Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-67291 |
medium | 6.1 | 0.0021 | 2026-11-04 | A stored cross-site scripting (XSS) vulnerability in the Media module of Piranha CMS v12.1 | |
CVE-2025-67290 |
medium | 6.1 | 0.0021 | 2026-11-04 | A stored cross-site scripting (XSS) vulnerability in the Page Settings module of Piranha C | |
CVE-2025-65837 |
medium | 5.4 | 0.0017 | 2026-11-04 | PublicCMS V5.202506.b is vulnerable to Cross Site Scripting (XSS) in the Content Search mo | |
CVE-2025-65790 |
medium | 6.1 | 0.0027 | 2026-11-04 | 1 PoC | A reflected cross-site scripting (XSS) vulnerability exists in FuguHub 8.1 when serving SV |
CVE-2025-67288 |
critical | 10.0 | 0.0055 | 2026-11-04 | An arbitrary file upload vulnerability in Umbraco CMS v16.3.3 allows attackers to execute | |
CVE-2025-63664 |
high | 7.5 | 0.0029 | 2026-11-04 | Incorrect access control in the /api/v1/conversations/*/messages API of GT Edge AI Platfor | |
CVE-2025-63662 |
high | 7.5 | 0.0030 | 2026-11-04 | Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev a | |
CVE-2025-26787 |
medium | 4.7 | 0.0015 | 2026-11-04 | An error in the SignServer container startup logic was found in Keyfactor SignServer versi | |
CVE-2025-67289 |
critical | 9.6 | 0.0046 | 2026-11-04 | An arbitrary file upload vulnerability in the Attachments module of Frappe Framework v15.8 | |
CVE-2025-65270 |
medium | 6.1 | 0.0029 | 2026-11-04 | 1 PoC | Reflected cross-site scripting (XSS) vulnerability in ClinCapture EDC 3.0 and 2.2.3, allow |
CVE-2025-67826 |
high | 7.7 | 0.0015 | 2026-11-04 | An issue was discovered in K7 Ultimate Security 17.0.2045. A Local Privilege Escalation (L | |
CVE-2025-67174 |
high | 7.5 | 0.0132 | 2026-11-04 | A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbi | |
CVE-2025-67173 |
medium | 6.8 | 0.0019 | 2026-11-04 | A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1. | |
CVE-2025-65832 |
medium | 4.6 | 0.0015 | 2026-11-04 | The mobile application insecurely handles information stored within memory. By performing | |
CVE-2025-65831 |
high | 7.5 | 0.0023 | 2026-11-04 | The application uses an insecure hashing algorithm (MD5) to hash passwords. If an attacker | |
CVE-2025-65830 |
critical | 9.1 | 0.0028 | 2026-11-04 | Due to a lack of certificate validation, all traffic from the mobile application can be in | |
CVE-2025-65829 |
medium | 6.8 | 0.0034 | 2026-11-04 | The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to | |
CVE-2025-65827 |
critical | 9.1 | 0.0028 | 2026-11-04 | The mobile application is configured to allow clear text traffic to all domains and commun | |
CVE-2025-65825 |
medium | 4.6 | 0.0014 | 2026-11-04 | The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physic | |
CVE-2025-65822 |
medium | 6.8 | 0.0022 | 2026-11-04 | The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabl | |
CVE-2025-65821 |
high | 7.5 | 0.0040 | 2026-11-04 | As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an ad | |
CVE-2025-65820 |
critical | 9.8 | 0.0050 | 2026-11-04 | An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0. An exported activi | |
CVE-2025-65512 |
high | 7.5 | 0.0056 | 2026-11-04 | A Server-Side Request Forgery (SSRF) vulnerability was discovered in the webpage-to-markdo | |
CVE-2025-24857 |
high | 7.6 | 0.0027 | 2026-11-04 | Improper access control for volatile memory containing boot code in Universal Boot Loader | |
CVE-2025-65602 |
critical | 9.8 | 0.0058 | 2026-11-04 | A template injection vulnerability in the /vip/v1/file/save component of ChanCMS v3.3.4 al | |
CVE-2025-56431 |
high | 7.5 | 0.0091 | 2026-11-04 | Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a r | |
CVE-2025-56430 |
high | 7.5 | 0.0091 | 2026-11-04 | Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a r | |
CVE-2025-56429 |
medium | 6.1 | 0.0028 | 2026-11-04 | Cross Site Scripting vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a | |
CVE-2025-65754 |
medium | 6.1 | 0.0047 | 2026-11-04 | 1 PoC | Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitra |
CVE-2025-63094 |
high | 7.5 | 0.0063 | 2026-11-04 | XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution | |
CVE-2025-65815 |
medium | 6.5 | 0.0062 | 2026-11-04 | A lack of security checks in the file import process of AB TECHNOLOGY Document Reader: PDF | |
CVE-2025-65814 |
medium | 6.5 | 0.0062 | 2026-11-04 | A lack of security checks in the file import process of RHOPHI Analytics LLP Office App-Ed | |
CVE-2025-65792 |
critical | 9.1 | 0.0054 | 2026-11-04 | DataGear v5.5.0 is vulnerable to Arbitrary File Deletion. | |
CVE-2025-52493 |
medium | 6.5 | 0.0042 | 2026-11-04 | PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at | |
CVE-2025-65807 |
high | 8.4 | 0.0021 | 2026-11-04 | An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root v | |
CVE-2025-65803 |
medium | 6.5 | 0.0032 | 2026-11-04 | An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and befo | |
CVE-2025-65513 |
high | 7.5 | 0.0048 | 2026-11-04 | fetch-mcp v1.0.2 and before is vulnerable to Server-Side Request Forgery (SSRF) vulnerabil | |
CVE-2025-65741 |
critical | 9.8 | 0.0057 | 2026-11-04 | 1 PoC | Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker |
CVE-2025-65882 |
critical | 9.8 | 0.0069 | 2026-11-04 | An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgr | |
CVE-2025-65573 |
high | 8.8 | 0.0036 | 2026-11-04 | Cross Site Request Forgery (CSRF) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows | |
CVE-2025-65572 |
medium | 6.1 | 0.0045 | 2026-11-04 | Cross Site Scripting (XSS) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows remote | |
CVE-2025-65300 |
medium | 5.4 | 0.0021 | 2026-11-04 | 1 PoC | A stored Cross-Site Scripting (XSS) vulnerability exists in the Coohom SaaS Platform feVer |
CVE-2025-65594 |
high | 8.1 | 0.0031 | 2026-11-04 | OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allo | |
CVE-2025-64086 |
high | 7.5 | 0.0032 | 2026-11-04 | A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-X | |
CVE-2025-64085 |
high | 7.5 | 0.0032 | 2026-11-04 | A NULL pointer dereference vulnerability in the importDataObject() function of PDF-XChange | |
CVE-2025-61258 |
high | 7.5 | 0.0068 | 2026-11-04 | Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via | |
CVE-2025-61078 |
medium | 6.1 | 0.0028 | 2026-11-04 | Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3 allows remot | |
CVE-2025-65730 |
high | 8.8 | 0.0055 | 2026-11-04 | Authentication Bypass via Hardcoded Credentials GoAway up to v0.62.18, fixed in 0.62.19, u | |
CVE-2025-64056 |
medium | 4.3 | 0.0024 | 2026-11-04 | File upload vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on th | |
CVE-2025-64054 |
critical | 9.6 | 0.0047 | 2026-11-04 | A reflected Cross Site Scripting (XSS) vulnerability on Fanvil x210 2.12.20 devices allows |