Browse All CVEs
39,684 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-63402 |
medium | 5.5 | 0.0035 | 2026-10-29 | An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacke | |
CVE-2025-63499 |
medium | 6.1 | 0.0032 | 2026-10-29 | Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter. | |
CVE-2025-65883 |
high | 8.4 | 0.0039 | 2026-10-29 | A vulnerability has been identified in Genexis Platinum P4410 router (Firmware P4410-V2–1. | |
CVE-2024-56835 |
high | 8.7 | 0.0051 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56836 |
high | 7.7 | 0.0043 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56837 |
high | 8.6 | 0.0052 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56838 |
high | 8.6 | 0.0039 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56839 |
high | 8.6 | 0.0064 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56840 |
high | 7.5 | 0.0064 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2025-40806 |
medium | 6.9 | 0.0046 | 2026-10-29 | A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The aff | |
CVE-2025-40807 |
medium | 5.3 | 0.0030 | 2026-10-29 | A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The aff | |
CVE-2025-40818 |
low | 3.3 | 0.0010 | 2026-10-29 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 S | |
CVE-2025-40819 |
medium | 4.3 | 0.0025 | 2026-10-29 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 S | |
CVE-2025-40830 |
high | 8.4 | 0.0016 | 2026-10-29 | A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). Th | |
CVE-2025-40831 |
high | 7.1 | 0.0039 | 2026-10-29 | A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). Th | |
CVE-2025-40937 |
high | 8.7 | 0.0059 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-40938 |
critical | 9.2 | 0.0038 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-40939 |
medium | 5.1 | 0.0021 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-40940 |
medium | 6.9 | 0.0037 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-40941 |
medium | 5.3 | 0.0028 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-66532 |
medium | 4.3 | 0.0028 | 2026-10-29 | Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting | |
CVE-2025-66533 |
medium | 6.5 | 0.0031 | 2026-10-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in Liquid Web / St | |
CVE-2025-67521 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67525 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67526 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67527 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67529 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67531 |
high | 7.5 | 0.0044 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67538 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-67539 |
medium | 6.5 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-67544 |
medium | 6.5 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-67562 |
medium | 5.4 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-captio | |
CVE-2025-67572 |
medium | 5.3 | 0.0025 | 2026-10-29 | Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incor | |
CVE-2025-67573 |
medium | 5.3 | 0.0025 | 2026-10-29 | Missing Authorization vulnerability in ThimPress Sailing sailing allows Exploiting Incorre | |
CVE-2025-67591 |
medium | 4.3 | 0.0012 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in jegtheme JNews Paywall jnews-paywall al | |
CVE-2024-2105 |
medium | 6.5 | 0.0020 | 2026-10-29 | An unauthorised attacker within bluetooth range may use an improper validation during the | |
CVE-2025-63895 |
high | 7.5 | 0.0031 | 2026-10-29 | An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12 | |
CVE-2024-58287 |
high | 8.7 | 0.0342 | 2026-10-29 | reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan | |
CVE-2024-58289 |
medium | 5.3 | 0.0026 | 2026-10-29 | Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authent | |
CVE-2024-58291 |
medium | 5.3 | 0.0037 | 2026-10-29 | Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticat | |
CVE-2024-58293 |
high | 8.6 | 0.0035 | 2026-10-29 | Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authen | |
CVE-2024-58294 |
high | 8.7 | 0.0357 | 2026-10-29 | FreePBX 16 contains an authenticated remote code execution vulnerability in the API module | |
CVE-2024-58297 |
medium | 5.3 | 0.0026 | 2026-10-29 | PyroCMS v3.0.1 contains a stored cross-site scripting vulnerability in the admin redirects | |
CVE-2024-58304 |
medium | 5.3 | 0.0031 | 2026-10-29 | SPA-CART CMS before 2.0.0 contains a stored cross-site scripting vulnerability in the prod | |
CVE-2024-58306 |
high | 8.7 | 0.0049 | 2026-10-29 | minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to c | |
CVE-2024-58307 |
critical | 9.3 | 0.0051 | 2026-10-29 | CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view fun | |
CVE-2024-58309 |
high | 8.7 | 0.0058 | 2026-10-29 | xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote | |
CVE-2024-58312 |
high | 8.7 | 0.0120 | 2026-10-29 | xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attacke | |
CVE-2024-58313 |
high | 8.6 | 0.0061 | 2026-10-29 | xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated at | |
CVE-2025-40829 |
high | 7.3 | 0.0020 | 2026-10-29 | A vulnerability has been identified in Simcenter Femap (All versions < V2512). The affecte |