Browse All CVEs
50,489 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-63361 |
medium | 5.7 | 0.0034 | 2026-11-04 | Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW | |
CVE-2025-57212 |
high | 7.5 | 0.0031 | 2026-11-04 | Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows a | |
CVE-2025-60736 |
critical | 9.8 | 0.0050 | 2026-11-04 | 1 PoC | code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via t |
CVE-2025-65881 |
medium | 6.1 | 0.0025 | 2026-11-04 | Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in / | |
CVE-2025-65844 |
high | 7.5 | 0.0040 | 2026-11-04 | EverShop 2.0.1 allows a remote unauthenticated attacker to upload arbitrary files and crea | |
CVE-2025-65215 |
medium | 6.1 | 0.0024 | 2026-11-04 | Sourcecodester Web-based Pharmacy Product Management System v1.0 is vulnerable to Cross Si | |
CVE-2025-60854 |
critical | 9.8 | 0.0117 | 2026-11-04 | 1 PoC | A vulnerability has been found in D-Link R15 (AX1500) 1.20.01 and below. By manipulating t |
CVE-2025-58386 |
critical | 9.8 | 0.0036 | 2026-11-04 | In Terminalfour 8 through 8.4.1.1, the userLevel parameter in the user management function | |
CVE-2025-65186 |
medium | 6.1 | 0.0024 | 2026-11-04 | Grav CMS 1.7.49 is vulnerable to Cross Site Scripting (XSS). The page editor allows authen | |
CVE-2025-64070 |
medium | 5.4 | 0.0022 | 2026-11-04 | Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting | |
CVE-2025-65187 |
medium | 6.1 | 0.0024 | 2026-11-04 | A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accountin | |
CVE-2025-63872 |
medium | 6.1 | 0.0027 | 2026-11-04 | DeepSeek V3.2 has a Cross Site Scripting (XSS) vulnerability, which allows JavaScript exec | |
CVE-2025-59704 |
medium | 4.6 | 0.0028 | 2026-11-04 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched | |
CVE-2025-59703 |
critical | 9.1 | 0.0050 | 2026-11-04 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched | |
CVE-2025-59705 |
medium | 6.8 | 0.0035 | 2026-11-04 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched | |
CVE-2025-59702 |
high | 7.2 | 0.0033 | 2026-11-04 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched | |
CVE-2025-59701 |
medium | 4.1 | 0.0021 | 2026-11-04 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched | |
CVE-2025-59700 |
low | 3.9 | 0.0020 | 2026-11-04 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched | |
CVE-2025-59699 |
medium | 6.8 | 0.0036 | 2026-11-04 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched | |
CVE-2025-59698 |
medium | 6.8 | 0.0036 | 2026-11-04 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched | |
CVE-2025-59697 |
high | 7.2 | 0.0033 | 2026-11-04 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched | |
CVE-2025-59696 |
low | 3.2 | 0.0026 | 2026-11-04 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched | |
CVE-2025-59695 |
critical | 9.8 | 0.0072 | 2026-11-04 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched | |
CVE-2025-59694 |
medium | 6.8 | 0.0034 | 2026-11-04 | The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi t | |
CVE-2025-59693 |
critical | 9.8 | 0.0097 | 2026-11-04 | The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi t | |
CVE-2025-65858 |
low | 3.5 | 0.0022 | 2026-11-04 | 1 PoC | A Stored Cross-Site Scripting (XSS) vulnerability in Calibre-Web v0.6.25 allows attackers |
CVE-2025-65622 |
medium | 5.4 | 0.0020 | 2026-11-04 | Snipe-IT before 8.3.4 allows stored XSS via the Locations "Country" field, enabling a low- | |
CVE-2025-65621 |
medium | 5.4 | 0.0019 | 2026-11-04 | Snipe-IT before 8.3.4 allows stored XSS, allowing a low-privileged authenticated user to i | |
CVE-2025-65838 |
high | 7.5 | 0.0048 | 2026-11-04 | PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method. | |
CVE-2025-65836 |
critical | 9.1 | 0.0035 | 2026-11-04 | PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminControl | |
CVE-2025-63317 |
medium | 5.4 | 0.0023 | 2026-11-04 | Todoist v8896 is vulnerable to Cross Site Scripting (XSS) in /api/v1/uploads. Uploaded SVG | |
CVE-2025-51683 |
critical | 9.8 | 0.0214 | 2026-11-04 | A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated atta | |
CVE-2025-51682 |
critical | 9.8 | 0.0173 | 2026-11-04 | mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modi | |
CVE-2025-65407 |
medium | 6.5 | 0.0032 | 2026-11-04 | A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming | |
CVE-2025-65408 |
medium | 6.5 | 0.0032 | 2026-11-04 | A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() f | |
CVE-2025-65406 |
medium | 6.5 | 0.0035 | 2026-11-04 | A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Str | |
CVE-2025-65405 |
medium | 6.5 | 0.0033 | 2026-11-04 | A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Strea | |
CVE-2025-65404 |
medium | 6.5 | 0.0035 | 2026-11-04 | A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 al | |
CVE-2025-65403 |
medium | 6.5 | 0.0035 | 2026-11-04 | A buffer overflow in the g_cfg.MaxUsers component of LightFTP v2.0 allows attackers to cau | |
CVE-2025-63535 |
high | 8.8 | 0.0041 | 2026-11-04 | A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the ab | |
CVE-2025-63534 |
medium | 5.4 | 0.0023 | 2026-11-04 | A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 | |
CVE-2025-63533 |
medium | 5.4 | 0.0023 | 2026-11-04 | A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 | |
CVE-2025-63532 |
high | 8.8 | 0.0041 | 2026-11-04 | A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the ca | |
CVE-2025-63095 |
medium | 6.5 | 0.0040 | 2026-11-04 | Improper input validation in the BitstreamWriter::write_bits() function of Tempus Ex hello | |
CVE-2025-61229 |
high | 7.8 | 0.0014 | 2026-11-04 | 1 PoC | An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify t |
CVE-2025-61228 |
high | 7.8 | 0.0011 | 2026-11-04 | 1 PoC | An issue in Shirt Pocket SuperDuper! V.3.10 and before allows a local attacker to execute |
CVE-2025-57489 |
high | 8.1 | 0.0032 | 2026-11-04 | 1 PoC | Incorrect access control in the SDAgent component of Shirt Pocket SuperDuper! v3.10 allows |
CVE-2025-64030 |
medium | 5.4 | 0.0025 | 2026-11-04 | Eximbills Enterprise 4.1.5 (Built on 2020-10-30) is vulnerable to authenticated stored cro | |
CVE-2025-63531 |
critical | 9.8 | 0.0069 | 2026-11-04 | A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the re | |
CVE-2025-63529 |
high | 8.8 | 0.0040 | 2026-11-04 | A session fixation vulnerability exists in Blood Bank Management System 1.0 in login.php t |