Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-18355 |
high | 7.5 | 0.0084 | 2026-11-04 | A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-d | |
CVE-2026-13732 |
high | 7.0 | 0.0015 | 2026-11-04 | A flaw was found in GDB's STABS debug format parser. The read_member_functions() function | |
CVE-2026-15722 |
high | 7.5 | 0.0083 | 2026-11-04 | A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruve | |
CVE-2026-16529 |
high | 7.5 | 0.0048 | 2026-11-04 | A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted ne | |
CVE-2026-16526 |
high | 8.8 | 0.0057 | 2026-11-04 | A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attack | |
CVE-2026-16524 |
high | 7.8 | 0.0070 | 2026-11-04 | A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters | |
CVE-2026-14544 |
critical | 9.8 | 0.0120 | 2026-11-04 | A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an | |
CVE-2026-12912 |
high | 7.3 | 0.0043 | 2026-11-04 | A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providi | |
CVE-2026-13601 |
high | 7.1 | 0.0018 | 2026-11-04 | A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) impleme | |
CVE-2025-65132 |
medium | 6.1 | 0.0019 | 2026-11-04 | alandsilva26 hotel-management-php 1.0 is vulnerable to Cross Site Scripting (XSS) in /publ | |
CVE-2025-69893 |
medium | 4.6 | 0.0025 | 2026-11-04 | A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, a | |
CVE-2025-61260 |
critical | 9.8 | 0.0692 | 2026-11-04 | A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code ex | |
CVE-2025-70936 |
medium | 5.4 | 0.0014 | 2026-11-04 | Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the Mail | |
CVE-2025-51414 |
high | 8.8 | 0.0032 | 2026-11-04 | In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was | |
CVE-2025-63743 |
medium | 5.4 | 0.0024 | 2026-11-04 | Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3. | |
CVE-2025-44560 |
critical | 9.8 | 0.0035 | 2026-11-04 | owntone-server 2ca10d9 is vulnerable to Buffer Overflow due to lack of recursive checking. | |
CVE-2025-70365 |
medium | 5.4 | 0.0014 | 2026-11-04 | A stored cross-site scripting (XSS) vulnerability exists in Kiamo before 8.4 due to improp | |
CVE-2025-70364 |
high | 8.8 | 0.0030 | 2026-11-04 | An issue was discovered in Kiamo before 8.4 allowing authenticated administrative attacker | |
CVE-2025-70811 |
medium | 4.3 | 0.0015 | 2026-11-04 | Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker t | |
CVE-2025-70810 |
high | 8.8 | 0.0026 | 2026-11-04 | Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker t | |
CVE-2025-45806 |
medium | 6.1 | 0.0024 | 2026-11-04 | A cross-site scripting (XSS) vulnerability in rrweb-snapshot before v2.0.0-alpha.18 allows | |
CVE-2025-70844 |
medium | 6.1 | 0.0028 | 2026-11-04 | yaffa v2.0.0 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious | |
CVE-2025-52908 |
critical | 9.8 | 0.0052 | 2026-11-04 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Proce | |
CVE-2025-52909 |
critical | 9.8 | 0.0052 | 2026-11-04 | An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Proce | |
CVE-2025-66442 |
medium | 5.1 | 0.0028 | 2026-11-04 | In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC | |
CVE-2025-67807 |
medium | 4.7 | 0.0015 | 2026-11-04 | The login mechanism of Sage DPW 2025_06_004 displays distinct responses for valid and inva | |
CVE-2025-67806 |
medium | 5.3 | 0.0027 | 2026-11-04 | The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and inva | |
CVE-2025-67805 |
high | 7.5 | 0.0030 | 2026-11-04 | A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagn | |
CVE-2025-69988 |
medium | 6.5 | 0.0017 | 2026-11-04 | BS Producten Petcam 33.1.0.0818 is vulnerable to Incorrect Access Control. An unauthentica | |
CVE-2025-69986 |
high | 7.2 | 0.0057 | 2026-11-04 | A buffer overflow vulnerability exists in the ONVIF GetStreamUri function of LSC Indoor Ca | |
CVE-2025-61190 |
medium | 6.1 | 0.0023 | 2026-11-04 | A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6 | |
CVE-2026-1761 |
high | 8.6 | 0.0106 | 2026-11-04 | A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during | |
CVE-2025-68718 |
medium | 5.4 | 0.0033 | 2026-11-04 | KAYSUS KS-WR1200 routers with firmware 107 expose SSH and TELNET services on the LAN inter | |
CVE-2025-68717 |
critical | 9.4 | 0.0056 | 2026-11-04 | KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during sessio | |
CVE-2025-68716 |
high | 8.4 | 0.0024 | 2026-11-04 | KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 enable the SSH service enabled by default | |
CVE-2025-68715 |
critical | 9.1 | 0.0071 | 2026-11-04 | An issue was discovered in Panda Wireless PWRU0 devices with firmware 2.2.9 that exposes m | |
CVE-2025-66916 |
critical | 9.4 | 0.0073 | 2026-11-04 | The snailjob component in RuoYi-Vue-Plus versions 5.5.1 and earlier, interface /snail-job/ | |
CVE-2025-66913 |
critical | 9.8 | 0.0110 | 2026-11-04 | JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing user- | |
CVE-2025-67325 |
critical | 9.8 | 0.0091 | 2026-11-04 | 1 PoC | Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier |
CVE-2025-65731 |
medium | 6.8 | 0.0043 | 2026-11-04 | 1 PoC | An issue was discovered in D-Link Router DIR-605L (Hardware version F1; Firmware version: |
CVE-2025-65518 |
— | — | 0.0061 | 2026-11-04 | 1 PoC | Plesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS) |
CVE-2025-67825 |
medium | 5.5 | 0.0009 | 2026-11-04 | An issue was discovered in Nitro PDF Pro for Windows before 14.42.0.34. In certain cases, | |
CVE-2025-61550 |
medium | 5.4 | 0.0023 | 2026-11-04 | Cross-Site Scripting (XSS) is present on the ctl00_Content01_fieldValue parameters on the | |
CVE-2025-61549 |
medium | 6.1 | 0.0026 | 2026-11-04 | Cross-Site Scripting (XSS) is present on the LoginID parameter on the /PSP/app/web/reg/reg | |
CVE-2025-61548 |
critical | 9.8 | 0.0055 | 2026-11-04 | SQL Injection is present on the hfInventoryDistFormID parameter in the /PSP/appNET/Store/C | |
CVE-2025-61547 |
medium | 6.8 | 0.0018 | 2026-11-04 | Cross-Site Request Forgery (CSRF) is present on all functions in edu Business Solutions Pr | |
CVE-2025-61546 |
critical | 9.1 | 0.0054 | 2026-11-04 | There is an issue on the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Busin | |
CVE-2025-61246 |
critical | 9.8 | 0.0043 | 2026-11-04 | 1 PoC | indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/review_ |
CVE-2025-56425 |
critical | 9.1 | 0.0074 | 2026-11-04 | An issue was discovered in the AppConnector component version 10.10.0.183 and earlier of e | |
CVE-2025-56424 |
high | 7.5 | 0.0058 | 2026-11-04 | An issue in Insiders Technologies GmbH e-invoice pro before release 1 Service Pack 2 allow |