Browse All CVEs
50,486 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-21461 |
high | 7.8 | 0.0010 | 2026-11-03 | Memory corruption when programming registers through virtual CDM. | |
CVE-2025-21456 |
high | 7.8 | 0.0010 | 2026-11-03 | Memory corruption while processing IOCTL command when multiple threads are called to map/u | |
CVE-2025-21428 |
high | 7.5 | 0.0026 | 2026-11-03 | Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request | |
CVE-2025-20744 |
— | — | 0.0008 | 2026-11-03 | In pda, there is a possible escalation of privilege due to use after free. This could lead | |
CVE-2025-20743 |
— | — | 0.0008 | 2026-11-03 | In clkdbg, there is a possible escalation of privilege due to use after free. This could l | |
CVE-2025-20732 |
— | — | 0.0012 | 2026-11-03 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds chec | |
CVE-2025-20726 |
— | — | 0.0051 | 2026-11-03 | In Modem, there is a possible out of bounds write due to an incorrect bounds check. This c | |
CVE-2025-20725 |
— | — | 0.0054 | 2026-11-03 | In ims service, there is a possible out of bounds write due to a missing bounds check. Thi | |
CVE-2025-20612 |
medium | 5.1 | 0.0023 | 2026-11-03 | Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) | |
CVE-2025-20376 |
medium | 6.5 | 0.0048 | 2026-11-03 | A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote at | |
CVE-2025-20375 |
medium | 6.5 | 0.0039 | 2026-11-03 | A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote at | |
CVE-2025-20354 |
critical | 9.8 | 0.0087 | 2026-11-03 | A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX co | |
CVE-2025-20338 |
medium | 6.0 | 0.0029 | 2026-11-03 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local at | |
CVE-2025-20277 |
low | 3.4 | 0.0017 | 2026-11-03 | A vulnerability in the web-based management interface of Cisco Unified CCX could allow an | |
CVE-2025-20260 |
critical | 9.8 | 0.0170 | 2026-11-03 | 2 PoC | A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, re |
CVE-2025-20258 |
medium | 5.4 | 0.0030 | 2026-11-03 | A vulnerability in the self-service portal of Cisco Duo could allow an unauthenticated, re | |
CVE-2025-20213 |
medium | 5.5 | 0.0017 | 2026-11-03 | A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage | |
CVE-2025-20198 |
medium | 4.6 | 0.0017 | 2026-11-03 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local at | |
CVE-2025-20164 |
high | 8.3 | 0.0035 | 2026-11-03 | A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS S | |
CVE-2025-20114 |
medium | 4.3 | 0.0035 | 2026-11-03 | A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticat | |
CVE-2025-1697 |
medium | 6.9 | 0.0021 | 2026-11-03 | A potential security vulnerability has been identified in the HP Touchpoint Analytics Serv | |
CVE-2025-14727 |
high | 8.3 | 0.0043 | 2026-11-03 | A vulnerability exists in NGINX Ingress Controller's nginx.org/rewrite-target annotation v | |
CVE-2025-14265 |
critical | 9.1 | 0.0037 | 2026-11-03 | In versions of ScreenConnect™ prior to 25.8, server-side validation and integrity checks w | |
CVE-2025-13780 |
critical | 9.1 | 0.0095 | 2026-11-03 | 3 PoC | pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability th |
CVE-2025-13642 |
medium | 5.4 | 0.0051 | 2026-11-03 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & | |
CVE-2026-81623 |
high | 8.8 | 0.0034 | 2026-11-03 | IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary c | |
CVE-2026-81239 |
high | 8.6 | 0.0040 | 2026-11-03 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload | |
CVE-2026-81049 |
medium | 6.7 | 0.0012 | 2026-11-03 | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Ch | |
CVE-2026-7769 |
high | 8.1 | 0.0048 | 2026-11-03 | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2. | |
CVE-2026-7363 |
high | 8.8 | 0.0038 | 2026-11-03 | Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allow | |
CVE-2026-7312 |
critical | 10.0 | 0.0044 | 2026-11-03 | CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity versi | |
CVE-2026-79206 |
— | — | 0.0032 | 2026-11-03 | Out of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote | |
CVE-2026-78892 |
— | — | 0.0011 | 2026-11-03 | Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.6 | |
CVE-2026-75034 |
high | 7.4 | 0.0032 | 2026-11-03 | A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by th | |
CVE-2026-74985 |
critical | 9.8 | 0.0053 | 2026-11-03 | Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in | |
CVE-2026-73755 |
medium | 5.7 | 0.0031 | 2026-11-03 | A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful expl | |
CVE-2026-73466 |
medium | 6.3 | 0.0013 | 2026-11-03 | On affected platforms running Arista EOS, under certain circumstances user passwordss may | |
CVE-2026-71312 |
high | 8.0 | 0.0049 | 2026-11-03 | rclone is a command-line program to sync files and directories to and from different cloud | |
CVE-2026-70611 |
medium | 6.9 | 0.0019 | 2026-11-03 | Electron is a framework for writing cross-platform desktop applications using JavaScript, | |
CVE-2026-70603 |
medium | 6.0 | 0.0013 | 2026-11-03 | Electron is a framework for writing cross-platform desktop applications using JavaScript, | |
CVE-2026-70482 |
high | 8.8 | 0.0057 | 2026-11-03 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From | |
CVE-2026-67305 |
critical | 9.4 | 0.0077 | 2026-11-03 | FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the | |
CVE-2026-65643 |
high | 8.7 | 0.0088 | 2026-11-03 | 2 PoC | Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execu |
CVE-2026-63694 |
medium | 5.0 | 0.0084 | 2026-11-03 | Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutrali | |
CVE-2026-62196 |
high | 8.7 | 0.0040 | 2026-11-03 | OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability | |
CVE-2026-61511 |
critical | 9.3 | 0.7427 | 2026-11-03 | 5 PoC | vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability |
CVE-2026-57156 |
high | 8.6 | 0.0070 | 2026-11-03 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit | |
CVE-2026-52811 |
critical | 9.0 | 0.0047 | 2026-11-03 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, (*Repository).UploadRepoF | |
CVE-2026-52809 |
medium | 6.8 | 0.0019 | 2026-11-03 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, password-reset tokens are | |
CVE-2026-52805 |
high | 8.7 | 0.0038 | 2026-11-03 | Gogs is an open source self-hosted Git service. Prior to 0.14.3, a Server-Side Request For |