 PoC | An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing at |
CVE-2025-64050 |
high | 7.2 | 0.0097 | 2026-11-05 | A Remote Code Execution (RCE) vulnerability in the template management component in REDAXO | |
CVE-2025-64049 |
medium | 4.8 | 0.0033 | 2026-11-05 | A stored cross-site scripting (XSS) vulnerability in the module management component in RE | |
CVE-2025-60739 |
critical | 9.6 | 0.0035 | 2026-11-05 | Cross Site Request Forgery (CSRF) vulnerability in Ilevia EVE X1 Server Firmware Version v | |
CVE-2025-63674 |
medium | 6.8 | 0.0031 | 2026-11-05 | An issue in Blurams Lumi Security Camera (A31C) v23.1227.472.2926 allows local physical at | |
CVE-2025-54563 |
high | 7.5 | 0.0037 | 2026-11-05 | An Incorrect Access Control vulnerability was found in the Application Server of Desktop A | |
CVE-2025-54347 |
critical | 9.9 | 0.0077 | 2026-11-05 | A Directory Traversal vulnerability was found in the Application Server of Desktop Alert P | |
CVE-2025-54341 |
medium | 5.3 | 0.0024 | 2026-11-05 | A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1 | |
CVE-2025-54338 |
high | 7.5 | 0.0030 | 2026-11-05 | An Incorrect Access Control vulnerability was found in the Application Server of Desktop A | |
CVE-2025-63498 |
medium | 6.1 | 0.0031 | 2026-11-05 | 1 PoC | alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" paramete |
CVE-2025-64048 |
medium | 6.1 | 0.0019 | 2026-11-05 | YCCMS 3.4 contains a stored cross-site scripting (XSS) vulnerability in the article manage | |
CVE-2025-64047 |
medium | 6.1 | 0.0019 | 2026-11-05 | OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.ph | |
CVE-2025-63914 |
medium | 6.5 | 0.0038 | 2026-11-05 | 1 PoC | An issue was discovered in Cinnamon kotaemon 0.11.0. The _may_extract_zip function in the |
CVE-2025-56400 |
high | 8.8 | 0.0018 | 2026-11-05 | Cross-Site Request Forgery (CSRF) vulnerability in the OAuth implementation of the Tuya SD | |
CVE-2025-63958 |
critical | 9.8 | 0.0058 | 2026-11-05 | MILLENSYS Vision Tools Workspace 6.5.0.2585 exposes a sensitive configuration endpoint (/M | |
CVE-2025-63953 |
medium | 6.5 | 0.0017 | 2026-11-05 | A Cross-Site Request Forgery (CSRF) in the /usapi?method=add-user component of Magewell Pr | |
CVE-2025-63952 |
medium | 5.7 | 0.0017 | 2026-11-05 | A Cross-Site Request Forgery (CSRF) in the /mwapi?method=add-user component of Magewell Pr | |
CVE-2025-63435 |
medium | 4.3 | 0.0039 | 2026-11-05 | Xtooltech Xtool AnyScan Android Application 4.40.40 is Missing Authentication for Critical | |
CVE-2025-63434 |
high | 8.8 | 0.0033 | 2026-11-05 | The update mechanism in Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is i | |
CVE-2025-63433 |
medium | 4.6 | 0.0021 | 2026-11-05 | Xtooltech Xtool AnyScan Android Application 4.40.40 and prior uses a hardcoded cryptograph | |
CVE-2025-63432 |
medium | 4.6 | 0.0018 | 2026-11-05 | Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is Missing SSL Certificate V | |
CVE-2025-60917 |
medium | 4.6 | 0.0023 | 2026-11-05 | A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of | |
CVE-2025-60916 |
medium | 5.4 | 0.0025 | 2026-11-05 | A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of | |
CVE-2025-60915 |
high | 8.1 | 0.0046 | 2026-11-05 | An issue in the size query parameter (/views/file.py) of Austrian Archaeological Institute | |
CVE-2025-60914 |
medium | 4.6 | 0.0020 | 2026-11-05 | Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 all | |
CVE-2025-60638 |
high | 7.5 | 0.0037 | 2026-11-05 | An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denia | |
CVE-2025-60633 |
medium | 6.5 | 0.0038 | 2026-11-05 | An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denia | |
CVE-2025-60632 |
medium | 6.5 | 0.0026 | 2026-11-05 | An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denia | |
CVE-2025-56423 |
medium | 5.3 | 0.0033 | 2026-11-05 | An issue in Austrian Academy of Sciences (AW) Austrian Archaeological Institute OpenAtlas | |
CVE-2025-56401 |
high | 7.6 | 0.0027 | 2026-11-05 | ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumn | |
CVE-2025-65503 |
medium | 5.5 | 0.0024 | 2026-11-05 | Use after free in endpoint destructors in Redboltz async_mqtt 10.2.5 allows local users to | |
CVE-2025-65502 |
medium | 4.3 | 0.0030 | 2026-11-05 | Null pointer dereference in add_ca_certs() in Cesanta Mongoose before 7.2 allows remote at | |
CVE-2025-65501 |
medium | 4.3 | 0.0028 | 2026-11-05 | Null pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5 allows remote | |
CVE-2025-65500 |
medium | 4.3 | 0.0028 | 2026-11-05 | NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libc | |
CVE-2025-65499 |
medium | 4.3 | 0.0028 | 2026-11-05 | Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 al | |
CVE-2025-65498 |
medium | 4.3 | 0.0028 | 2026-11-05 | NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libc | |
CVE-2025-65497 |
medium | 4.3 | 0.0028 | 2026-11-05 | NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libc | |
CVE-2025-65496 |
medium | 4.3 | 0.0028 | 2026-11-05 | NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libc | |
CVE-2025-65495 |
high | 7.5 | 0.0026 | 2026-11-05 | Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4 | |
CVE-2025-65494 |
high | 7.5 | 0.0026 | 2026-11-05 | NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoa | |
CVE-2025-65493 |
high | 7.5 | 0.0040 | 2026-11-05 | NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attacke | |
CVE-2025-61138 |
high | 7.5 | 0.0031 | 2026-11-05 | Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /de | |
CVE-2025-63807 |
critical | 9.8 | 0.0052 | 2026-11-05 | An issue was discovered in weijiang1994 university-bbs (aka Blogin) in commit 9e06bab430bf | |
CVE-2025-63685 |
critical | 9.8 | 0.0040 | 2026-11-05 | Quark Cloud Drive v3.23.2 has a DLL Hijacking vulnerability. This vulnerability stems from | |
CVE-2025-25613 |
high | 7.5 | 0.0025 | 2026-11-05 | FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, | |
CVE-2025-63889 |
high | 7.5 | 0.0032 | 2026-11-05 | The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows a | |
CVE-2025-63888 |
critical | 9.8 | 0.0081 | 2026-11-05 | 1 PoC | The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0. |
CVE-2025-64027 |
medium | 6.1 | 0.0025 | 2026-11-05 | 1 PoC | Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerabilit |
CVE-2025-63848 |
medium | 6.1 | 0.0021 | 2026-11-05 | 1 PoC | Stored cross site scripting (xss) vulnerability in SWISH prolog thru 2.2.0 allowing attack |