Browse All CVEs
32,797 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2024-58287 |
high | 8.7 | 0.0342 | 2026-10-29 | reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan | |
CVE-2024-58289 |
medium | 5.3 | 0.0026 | 2026-10-29 | Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authent | |
CVE-2024-58291 |
medium | 5.3 | 0.0037 | 2026-10-29 | Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticat | |
CVE-2024-58293 |
high | 8.6 | 0.0035 | 2026-10-29 | Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authen | |
CVE-2024-58294 |
high | 8.7 | 0.0357 | 2026-10-29 | FreePBX 16 contains an authenticated remote code execution vulnerability in the API module | |
CVE-2024-58297 |
medium | 5.3 | 0.0026 | 2026-10-29 | PyroCMS v3.0.1 contains a stored cross-site scripting vulnerability in the admin redirects | |
CVE-2024-58304 |
medium | 5.3 | 0.0031 | 2026-10-29 | SPA-CART CMS before 2.0.0 contains a stored cross-site scripting vulnerability in the prod | |
CVE-2024-58306 |
high | 8.7 | 0.0049 | 2026-10-29 | minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to c | |
CVE-2024-58307 |
critical | 9.3 | 0.0051 | 2026-10-29 | CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view fun | |
CVE-2024-58309 |
high | 8.7 | 0.0058 | 2026-10-29 | xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote | |
CVE-2024-58312 |
high | 8.7 | 0.0120 | 2026-10-29 | xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attacke | |
CVE-2024-58313 |
high | 8.6 | 0.0061 | 2026-10-29 | xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated at | |
CVE-2025-40829 |
high | 7.3 | 0.0020 | 2026-10-29 | A vulnerability has been identified in Simcenter Femap (All versions < V2512). The affecte | |
CVE-2024-14010 |
high | 8.5 | 0.0115 | 2026-10-29 | Typora 1.7.4 contains a command injection vulnerability in the PDF export preferences that | |
CVE-2024-58305 |
high | 8.6 | 0.0043 | 2026-10-29 | WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inj | |
CVE-2025-14714 |
low | 0.9 | 0.0014 | 2026-10-29 | An Authentication Bypass vulnerability existed where the application bundled an interprete | |
CVE-2025-34179 |
high | 8.7 | 0.0040 | 2026-10-29 | NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in | |
CVE-2025-34181 |
high | 8.7 | 0.0104 | 2026-10-29 | NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Conn | |
CVE-2024-44598 |
high | 8.8 | 0.0039 | 2026-10-29 | FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module. | |
CVE-2024-44599 |
high | 8.3 | 0.0047 | 2026-10-29 | FNT Command 13.4.0 is vulnerable to Directory Traversal. | |
CVE-2025-66844 |
critical | 9.1 | 0.0029 | 2026-10-29 | In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig t | |
CVE-2024-29370 |
medium | 5.3 | 0.0019 | 2026-10-29 | In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allows an attacker to cau | |
CVE-2024-29371 |
high | 7.5 | 0.0026 | 2026-10-29 | In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by craft | |
CVE-2024-46062 |
high | 7.8 | 0.0020 | 2026-10-29 | Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerab | |
CVE-2025-54748 |
medium | 6.5 | 0.0039 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2025-60182 |
high | 7.1 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-64189 |
high | 7.1 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-64193 |
high | 7.5 | 0.0046 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-64213 |
high | 7.5 | 0.0036 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes MasterSt | |
CVE-2025-64376 |
high | 7.1 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-14874 |
high | 7.5 | 0.0060 | 2026-10-29 | A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a | |
CVE-2025-59529 |
medium | 5.5 | 0.0022 | 2026-10-29 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS- | |
CVE-2025-10021 |
high | 7.0 | 0.0015 | 2026-10-29 | A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK | |
CVE-2025-67443 |
medium | 6.1 | 0.0019 | 2026-10-29 | Schlix CMS before v2.2.9-5 is vulnerable to Cross Site Scripting (XSS). Due to lack of jav | |
CVE-2024-25814 |
medium | 6.1 | 0.0022 | 2026-10-29 | MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulner | |
CVE-2024-35321 |
medium | 4.3 | 0.0031 | 2026-10-29 | MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting (XSS) vulner | |
CVE-2025-63663 |
high | 7.5 | 0.0029 | 2026-10-29 | Incorrect access control in the /api/v1/conversations/*/files API of GT Edge AI Platform b | |
CVE-2025-66735 |
high | 7.5 | 0.0044 | 2026-10-29 | youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in | |
CVE-2023-53965 |
high | 8.6 | 0.0024 | 2026-10-29 | SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows | |
CVE-2023-53969 |
critical | 9.3 | 0.0051 | 2026-10-29 | Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allow | |
CVE-2023-53973 |
high | 8.5 | 0.0025 | 2026-10-29 | Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows | |
CVE-2024-24844 |
high | 7.5 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allow | |
CVE-2024-9684 |
high | 7.5 | 0.0040 | 2026-10-29 | FreyrSCADA/IEC-60870-5-104 server v21.06.008 allows remote attackers to cause a denial of | |
CVE-2025-45493 |
medium | 6.5 | 0.0090 | 2026-10-29 | Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in th | |
CVE-2025-50526 |
critical | 9.8 | 0.0118 | 2026-10-29 | Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via | |
CVE-2025-67108 |
critical | 10.0 | 0.0031 | 2026-10-29 | eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation | |
CVE-2024-57521 |
critical | 10.0 | 0.0068 | 2026-10-29 | SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execut | |
CVE-2025-29229 |
critical | 9.8 | 0.0127 | 2026-10-29 | linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus. | |
CVE-2025-65713 |
medium | 4.0 | 0.0040 | 2026-10-29 | Home Assistant Core before v2025.8.0 is vulnerable to Directory Traversal. The Downloader | |
CVE-2025-51511 |
critical | 9.8 | 0.0038 | 2026-10-29 | Cadmium CMS v.0.4.9 has a background arbitrary file upload vulnerability in /admin/content |