Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-52410 |
critical | 9.8 | 0.0032 | 2026-11-05 | Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability | |
CVE-2025-60738 |
critical | 9.8 | 0.0107 | 2026-11-05 | An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version | |
CVE-2025-60737 |
medium | 6.1 | 0.0034 | 2026-11-05 | Cross Site Scripting vulnerability in Ilevia EVE X1 Server Firmware Version<= 4.7.18.0.ede | |
CVE-2025-65226 |
medium | 4.3 | 0.0026 | 2026-11-05 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /go | |
CVE-2025-65223 |
medium | 4.3 | 0.0032 | 2026-11-05 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform | |
CVE-2025-65222 |
medium | 4.3 | 0.0252 | 2026-11-05 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of / | |
CVE-2025-65221 |
medium | 4.3 | 0.0032 | 2026-11-05 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform | |
CVE-2025-65220 |
medium | 4.3 | 0.0026 | 2026-11-05 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg v | |
CVE-2025-60799 |
medium | 6.1 | 0.0022 | 2026-11-05 | phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.ph | |
CVE-2025-60798 |
medium | 6.5 | 0.0031 | 2026-11-05 | phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at lin | |
CVE-2025-60797 |
medium | 6.5 | 0.0029 | 2026-11-05 | phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at | |
CVE-2025-60796 |
medium | 6.1 | 0.0025 | 2026-11-05 | phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting (XSS) vulnerabilities | |
CVE-2025-60794 |
medium | 6.5 | 0.0022 | 2026-11-05 | Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and rem | |
CVE-2025-63719 |
high | 7.3 | 0.0022 | 2026-11-05 | Campcodes Online Hospital Management System 1.0 is vulnerable to SQL Injection in /admin/i | |
CVE-2025-63371 |
high | 7.5 | 0.0076 | 2026-11-05 | Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerabi | |
CVE-2025-63932 |
high | 7.3 | 0.0808 | 2026-11-05 | D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vuln | |
CVE-2025-63214 |
medium | 6.5 | 0.0031 | 2026-11-05 | An issue was discovered in bridgetech VBC Server & Element Manager, firmware version 6.5.0 | |
CVE-2025-63213 |
critical | 9.8 | 0.0095 | 2026-11-05 | The QVidium Opera11 device (firmware version 2.9.0-Ax4x-opera11) is vulnerable to Remote C | |
CVE-2025-63212 |
medium | 6.5 | 0.0038 | 2026-11-05 | GatesAir Flexiva-LX devices on firmware 1.0.13 and 2.0, including models LX100, LX300, LX6 | |
CVE-2025-51663 |
high | 7.5 | 0.0044 | 2026-11-05 | A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote | |
CVE-2025-51662 |
medium | 5.4 | 0.0018 | 2026-11-05 | A stored cross-site scripting (XSS) vulnerability is found in the text sharing feature of | |
CVE-2025-51661 |
high | 7.5 | 0.0057 | 2026-11-05 | A path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary file | |
CVE-2025-63211 |
medium | 6.1 | 0.0029 | 2026-11-05 | Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firm | |
CVE-2025-63210 |
critical | 9.8 | 0.0058 | 2026-11-05 | The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 | |
CVE-2025-63209 |
high | 7.5 | 0.0044 | 2026-11-05 | The ELCA Star Transmitter Remote Control firmware 1.25 for STAR150, BP1000, STAR300, STAR2 | |
CVE-2025-63208 |
high | 7.5 | 0.0026 | 2026-11-05 | An issue was discovered in bridgetech VB288 Objective QoE Content Extractor, firmware vers | |
CVE-2025-63207 |
critical | 9.8 | 0.0740 | 2026-11-05 | The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerabl | |
CVE-2025-63206 |
critical | 9.8 | 0.0057 | 2026-11-05 | An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, | |
CVE-2025-63205 |
high | 7.5 | 0.0040 | 2026-11-05 | An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF | |
CVE-2025-63879 |
medium | 6.1 | 0.0025 | 2026-11-05 | A reflected cross-site scripted (XSS) vulnerability in the /ecommerce/products.php compone | |
CVE-2025-63878 |
medium | 6.5 | 0.0026 | 2026-11-05 | Github Restaurant Website Restoran v1.0 was discovered to contain a SQL injection vulnerab | |
CVE-2025-63224 |
critical | 10.0 | 0.0074 | 2026-11-05 | The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to i | |
CVE-2025-63223 |
critical | 9.8 | 0.0080 | 2026-11-05 | The Axel Technology StreamerMAX MK II devices (firmware versions 0.8.5 to 1.0.3) are vulne | |
CVE-2025-63221 |
critical | 9.1 | 0.0056 | 2026-11-05 | The Axel Technology puma devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Brok | |
CVE-2025-63220 |
high | 7.2 | 0.0050 | 2026-11-05 | The Sound4 FIRST web-based management interface is vulnerable to Remote Code Execution (RC | |
CVE-2025-63243 |
medium | 4.6 | 0.0022 | 2026-11-05 | A reflected cross-site scripting (XSS) vulnerability exists in the password change functio | |
CVE-2025-63219 |
high | 7.5 | 0.0046 | 2026-11-05 | The ITEL ISO FM SFN Adapter (firmware ISO2 2.0.0.0, WebServer 2.0) is vulnerable to sessio | |
CVE-2025-63218 |
critical | 9.8 | 0.0068 | 2026-11-05 | The Axel Technology WOLF1MS and WOLF2MS devices (firmware versions 0.8.5 to 1.0.3) are vul | |
CVE-2025-63229 |
medium | 5.4 | 0.0030 | 2026-11-05 | The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains a r | |
CVE-2025-63217 |
critical | 9.8 | 0.0059 | 2026-11-05 | The Itel DAB MUX (IDMUX build c041640a) is vulnerable to Authentication Bypass due to impr | |
CVE-2024-49393 |
medium | 6.5 | 0.0033 | 2026-11-05 | In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signin | |
CVE-2024-3884 |
high | 7.5 | 0.0146 | 2026-11-05 | A flaw was found in Undertow that can cause remote denial of service attacks. When the ser | |
CVE-2026-103866 |
high | 7.5 | 0.0033 | 2026-11-05 | Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerabi | |
CVE-2026-103864 |
high | 7.5 | 0.0033 | 2026-11-05 | Improper output neutralization for logs in Apache Sling Engine. This issue affects Apac | |
CVE-2026-103863 |
medium | 5.4 | 0.0019 | 2026-11-05 | Improper neutralization of input during web page generation ('cross-site scripting') vulne | |
CVE-2026-54412 |
high | 7.8 | 0.0043 | 2026-11-05 | LiamBindle MQTT-C versions prior to 1.1.7 contain a heap-based out-of-bounds read and inte | |
CVE-2026-123020 |
low | 2.1 | 0.0050 | 2026-11-05 | A security vulnerability has been detected in eosphoros-ai DB-GPT up to 0.8.1. The affecte | |
CVE-2024-4693 |
medium | 5.5 | 0.0033 | 2026-11-05 | A flaw was found in the QEMU Virtio PCI Bindings (hw/virtio/virtio-pci.c). An improper rel | |
CVE-2024-45782 |
high | 7.8 | 0.0023 | 2026-11-05 | A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount | |
CVE-2024-45781 |
medium | 6.7 | 0.0031 | 2026-11-05 | A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub |