Browse All CVEs
50,488 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-51675 |
high | 7.5 | 0.0046 | 2026-11-04 | An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program | |
CVE-2025-56352 |
high | 7.5 | 0.0028 | 2026-11-04 | In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker misha | |
CVE-2025-67031 |
medium | 6.3 | 0.0034 | 2026-11-04 | ORSEE (Online Recruitment System for Economic Experiments) 3.1.0 contains an authenticated | |
CVE-2025-69443 |
medium | 6.3 | 0.0031 | 2026-11-04 | Remote Code Execution in coleam00 Archon 0.1.0. A crafted HTML page, when accessed by a vi | |
CVE-2025-27853 |
high | 7.3 | 0.0030 | 2026-11-04 | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authenticat | |
CVE-2025-27852 |
medium | 5.0 | 0.0014 | 2026-11-04 | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cro | |
CVE-2025-27851 |
critical | 9.3 | 0.0014 | 2026-11-04 | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site or | |
CVE-2025-27850 |
high | 7.5 | 0.0039 | 2026-11-04 | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a symlink attac | |
CVE-2025-70842 |
medium | 5.4 | 0.0014 | 2026-11-04 | A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the File Management mo | |
CVE-2025-61311 |
high | 7.3 | 0.0029 | 2026-11-04 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_alerts.php component o | |
CVE-2025-61310 |
medium | 6.1 | 0.0024 | 2026-11-04 | A reflected cross-site scripted (XSS) vulnerability in the acc-menu_billings.php component | |
CVE-2025-61309 |
medium | 6.1 | 0.0024 | 2026-11-04 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_departments.php compon | |
CVE-2025-61308 |
medium | 6.1 | 0.0024 | 2026-11-04 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_maintenance.php compon | |
CVE-2025-61307 |
medium | 6.1 | 0.0024 | 2026-11-04 | A reflected cross-site scripted (XSS) vulnerability in the acc-menu_papers.php component o | |
CVE-2025-61306 |
medium | 6.1 | 0.0024 | 2026-11-04 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_coveragealerts.php com | |
CVE-2025-61305 |
medium | 6.1 | 0.0024 | 2026-11-04 | A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_firmware.php component | |
CVE-2025-69599 |
critical | 9.8 | 0.0039 | 2026-11-04 | 1 PoC | RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they c |
CVE-2025-67888 |
high | 7.3 | 0.0360 | 2026-11-04 | 1 PoC | An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209. User input passed vi |
CVE-2025-67887 |
critical | 9.8 | 0.0155 | 2026-11-04 | 2 PoC | 1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRI |
CVE-2025-67886 |
medium | 6.3 | 0.0103 | 2026-11-04 | 1 PoC | Bitrix24 through 25.100.300 allows Remote Code Execution because an actor with SOURCE/WRIT |
CVE-2025-65122 |
high | 7.5 | 0.0028 | 2026-11-04 | Regex Denial of Service in youtube-regex npm package through version 1.0.5. | |
CVE-2025-63704 |
critical | 9.8 | 0.0048 | 2026-11-04 | NPM package query-parser-string 1.0.0 is vulnerable to Prototype Pollution. The package do | |
CVE-2025-63703 |
critical | 9.8 | 0.0042 | 2026-11-04 | npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js(). | |
CVE-2025-67202 |
medium | 6.1 | 0.0019 | 2026-11-04 | Sidekiq-cron thru 2.3.1, an open-source scheduling add-on for Sidekiq, is vulnerable to a | |
CVE-2025-63705 |
high | 8.8 | 0.0118 | 2026-11-04 | NPM package node-ts-ocr 1.0.15 is vulnerable to OS Command Injection via the invokeImageOc | |
CVE-2025-66369 |
high | 7.5 | 0.0034 | 2026-11-04 | An issue was discovered in MM in Samsung Mobile Processor, Wearable Processor, and Modem E | |
CVE-2025-67796 |
high | 8.1 | 0.0024 | 2026-11-04 | IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker wit | |
CVE-2025-70071 |
— | — | 0.0052 | 2026-11-04 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the F | |
CVE-2025-70072 |
medium | 6.5 | 0.0024 | 2026-11-04 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the F | |
CVE-2025-70070 |
medium | 6.5 | 0.0024 | 2026-11-04 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the F | |
CVE-2025-70069 |
— | — | 0.0042 | 2026-11-04 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the F | |
CVE-2025-70067 |
critical | 9.8 | 0.0034 | 2026-11-04 | Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. T | |
CVE-2025-69606 |
medium | 6.1 | 0.0035 | 2026-11-04 | 1 PoC | Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2. |
CVE-2025-63548 |
high | 7.5 | 0.0033 | 2026-11-04 | An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a deni | |
CVE-2025-63547 |
high | 7.5 | 0.0036 | 2026-11-04 | An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a deni | |
CVE-2025-56568 |
high | 7.5 | 0.0033 | 2026-11-04 | Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the | |
CVE-2025-46115 |
high | 7.5 | 0.0031 | 2026-11-04 | An issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a cr | |
CVE-2025-50328 |
high | 7.3 | 0.0033 | 2026-11-04 | A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archive | |
CVE-2025-60887 |
medium | 5.3 | 0.0028 | 2026-11-04 | An issue was discovered in Cista v0.15 and below. Insecure deserialization of untrusted in | |
CVE-2025-69428 |
high | 7.5 | 0.0032 | 2026-11-04 | 1 PoC | An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sen |
CVE-2025-69689 |
high | 8.8 | 0.0010 | 2026-11-04 | The Fan Control application V251 contains an improper privilege handling vulnerability in | |
CVE-2025-67259 |
medium | 6.5 | 0.0021 | 2026-11-04 | A Broken Access Control vulnerability exists in ClassroomIO v0.1.13 where an authenticated | |
CVE-2025-59308 |
medium | 4.7 | 0.0018 | 2026-11-04 | In Mahara before 24.04.10 and 25 before 25.04.1, an institution administrator or instituti | |
CVE-2025-61872 |
medium | 6.1 | 0.0019 | 2026-11-04 | Mahara before 25.04.2 and 24.04.11 are vulnerable to displaying results that can trigger X | |
CVE-2025-70994 |
high | 7.3 | 0.0027 | 2026-11-04 | 1 PoC | Yadea T5 Electric Bicycles (models manufactured in/after 2024) have a weak authentication |
CVE-2025-66954 |
medium | 6.5 | 0.0032 | 2026-11-04 | 1 PoC | A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthent |
CVE-2025-67841 |
high | 7.5 | 0.0029 | 2026-11-04 | Nordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexi | |
CVE-2025-70023 |
critical | 9.8 | 0.0046 | 2026-11-04 | An issue pertaining to CWE-843: Access of Resource Using Incompatible Type was discovered | |
CVE-2025-65135 |
critical | 9.8 | 0.0030 | 2026-11-04 | In manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerabil | |
CVE-2025-65134 |
medium | 6.1 | 0.0019 | 2026-11-04 | In manikandan580 School-management-system 1.0, a reflected cross-site scripting (XSS) vuln |