Browse All CVEs
50,486 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-0966 |
high | 7.6 | 0.0033 | 2026-11-03 | IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker coul | |
CVE-2025-0893 |
high | 7.8 | 0.0015 | 2026-11-03 | Symantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Esc | |
CVE-2025-0131 |
high | 7.1 | 0.0016 | 2026-11-03 | An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Securi | |
CVE-2025-0107 |
high | 7.7 | 0.7842 | 2026-11-03 | An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthen | |
CVE-2025-0077 |
— | — | 0.0011 | 2026-11-03 | In multiple functions of UserController.java, there is a possible lock screen bypass due t | |
CVE-2024-9264 |
critical | 9.4 | 0.9755 | 2026-11-03 | 14 PoC | The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` |
CVE-2024-9121 |
high | 8.8 | 0.0051 | 2026-11-03 | Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allowed a remot | |
CVE-2024-6800 |
critical | 9.5 | 0.0153 | 2026-11-03 | An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) whe | |
CVE-2024-6671 |
critical | 9.8 | 0.1899 | 2026-11-03 | In WhatsUp Gold versions released before 2024.0.0, if the application is configured with o | |
CVE-2024-6409 |
high | 7.0 | 0.2793 | 2026-11-03 | A race condition vulnerability was discovered in how signals are handled by OpenSSH's serv | |
CVE-2024-6235 |
critical | 9.4 | 0.2117 | 2026-11-03 | Sensitive information disclosure in NetScaler Console | |
CVE-2024-5907 |
medium | 5.2 | 0.0013 | 2026-11-03 | A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Wi | |
CVE-2024-5805 |
critical | 9.1 | 0.0676 | 2026-11-03 | Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Aut | |
CVE-2024-5700 |
high | 7.0 | 0.0044 | 2026-11-03 | Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Som | |
CVE-2024-57392 |
— | — | 0.0115 | 2026-11-03 | Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execu | |
CVE-2024-55580 |
high | 7.5 | 0.0035 | 2026-11-03 | An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. Unpr | |
CVE-2024-55579 |
high | 8.8 | 0.0047 | 2026-11-03 | An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. An u | |
CVE-2024-54529 |
high | 7.8 | 0.0033 | 2026-11-03 | A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. | |
CVE-2024-54505 |
high | 8.8 | 0.0107 | 2026-11-03 | A type confusion issue was addressed with improved memory handling. This issue is fixed in | |
CVE-2024-54465 |
critical | 9.8 | 0.0062 | 2026-11-03 | A logic issue was addressed with improved state management. This issue is fixed in macOS S | |
CVE-2024-53691 |
high | 8.7 | 0.2300 | 2026-11-03 | 1 PoC | A link following vulnerability has been reported to affect several QNAP operating system v |
CVE-2024-53677 |
critical | 9.5 | 0.7237 | 2026-11-03 | 18 PoC | File upload logic in Apache Struts is flawed. An attacker can manipulate file upload param |
CVE-2024-52940 |
high | 7.5 | 0.0126 | 2026-11-03 | 1 PoC | AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently |
CVE-2024-50379 |
critical | 9.8 | 0.3182 | 2026-11-03 | 15 PoC | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in |
CVE-2024-50330 |
critical | 9.8 | 0.4029 | 2026-11-03 | 1 PoC | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 |
CVE-2024-49731 |
— | — | 0.0008 | 2026-11-03 | In apk-versions.txt, there is a possible corruption of telemetry opt-in settings on other | |
CVE-2024-49541 |
medium | 5.5 | 0.0033 | 2026-11-03 | Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds read vuln | |
CVE-2024-49368 |
high | 8.9 | 0.2767 | 2026-11-03 | 1 PoC | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, |
CVE-2024-49114 |
high | 7.8 | 0.0075 | 2026-11-03 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | |
CVE-2024-49113 |
high | 7.5 | 0.8378 | 2026-11-03 | 6 PoC | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2024-49112 |
critical | 9.8 | 0.7217 | 2026-11-03 | 3 PoC | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2024-49068 |
high | 8.2 | 0.0162 | 2026-11-03 | Microsoft SharePoint Elevation of Privilege Vulnerability | |
CVE-2024-49065 |
medium | 5.5 | 0.0110 | 2026-11-03 | Microsoft Office Remote Code Execution Vulnerability | |
CVE-2024-49019 |
high | 7.8 | 0.0198 | 2026-11-03 | 1 PoC | Active Directory Certificate Services Elevation of Privilege Vulnerability |
CVE-2024-47606 |
high | 8.6 | 0.0173 | 2026-11-03 | GStreamer is a library for constructing graphs of media-handling components. An integer un | |
CVE-2024-46852 |
high | 7.8 | 0.0022 | 2026-11-03 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fix o | |
CVE-2024-45717 |
high | 7.0 | 0.0039 | 2026-11-03 | The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and | |
CVE-2024-45409 |
critical | 10.0 | 0.1245 | 2026-11-03 | 2 PoC | The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SA |
CVE-2024-43598 |
high | 8.1 | 0.0141 | 2026-11-03 | LightGBM Remote Code Execution Vulnerability | |
CVE-2024-43102 |
critical | 10.0 | 0.0069 | 2026-11-03 | Concurrent removals of certain anonymous shared memory mappings by using the UMTX_SHM_DEST | |
CVE-2024-41730 |
critical | 9.8 | 0.7587 | 2026-11-03 | In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on E | |
CVE-2024-3912 |
critical | 9.8 | 0.0102 | 2026-11-03 | 1 PoC | Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthe |
CVE-2024-3863 |
critical | 9.8 | 0.0081 | 2026-11-03 | The executable file warning was not presented when downloading .xrm-ms files. *Note: Thi | |
CVE-2024-3418 |
medium | 6.3 | 0.0071 | 2026-11-03 | A vulnerability, which was classified as critical, was found in SourceCodester Online Cour | |
CVE-2024-3376 |
high | 7.3 | 0.0134 | 2026-11-03 | A vulnerability classified as critical has been found in SourceCodester Computer Laborator | |
CVE-2024-3347 |
high | 7.3 | 0.0086 | 2026-11-03 | A vulnerability was found in SourceCodester Airline Ticket Reservation System 1.0. It has | |
CVE-2024-39877 |
high | 8.8 | 0.0173 | 2026-11-03 | Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authentic | |
CVE-2024-39700 |
critical | 10.0 | 0.0109 | 2026-11-03 | 2 PoC | JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositor |
CVE-2024-39331 |
critical | 9.8 | 0.0131 | 2026-11-03 | In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev ev | |
CVE-2024-38472 |
high | 7.5 | 0.6947 | 2026-11-03 | 2 PoC | SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a maliciou |