Browse All CVEs
50,486 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-43346 |
— | — | 0.0024 | 2026-11-03 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is f | |
CVE-2025-43287 |
— | — | 0.0023 | 2026-11-03 | The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe | |
CVE-2025-43253 |
— | — | 0.0078 | 2026-11-03 | This issue was addressed with improved input validation. This issue is fixed in macOS Sequ | |
CVE-2025-43001 |
medium | 6.9 | 0.0015 | 2026-11-03 | SAPCAR allows an attacker logged in with high privileges to override the permissions of th | |
CVE-2025-42992 |
medium | 6.9 | 0.0014 | 2026-11-03 | SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive | |
CVE-2025-42989 |
critical | 9.6 | 0.0044 | 2026-11-03 | RFC inbound processing�does not perform necessary authorization checks for an authenticate | |
CVE-2025-42953 |
high | 8.1 | 0.0049 | 2026-11-03 | SAP Netweaver System Configuration does not perform necessary authorization checks for an | |
CVE-2025-42937 |
critical | 9.8 | 0.0074 | 2026-11-03 | SAP Print Service (SAPSprint) performs insufficient validation of path information provide | |
CVE-2025-42917 |
medium | 6.5 | 0.0025 | 2026-11-03 | SAP HCM Approve Timesheets Fiori 2.0 application does not perform necessary authorization | |
CVE-2025-42914 |
low | 3.1 | 0.0022 | 2026-11-03 | Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an | |
CVE-2025-42912 |
medium | 6.5 | 0.0025 | 2026-11-03 | SAP HCM My Timesheet Fiori 2.0 application does not perform necessary authorization checks | |
CVE-2025-41452 |
medium | 6.8 | 0.0093 | 2026-11-03 | Post-authenticated external control of system web interface configuration setting vulnerab | |
CVE-2025-41237 |
critical | 9.3 | 0.0046 | 2026-11-03 | VMware ESXi, Workstation, and Fusion contain an integer-underflow in VMCI (Virtual Machine | |
CVE-2025-40597 |
— | — | 0.2268 | 2026-11-03 | A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remot | |
CVE-2025-3260 |
high | 8.3 | 0.0056 | 2026-11-03 | A security vulnerability in the /apis/dashboard.grafana.app/* endpoints allows authenticat | |
CVE-2025-3212 |
— | — | 0.0034 | 2026-11-03 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Ker | |
CVE-2025-39467 |
high | 8.1 | 0.0062 | 2026-11-03 | Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PH | |
CVE-2025-38742 |
medium | 5.3 | 0.0013 | 2026-11-03 | Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permissi | |
CVE-2025-37146 |
high | 7.2 | 0.0089 | 2026-11-03 | A vulnerability in the web-based management interface of network access point configuratio | |
CVE-2025-36896 |
— | — | 0.0024 | 2026-11-03 | WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, a | |
CVE-2025-34511 |
high | 8.8 | 0.3236 | 2026-11-03 | Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experien | |
CVE-2025-34071 |
critical | 9.4 | 0.0081 | 2026-11-03 | 1 PoC | A remote code execution vulnerability in GFI Kerio Control 9.4.5 allows attackers with adm |
CVE-2025-34070 |
critical | 10.0 | 0.0076 | 2026-11-03 | A missing authentication vulnerability in the GFIAgent component of GFI Kerio Control 9.4. | |
CVE-2025-32744 |
medium | 6.6 | 0.0048 | 2026-11-03 | Dell AppSync, version(s) 4.6.0.0, contains an Unrestricted Upload of File with Dangerous T | |
CVE-2025-32711 |
critical | 9.3 | 0.0717 | 2026-11-03 | 5 PoC | Ai command injection in M365 Copilot allows an unauthorized attacker to disclose informati |
CVE-2025-32408 |
low | 2.5 | 0.0013 | 2026-11-03 | In Soffid Console 3.6.31 before 3.6.32, authorization to use the pam service is mishandled | |
CVE-2025-31644 |
high | 8.7 | 0.2430 | 2026-11-03 | 1 PoC | When running in Appliance mode, a command injection vulnerability exists in an undisclosed |
CVE-2025-31365 |
medium | 5.5 | 0.0027 | 2026-11-03 | An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in For | |
CVE-2025-31239 |
— | — | 0.0069 | 2026-11-03 | A use-after-free issue was addressed with improved memory management. This issue is fixed | |
CVE-2025-30735 |
high | 8.1 | 0.0038 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle | |
CVE-2025-30690 |
high | 7.2 | 0.0021 | 2026-11-03 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). T | |
CVE-2025-30479 |
high | 8.4 | 0.0102 | 2026-11-03 | Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user wit | |
CVE-2025-30299 |
high | 7.8 | 0.0027 | 2026-11-03 | Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer O | |
CVE-2025-2938 |
low | 3.1 | 0.0032 | 2026-11-03 | An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.11 | |
CVE-2025-2053 |
medium | 5.3 | 0.0052 | 2026-11-03 | A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has b | |
CVE-2025-29988 |
medium | 6.9 | 0.0017 | 2026-11-03 | Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high pri | |
CVE-2025-27039 |
medium | 6.6 | 0.0008 | 2026-11-03 | Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request. | |
CVE-2025-26477 |
medium | 4.3 | 0.0043 | 2026-11-03 | Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A l | |
CVE-2025-26422 |
— | — | 0.0009 | 2026-11-03 | In dump of WindowManagerService.java, there is a possible way of running dumpsys without t | |
CVE-2025-26269 |
low | 3.3 | 0.0030 | 2026-11-03 | DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause | |
CVE-2025-24840 |
low | 2.3 | 0.0018 | 2026-11-03 | Improper access control for some Edge Orchestrator software before version 24.11.1 for Int | |
CVE-2025-24324 |
low | 2.0 | 0.0013 | 2026-11-03 | Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Serie | |
CVE-2025-24305 |
high | 7.0 | 0.0016 | 2026-11-03 | Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware | |
CVE-2025-23375 |
high | 7.8 | 0.0014 | 2026-11-03 | Dell PowerProtect Data Manager Reporting, version(s) 19.17, contain(s) an Incorrect Use of | |
CVE-2025-23233 |
medium | 5.1 | 0.0021 | 2026-11-03 | Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) | |
CVE-2025-22889 |
high | 7.0 | 0.0017 | 2026-11-03 | Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 p | |
CVE-2025-22446 |
medium | 5.1 | 0.0009 | 2026-11-03 | Inadequate encryption strength for some Edge Orchestrator software for Intel(R) Tiber™ Edg | |
CVE-2025-22415 |
— | — | 0.0008 | 2026-11-03 | In android_app of Android.bp, there is a possible way to launch any activity as a system u | |
CVE-2025-22258 |
medium | 5.7 | 0.0056 | 2026-11-03 | A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5 | |
CVE-2025-21473 |
high | 7.8 | 0.0007 | 2026-11-03 | Memory corruption when using Virtual cdm (Camera Data Mover) to write registers. |