Browse All CVEs
50,487 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-110288 |
medium | 5.3 | 0.0019 | 2026-11-03 | A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that | |
CVE-2026-109836 |
high | 8.4 | 0.0012 | 2026-11-03 | The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control | |
CVE-2026-104608 |
high | 7.7 | 0.0040 | 2026-11-03 | A remote code execution vulnerability was identified in GitHub Enterprise Server in the Gi | |
CVE-2026-121736 |
medium | 6.9 | 0.0030 | 2026-11-03 | NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POS | |
CVE-2026-121735 |
medium | 6.3 | 0.0023 | 2026-11-03 | blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration v | |
CVE-2026-121734 |
medium | 6.0 | 0.0028 | 2026-11-03 | ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows an | |
CVE-2026-121733 |
low | 2.1 | 0.0018 | 2026-11-03 | Bagisto before 2.4.5 contains a stored cross-site scripting vulnerability that allows auth | |
CVE-2026-121732 |
low | 2.1 | 0.0024 | 2026-11-03 | RosarioSIS before 12.9 contains an improper authorization vulnerability that allows school | |
CVE-2026-121731 |
high | 8.7 | 0.0030 | 2026-11-03 | RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated no | |
CVE-2026-121730 |
high | 7.1 | 0.0022 | 2026-11-03 | emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /a | |
CVE-2026-121729 |
high | 7.2 | 0.0025 | 2026-11-03 | emailflare before commit cf31f33 contains a missing authorization vulnerability in the inb | |
CVE-2026-121728 |
medium | 6.9 | 0.0026 | 2026-11-03 | SourceHut meta.sr.ht 0.56.11 before 0.89.0 contains an authorization bypass vulnerability | |
CVE-2026-121727 |
high | 8.7 | 0.0039 | 2026-11-03 | Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handlin | |
CVE-2025-67736 |
high | 8.6 | 0.0643 | 2026-11-03 | The FreePBX module tts (Text to Speech) for FreePBX, an open-source web-based graphical us | |
CVE-2025-67528 |
high | 7.5 | 0.0048 | 2026-11-03 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67523 |
high | 7.5 | 0.0048 | 2026-11-03 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67522 |
high | 7.5 | 0.0048 | 2026-11-03 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-66534 |
medium | 4.3 | 0.0023 | 2026-11-03 | Missing Authorization vulnerability in Elated-Themes The Aisle theaisle allows Exploiting | |
CVE-2025-66528 |
medium | 4.3 | 0.0025 | 2026-11-03 | Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerc | |
CVE-2025-66434 |
— | — | 0.0059 | 2026-11-03 | An SSTI (Server-Side Template Injection) vulnerability exists in the get_dunning_letter_te | |
CVE-2025-66122 |
medium | 5.3 | 0.0038 | 2026-11-03 | Missing Authorization vulnerability in Design Stylish Price List stylish-price-list allows | |
CVE-2025-65077 |
high | 8.8 | 0.0068 | 2026-11-03 | A relative path traversal vulnerability has been identified in the Embedded Solutions Fram | |
CVE-2025-64537 |
critical | 9.3 | 0.0079 | 2026-11-03 | Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Sit | |
CVE-2025-64408 |
— | — | 0.1155 | 2026-11-03 | Apache Causeway faces Java deserialization vulnerabilities that allow remote code executio | |
CVE-2025-62915 |
medium | 4.3 | 0.0025 | 2026-11-03 | Missing Authorization vulnerability in clicksend SMS Contact Form 7 Notifications by Click | |
CVE-2025-62849 |
medium | 5.2 | 0.0097 | 2026-11-03 | An SQL injection vulnerability has been reported to affect several QNAP operating system v | |
CVE-2025-62739 |
medium | 6.5 | 0.0016 | 2026-11-03 | Cross-Site Request Forgery (CSRF) vulnerability in SaifuMak Add Custom Codes add-custom-co | |
CVE-2025-62151 |
medium | 5.3 | 0.0036 | 2026-11-03 | Missing Authorization vulnerability in Virtuaria Virtuaria PagBank / PagSeguro para Woocom | |
CVE-2025-59366 |
critical | 9.2 | 0.1245 | 2026-11-03 | An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be trigge | |
CVE-2025-59302 |
— | — | 0.0049 | 2026-11-03 | In Apache CloudStack improper control of generation of code ('Code Injection') vulnerabil | |
CVE-2025-58885 |
high | 8.1 | 0.0050 | 2026-11-03 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-58383 |
high | 8.4 | 0.0054 | 2026-11-03 | A vulnerability in Brocade Fabric OS versions before 9.2.1c2 could allow an administrator- | |
CVE-2025-53774 |
medium | 6.5 | 0.0068 | 2026-11-03 | Microsoft 365 Copilot BizChat Information Disclosure Vulnerability | |
CVE-2025-52950 |
critical | 9.6 | 0.0047 | 2026-11-03 | A Missing Authorization vulnerability in Juniper Networks Security Director allows an unau | |
CVE-2025-50062 |
high | 8.1 | 0.0031 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle Peopl | |
CVE-2025-4439 |
high | 7.7 | 0.0028 | 2026-11-03 | An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0 | |
CVE-2025-4234 |
low | 2.4 | 0.0014 | 2026-11-03 | A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in | |
CVE-2025-4228 |
medium | 4.6 | 0.0020 | 2026-11-03 | An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker V | |
CVE-2025-49707 |
high | 7.9 | 0.0046 | 2026-11-03 | Improper access control in Azure Virtual Machines allows an authorized attacker to perform | |
CVE-2025-49144 |
high | 7.3 | 0.0066 | 2026-11-03 | 8 PoC | Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a pri |
CVE-2025-48528 |
— | — | 0.0009 | 2026-11-03 | In multiple locations, there is a possible way to overlay biometrics due to a tapjacking/o | |
CVE-2025-48526 |
— | — | 0.0009 | 2026-11-03 | In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an | |
CVE-2025-47995 |
medium | 6.5 | 0.0078 | 2026-11-03 | Weak authentication in Azure Machine Learning allows an authorized attacker to elevate pri | |
CVE-2025-47096 |
low | 3.5 | 0.0037 | 2026-11-03 | Adobe Experience Manager versions 6.5.22 and earlier are affected by an Improper Input Val | |
CVE-2025-46424 |
medium | 6.7 | 0.0010 | 2026-11-03 | Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Ris | |
CVE-2025-45379 |
high | 8.4 | 0.0065 | 2026-11-03 | Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user wit | |
CVE-2025-43541 |
— | — | 0.3414 | 2026-11-03 | 1 PoC | A type confusion issue was addressed with improved state handling. This issue is fixed in |
CVE-2025-43432 |
— | — | 0.0084 | 2026-11-03 | A use-after-free issue was addressed with improved memory management. This issue is fixed | |
CVE-2025-43385 |
— | — | 0.0100 | 2026-11-03 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is f | |
CVE-2025-43384 |
— | — | 0.0100 | 2026-11-03 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is f |