Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-50334 |
— | — | 0.0107 | 2026-11-04 | An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of ser | |
CVE-2025-67091 |
medium | 6.5 | 0.0330 | 2026-11-04 | An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. GL.Inet AX1800 Ve | |
CVE-2025-67090 |
medium | 5.1 | 0.0024 | 2026-11-04 | The LuCI web interface on Gl Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. Fix | |
CVE-2025-67089 |
high | 8.1 | 0.0160 | 2026-11-04 | A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. | |
CVE-2025-63611 |
high | 8.7 | 0.0031 | 2026-11-04 | Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint f | |
CVE-2025-61492 |
critical | 10.0 | 0.0214 | 2026-11-04 | A command injection vulnerability in the execute_command function of terminal-controller-m | |
CVE-2025-67366 |
high | 7.5 | 0.0063 | 2026-11-04 | @sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading funct | |
CVE-2025-67364 |
high | 7.5 | 0.0063 | 2026-11-04 | fast-filesystem-mcp version 3.4.0 contains a critical path traversal vulnerability in its | |
CVE-2025-66837 |
medium | 6.8 | 0.0030 | 2026-11-04 | 1 PoC | A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrar |
CVE-2025-66786 |
high | 7.5 | 0.0037 | 2026-11-04 | OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format req | |
CVE-2025-66686 |
medium | 6.1 | 0.0022 | 2026-11-04 | A stored Cross-Site Scripting (XSS) vulnerability exists in Perch CMS version 3.2. An auth | |
CVE-2025-61489 |
medium | 6.5 | 0.0097 | 2026-11-04 | A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 | |
CVE-2025-66838 |
medium | 6.5 | 0.0036 | 2026-11-04 | 1 PoC | In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any |
CVE-2025-60534 |
critical | 9.8 | 0.0067 | 2026-11-04 | Blue Access Cobalt v02.000.195 suffers from an authentication bypass vulnerability, which | |
CVE-2025-65212 |
critical | 9.8 | 0.0536 | 2026-11-04 | An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The vu | |
CVE-2025-60262 |
critical | 9.8 | 0.0057 | 2026-11-04 | An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wirele | |
CVE-2025-59379 |
high | 7.5 | 0.0040 | 2026-11-04 | DwyerOmega Isensix Advanced Remote Monitoring System (ARMS) 1.5.7 allows an attacker to re | |
CVE-2025-67427 |
medium | 6.5 | 0.0021 | 2026-11-04 | A Blind Server-Side Request Forgery (SSRF) vulnerability in evershop 2.1.0 and prior allow | |
CVE-2025-67419 |
high | 7.5 | 0.0035 | 2026-11-04 | A Denial of Service (DoS) vulnerability in evershop 2.1.0 and prior allows unauthenticated | |
CVE-2025-67397 |
critical | 9.1 | 0.0076 | 2026-11-04 | An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary comm | |
CVE-2025-52517 |
medium | 5.9 | 0.0017 | 2026-11-04 | An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor E | |
CVE-2025-52515 |
medium | 5.1 | 0.0010 | 2026-11-04 | An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor E | |
CVE-2025-49495 |
high | 8.4 | 0.0016 | 2026-11-04 | An issue was discovered in the WiFi driver in Samsung Mobile Processor Exynos 1380, 1480, | |
CVE-2025-43706 |
high | 7.5 | 0.0033 | 2026-11-04 | An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem E | |
CVE-2025-27807 |
critical | 9.1 | 0.0037 | 2026-11-04 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos | |
CVE-2025-65922 |
medium | 4.3 | 0.0015 | 2026-11-04 | PLANKA 2.0.0 lacks X-Frame-Options and CSP frame-ancestors headers, allowing the applicati | |
CVE-2025-67316 |
medium | 5.4 | 0.0029 | 2026-11-04 | An issue in realme Internet browser v.45.13.4.1 allows a remote attacker to execute arbitr | |
CVE-2025-57836 |
high | 7.8 | 0.0013 | 2026-11-04 | An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows. The installer | |
CVE-2025-52519 |
high | 7.1 | 0.0013 | 2026-11-04 | An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor E | |
CVE-2025-67303 |
high | 7.5 | 0.0139 | 2026-11-04 | 6 PoC | An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially |
CVE-2025-65328 |
medium | 6.5 | 0.0027 | 2026-11-04 | Mega-Fence (webgate-lib.*) 25.1.914 and prior trusts the first value of the X-Forwarded-Fo | |
CVE-2025-67160 |
high | 7.5 | 0.0093 | 2026-11-04 | 1 PoC | An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and |
CVE-2025-67159 |
high | 7.5 | 0.0029 | 2026-11-04 | 1 PoC | Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext. |
CVE-2025-67158 |
high | 7.5 | 0.0051 | 2026-11-04 | 1 PoC | An authentication bypass in the /cgi-bin/jvsweb.cgi endpoint of Revotech I6032W-FHW v1.0.0 |
CVE-2025-67269 |
— | — | 0.0056 | 2026-11-04 | An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` | |
CVE-2025-67268 |
— | — | 0.0079 | 2026-11-04 | gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the | |
CVE-2025-45286 |
medium | 6.1 | 0.0027 | 2026-11-04 | A cross-site scripting (XSS) vulnerability in mccutchen httpbin v2.17.1 allows attackers t | |
CVE-2025-65354 |
critical | 9.8 | 0.0052 | 2026-11-04 | 2 PoC | Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-mana |
CVE-2025-65410 |
medium | 6.2 | 0.0023 | 2026-11-04 | A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cau | |
CVE-2025-29228 |
critical | 9.8 | 0.0127 | 2026-11-04 | Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone functio | |
CVE-2025-67111 |
high | 7.5 | 0.0035 | 2026-11-04 | An integer overflow in the RTPS protocol implementation of OpenDDS DDS before v3.33.0 allo | |
CVE-2025-67109 |
critical | 10.0 | 0.0033 | 2026-11-04 | Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows | |
CVE-2025-65865 |
high | 7.5 | 0.0040 | 2026-11-04 | An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Servic | |
CVE-2025-66845 |
medium | 6.1 | 0.0022 | 2026-11-04 | A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore vers | |
CVE-2025-67436 |
medium | 6.5 | 0.0059 | 2026-11-04 | Authenticated Remote Code Execution (RCE) in PluXml CMS 5.8.22 allows an attacker with adm | |
CVE-2025-65857 |
high | 7.5 | 0.0043 | 2026-11-04 | 1 PoC | An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010. |
CVE-2025-65856 |
critical | 9.8 | 0.0075 | 2026-11-04 | 2 PoC | Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000 |
CVE-2025-66736 |
high | 7.1 | 0.0032 | 2026-11-04 | youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in | |
CVE-2025-65817 |
high | 8.8 | 0.0034 | 2026-11-04 | 1 PoC | LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in start_app.sh. |
CVE-2025-67418 |
critical | 9.8 | 0.0051 | 2026-11-04 | ClipBucket 5.5.2 is affected by an improper access control issue where the product is ship |