Browse All CVEs
46,677 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-61882 |
— | — | 0.9973 | 2026-10-29 | KEV | Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integrat |
CVE-2014-6278 |
— | — | 0.9974 | 2026-10-29 | KEV | GNU Bash contains an OS command injection vulnerability which allows remote attackers to e |
CVE-2017-1000353 |
— | — | 0.9968 | 2026-10-29 | KEV | Jenkins contains a remote code execution vulnerability. This vulnerability that could allo |
CVE-2015-7755 |
— | — | 0.6140 | 2026-10-29 | KEV | Juniper ScreenOS contains an improper authentication vulnerability that could allow unauth |
CVE-2025-21043 |
— | — | 0.0222 | 2026-10-29 | KEV | Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram |
CVE-2025-4008 |
— | — | 0.9344 | 2026-10-29 | KEV | Smartbedded Meteobridge contains a command injection vulnerability that could allow remote |
CVE-2025-32463 |
— | — | 0.5630 | 2026-10-29 | KEV | Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. T |
CVE-2025-59689 |
— | — | 0.0196 | 2026-10-29 | KEV | Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which al |
CVE-2025-10035 |
— | — | 0.9982 | 2026-10-29 | KEV | Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an |
CVE-2025-20352 |
— | — | 0.4057 | 2026-10-29 | KEV | Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Ne |
CVE-2021-21311 |
— | — | 0.9846 | 2026-10-29 | KEV | Adminer contains a server-side request forgery vulnerability that, when exploited, allows |
CVE-2025-20362 |
— | — | 0.8669 | 2026-10-29 | KEV | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense |
CVE-2025-20333 |
— | — | 0.7204 | 2026-10-29 | KEV | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense |
CVE-2025-10585 |
— | — | 0.0897 | 2026-10-29 | KEV | Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssemb |
CVE-2025-5086 |
— | — | 0.9716 | 2026-10-29 | KEV | Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability |
CVE-2025-38352 |
— | — | 0.0136 | 2026-10-29 | KEV | Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability th |
CVE-2025-48543 |
— | — | 0.0066 | 2026-10-29 | KEV | Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sand |
CVE-2025-53690 |
— | — | 0.6071 | 2026-10-29 | KEV | Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and |
CVE-2023-50224 |
— | — | 0.2002 | 2026-10-29 | KEV | TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the h |
CVE-2025-9377 |
— | — | 0.4130 | 2026-10-29 | KEV | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability t |
CVE-2020-24363 |
— | — | 0.2219 | 2026-10-29 | KEV | TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. |
CVE-2025-55177 |
— | — | 0.1351 | 2026-10-29 | KEV | Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomp |
CVE-2025-57819 |
— | — | 0.9521 | 2026-10-29 | KEV | Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sani |
CVE-2025-7775 |
— | — | 0.2067 | 2026-10-29 | KEV | Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that co |
CVE-2025-48384 |
— | — | 0.0438 | 2026-10-29 | KEV | Git contains a link following vulnerability that stems from Git’s inconsistent handling of |
CVE-2024-8068 |
— | — | 0.0348 | 2026-10-29 | KEV | Citrix Session Recording contains an improper privilege management vulnerability that coul |
CVE-2024-8069 |
— | — | 0.1819 | 2026-10-29 | KEV | Citrix Session Recording contains a deserialization of untrusted data vulnerability that a |
CVE-2025-43300 |
— | — | 0.6516 | 2026-10-29 | KEV | Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O |
CVE-2025-54948 |
— | — | 0.3287 | 2026-10-29 | KEV | Trend Micro Apex One Management Console (on-premise) contains an OS command injection vuln |
CVE-2025-8876 |
— | — | 0.0408 | 2026-10-29 | KEV | N-able N-Central contains a command injection vulnerability via improper sanitization of u |
CVE-2025-8875 |
— | — | 0.0232 | 2026-10-29 | KEV | N-able N-Central contains an insecure deserialization vulnerability that could lead to com |
CVE-2025-8088 |
— | — | 0.9429 | 2026-10-29 | KEV | RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of Win |
CVE-2007-0671 |
— | — | 0.4410 | 2026-10-29 | KEV | Microsoft Office Excel contains a remote code execution vulnerability that can be exploite |
CVE-2013-3893 |
— | — | 0.8764 | 2026-10-29 | KEV | Microsoft Internet Explorer contains a memory corruption vulnerability that allows for rem |
CVE-2020-25078 |
— | — | 0.9751 | 2026-10-29 | KEV | D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability that could al |
CVE-2020-25079 |
— | — | 0.5401 | 2026-10-29 | KEV | D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerability in the c |
CVE-2022-40799 |
— | — | 0.3365 | 2026-10-29 | KEV | D-Link DNR-322L contains a download of code without integrity check vulnerability that cou |
CVE-2023-2533 |
— | — | 0.2883 | 2026-10-29 | KEV | PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under sp |
CVE-2025-20337 |
— | — | 0.7450 | 2026-10-29 | KEV | Cisco Identity Services Engine contains an injection vulnerability in a specific API of Ci |
CVE-2025-20281 |
— | — | 0.9760 | 2026-10-29 | KEV | Cisco Identity Services Engine contains an injection vulnerability in a specific API of Ci |
CVE-2025-2775 |
— | — | 0.4317 | 2026-10-29 | KEV | SysAid On-Prem contains an improper restriction of XML external entity reference vulnerabi |
CVE-2025-2776 |
— | — | 0.6523 | 2026-10-29 | KEV | SysAid On-Prem contains an improper restriction of XML external entity reference vulnerabi |
CVE-2025-6558 |
— | — | 0.1093 | 2026-10-29 | KEV | Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This |
CVE-2025-54309 |
— | — | 0.9347 | 2026-10-29 | KEV | CrushFTP contains an unprotected alternate channel vulnerability. When the DMZ proxy featu |
CVE-2025-49704 |
— | — | 1.0000 | 2026-10-29 | KEV | Microsoft SharePoint contains a code injection vulnerability that could allow an authorize |
CVE-2025-49706 |
— | — | 0.9906 | 2026-10-29 | KEV | Microsoft SharePoint contains an improper authentication vulnerability that allows an auth |
CVE-2025-53770 |
— | — | 1.0000 | 2026-10-29 | KEV | Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulne |
CVE-2025-25257 |
— | — | 0.9992 | 2026-10-29 | KEV | Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated |
CVE-2025-47812 |
— | — | 0.9388 | 2026-10-29 | KEV | Wing FTP Server contains an improper neutralization of null byte or NUL character vulnerab |
CVE-2025-5777 |
— | — | 0.9997 | 2026-10-29 | KEV | Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insuff |