Browse All CVEs
33,065 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2023-45583 |
high | 7.2 | 0.0066 | 2026-10-29 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, Fort | |
CVE-2024-32507 |
high | 8.8 | 0.0046 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login | |
CVE-2024-26010 |
high | 7.5 | 0.0079 | 2026-10-29 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, Forti | |
CVE-2024-38564 |
medium | 5.5 | 0.0024 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYP | |
CVE-2024-21753 |
medium | 6.0 | 0.0080 | 2026-10-29 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerabi | |
CVE-2024-9355 |
medium | 6.5 | 0.0030 | 2026-10-29 | A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to ran | |
CVE-2024-9407 |
medium | 4.7 | 0.0029 | 2026-10-29 | A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instru | |
CVE-2024-26011 |
critical | 9.8 | 0.0060 | 2026-10-29 | A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4. | |
CVE-2024-52615 |
medium | 5.3 | 0.0062 | 2026-10-29 | A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS que | |
CVE-2024-52616 |
medium | 5.3 | 0.0073 | 2026-10-29 | A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly on | |
CVE-2024-48884 |
critical | 9.1 | 0.1521 | 2026-10-29 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerabi | |
CVE-2024-11831 |
medium | 5.4 | 0.0112 | 2026-10-29 | A flaw was found in npm-serialize-javascript. The vulnerability occurs because the seriali | |
CVE-2024-12133 |
medium | 5.3 | 0.0111 | 2026-10-29 | A flaw in libtasn1 causes inefficient handling of specific certificate data. When processi | |
CVE-2024-12243 |
medium | 5.3 | 0.0129 | 2026-10-29 | A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an | |
CVE-2024-3220 |
low | 2.3 | 0.0072 | 2026-10-29 | There is a defect in the CPython standard library module “mimetypes” where on Windows the | |
CVE-2025-26926 |
medium | 4.3 | 0.0016 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in Booknetic Booknetic booknetic allows Cr | |
CVE-2025-2707 |
medium | 5.3 | 0.0073 | 2026-10-29 | A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1. This impacts an unkno | |
CVE-2025-2708 |
medium | 5.3 | 0.0074 | 2026-10-29 | A vulnerability was identified in zhijiantianya ruoyi-vue-pro 2.4.1. Affected is an unknow | |
CVE-2025-49710 |
critical | 9.8 | 0.0074 | 2026-10-29 | An integer overflow was present in `OrderedHashTable` used by the JavaScript engine. This | |
CVE-2025-6424 |
critical | 9.8 | 0.0796 | 2026-10-29 | A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerab | |
CVE-2025-6425 |
medium | 4.3 | 0.0031 | 2026-10-29 | An attacker who enumerated resources from the WebCompat extension could have obtained a pe | |
CVE-2025-6426 |
high | 8.8 | 0.0021 | 2026-10-29 | The executable file warning did not warn users before opening files with the `terminal` ex | |
CVE-2025-6430 |
medium | 6.1 | 0.0027 | 2026-10-29 | When a file download is specified via the `Content-Disposition` header, that directive wou | |
CVE-2025-8556 |
low | 3.7 | 0.0053 | 2026-10-29 | A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability | |
CVE-2025-34522 |
critical | 9.2 | 0.0056 | 2026-10-29 | A heap-based buffer overflow vulnerability exists in the input parsing logic of Arcserve U | |
CVE-2025-52543 |
medium | 5.3 | 0.0031 | 2026-10-29 | E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) | |
CVE-2025-52544 |
high | 8.8 | 0.0036 | 2026-10-29 | E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allo | |
CVE-2025-52545 |
high | 7.7 | 0.0026 | 2026-10-29 | E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call t | |
CVE-2025-52546 |
medium | 5.1 | 0.0020 | 2026-10-29 | E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allo | |
CVE-2025-52547 |
high | 8.7 | 0.0034 | 2026-10-29 | E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lack | |
CVE-2025-6519 |
critical | 9.3 | 0.0054 | 2026-10-29 | E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a d | |
CVE-2025-58214 |
high | 8.1 | 0.0059 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-58628 |
critical | 9.3 | 0.0031 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2024-21970 |
medium | 4.4 | 0.0014 | 2026-10-29 | Improper validation of an array index in the AND power Management Firmware could allow a p | |
CVE-2024-36342 |
high | 8.8 | 0.0017 | 2026-10-29 | Improper input validation in the GPU driver could allow an attacker to exploit a heap over | |
CVE-2024-36346 |
medium | 6.0 | 0.0013 | 2026-10-29 | Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged | |
CVE-2025-40594 |
medium | 6.9 | 0.0021 | 2026-10-29 | A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAM | |
CVE-2025-40795 |
critical | 9.3 | 0.0072 | 2026-10-29 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS ne | |
CVE-2025-40796 |
high | 8.7 | 0.0050 | 2026-10-29 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS ne | |
CVE-2025-40797 |
high | 8.7 | 0.0054 | 2026-10-29 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS ne | |
CVE-2025-40798 |
high | 8.7 | 0.0054 | 2026-10-29 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS ne | |
CVE-2025-59042 |
high | 7.0 | 0.0013 | 2026-10-29 | PyInstaller bundles a Python application and all its dependencies into a single package. D | |
CVE-2025-10275 |
low | 2.1 | 0.0030 | 2026-10-29 | A weakness has been identified in YunaiV yudao-cloud up to 2025.09. This affects an unknow | |
CVE-2025-10276 |
low | 2.1 | 0.0031 | 2026-10-29 | A security vulnerability has been detected in YunaiV ruoyi-vue-pro up to 2025.09. This vul | |
CVE-2025-10277 |
low | 2.1 | 0.0031 | 2026-10-29 | A vulnerability was detected in YunaiV yudao-cloud up to 2025.09. This issue affects some | |
CVE-2025-10278 |
low | 2.1 | 0.0031 | 2026-10-29 | A flaw has been found in YunaiV ruoyi-vue-pro up to 2025.09. Impacted is an unknown functi | |
CVE-2024-45431 |
medium | 5.3 | 0.0563 | 2026-10-29 | OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific | |
CVE-2025-41713 |
medium | 6.5 | 0.0037 | 2026-10-29 | During a short time frame while the device is booting an unauthenticated remote attacker c | |
CVE-2025-3025 |
high | 7.3 | 0.0014 | 2026-10-29 | Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 | |
CVE-2025-10290 |
medium | 6.5 | 0.0025 | 2026-10-29 | Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to l |