Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2023-54196 |
— | — | 0.0020 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL po | |
CVE-2023-54195 |
— | — | 0.0020 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix timeout of | |
CVE-2023-54194 |
— | — | 0.0021 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: exfat: use kvmalloc_a | |
CVE-2023-54193 |
high | 7.8 | 0.0016 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: r | |
CVE-2023-54192 |
— | — | 0.0021 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix null pointe | |
CVE-2023-54191 |
— | — | 0.0019 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: f | |
CVE-2023-54190 |
— | — | 0.0020 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: leds: led-core: Fix r | |
CVE-2023-54189 |
— | — | 0.0021 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Add check | |
CVE-2024-27480 |
critical | 9.8 | 0.0039 | 2026-10-29 | givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload. | |
CVE-2024-25183 |
high | 7.5 | 0.0073 | 2026-10-29 | givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php. | |
CVE-2024-25182 |
critical | 9.8 | 0.0039 | 2026-10-29 | givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php. | |
CVE-2024-30855 |
high | 8.8 | 0.0022 | 2026-10-29 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability v | |
CVE-2024-25181 |
critical | 9.1 | 0.0029 | 2026-10-29 | A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Se | |
CVE-2024-44065 |
critical | 9.8 | 0.0038 | 2026-10-29 | Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.ph | |
CVE-2024-42718 |
medium | 6.5 | 0.0065 | 2026-10-29 | A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitra | |
CVE-2024-29720 |
medium | 5.5 | 0.0018 | 2026-10-29 | An issue in Terra Informatica Software, Inc Sciter v.4.4.7.0 allows a local attacker to ob | |
CVE-2025-15098 |
low | 2.1 | 0.0030 | 2026-10-29 | A vulnerability was determined in YunaiV yudao-cloud up to 2025.11. This affects the funct | |
CVE-2024-39037 |
medium | 6.5 | 0.0024 | 2026-10-29 | MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerab | |
CVE-2024-35322 |
medium | 6.1 | 0.0022 | 2026-10-29 | MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulner | |
CVE-2025-68532 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2024-58335 |
medium | 5.0 | 0.0020 | 2026-10-29 | OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disall | |
CVE-2025-51511 |
critical | 9.8 | 0.0038 | 2026-10-29 | Cadmium CMS v.0.4.9 has a background arbitrary file upload vulnerability in /admin/content | |
CVE-2025-65713 |
medium | 4.0 | 0.0040 | 2026-10-29 | Home Assistant Core before v2025.8.0 is vulnerable to Directory Traversal. The Downloader | |
CVE-2025-29229 |
critical | 9.8 | 0.0127 | 2026-10-29 | linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus. | |
CVE-2024-57521 |
critical | 10.0 | 0.0069 | 2026-10-29 | SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execut | |
CVE-2025-67108 |
critical | 10.0 | 0.0031 | 2026-10-29 | eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation | |
CVE-2025-50526 |
critical | 9.8 | 0.0118 | 2026-10-29 | Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via | |
CVE-2025-45493 |
medium | 6.5 | 0.0090 | 2026-10-29 | Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in th | |
CVE-2024-9684 |
high | 7.5 | 0.0040 | 2026-10-29 | FreyrSCADA/IEC-60870-5-104 server v21.06.008 allows remote attackers to cause a denial of | |
CVE-2024-24844 |
high | 7.5 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allow | |
CVE-2023-53973 |
high | 8.5 | 0.0025 | 2026-10-29 | Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows | |
CVE-2023-53969 |
critical | 9.3 | 0.0051 | 2026-10-29 | Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allow | |
CVE-2023-53965 |
high | 8.6 | 0.0024 | 2026-10-29 | SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows | |
CVE-2025-66735 |
high | 7.5 | 0.0044 | 2026-10-29 | youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in | |
CVE-2025-63663 |
high | 7.5 | 0.0029 | 2026-10-29 | Incorrect access control in the /api/v1/conversations/*/files API of GT Edge AI Platform b | |
CVE-2024-35321 |
medium | 4.3 | 0.0031 | 2026-10-29 | MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting (XSS) vulner | |
CVE-2024-25814 |
medium | 6.1 | 0.0022 | 2026-10-29 | MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulner | |
CVE-2025-67443 |
medium | 6.1 | 0.0019 | 2026-10-29 | Schlix CMS before v2.2.9-5 is vulnerable to Cross Site Scripting (XSS). Due to lack of jav | |
CVE-2025-10021 |
high | 7.0 | 0.0015 | 2026-10-29 | A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK | |
CVE-2025-59529 |
medium | 5.5 | 0.0022 | 2026-10-29 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS- | |
CVE-2025-14874 |
high | 7.5 | 0.0060 | 2026-10-29 | A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a | |
CVE-2025-64376 |
high | 7.1 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-64213 |
high | 7.5 | 0.0036 | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes MasterSt | |
CVE-2025-64193 |
high | 7.5 | 0.0046 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-64189 |
high | 7.1 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-60182 |
high | 7.1 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-54748 |
medium | 6.5 | 0.0039 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2024-46062 |
high | 7.8 | 0.0020 | 2026-10-29 | Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerab | |
CVE-2024-29371 |
high | 7.5 | 0.0026 | 2026-10-29 | In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by craft | |
CVE-2024-29370 |
medium | 5.3 | 0.0019 | 2026-10-29 | In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allows an attacker to cau |