Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-66844 |
critical | 9.1 | 0.0029 | 2026-10-29 | In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig t | |
CVE-2024-44599 |
high | 8.3 | 0.0047 | 2026-10-29 | FNT Command 13.4.0 is vulnerable to Directory Traversal. | |
CVE-2024-44598 |
high | 8.8 | 0.0039 | 2026-10-29 | FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module. | |
CVE-2025-34181 |
high | 8.7 | 0.0104 | 2026-10-29 | NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Conn | |
CVE-2025-34179 |
high | 8.7 | 0.0040 | 2026-10-29 | NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in | |
CVE-2025-14714 |
low | 0.9 | 0.0014 | 2026-10-29 | An Authentication Bypass vulnerability existed where the application bundled an interprete | |
CVE-2024-58305 |
high | 8.6 | 0.0046 | 2026-10-29 | WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inj | |
CVE-2024-14010 |
high | 8.5 | 0.0112 | 2026-10-29 | Typora 1.7.4 contains a command injection vulnerability in the PDF export preferences that | |
CVE-2025-40829 |
high | 7.3 | 0.0021 | 2026-10-29 | A vulnerability has been identified in Simcenter Femap (All versions < V2512). The affecte | |
CVE-2024-58313 |
high | 8.6 | 0.0065 | 2026-10-29 | xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated at | |
CVE-2024-58312 |
high | 8.7 | 0.0129 | 2026-10-29 | xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attacke | |
CVE-2024-58309 |
high | 8.7 | 0.0062 | 2026-10-29 | xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote | |
CVE-2024-58307 |
critical | 9.3 | 0.0055 | 2026-10-29 | CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view fun | |
CVE-2024-58306 |
high | 8.7 | 0.0053 | 2026-10-29 | minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to c | |
CVE-2024-58304 |
medium | 5.3 | 0.0033 | 2026-10-29 | SPA-CART CMS before 2.0.0 contains a stored cross-site scripting vulnerability in the prod | |
CVE-2024-58297 |
medium | 5.3 | 0.0027 | 2026-10-29 | PyroCMS v3.0.1 contains a stored cross-site scripting vulnerability in the admin redirects | |
CVE-2024-58294 |
high | 8.7 | 0.0357 | 2026-10-29 | FreePBX 16 contains an authenticated remote code execution vulnerability in the API module | |
CVE-2024-58293 |
high | 8.6 | 0.0038 | 2026-10-29 | Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authen | |
CVE-2024-58291 |
medium | 5.3 | 0.0040 | 2026-10-29 | Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticat | |
CVE-2024-58289 |
medium | 5.3 | 0.0028 | 2026-10-29 | Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authent | |
CVE-2024-58287 |
high | 8.7 | 0.0342 | 2026-10-29 | reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan | |
CVE-2025-63895 |
high | 7.5 | 0.0034 | 2026-10-29 | An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12 | |
CVE-2024-2105 |
medium | 6.5 | 0.0021 | 2026-10-29 | An unauthorised attacker within bluetooth range may use an improper validation during the | |
CVE-2025-67591 |
medium | 4.3 | 0.0013 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in jegtheme JNews Paywall jnews-paywall al | |
CVE-2025-67573 |
medium | 5.3 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in ThimPress Sailing sailing allows Exploiting Incorre | |
CVE-2025-67572 |
medium | 5.3 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incor | |
CVE-2025-67562 |
medium | 5.4 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-captio | |
CVE-2025-67544 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-67539 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-67538 |
medium | 6.5 | 0.0021 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-67531 |
high | 7.5 | 0.0048 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67529 |
high | 7.5 | 0.0048 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67527 |
high | 7.5 | 0.0048 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67526 |
high | 7.5 | 0.0048 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67525 |
high | 7.5 | 0.0048 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-67521 |
high | 7.5 | 0.0048 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-66533 |
medium | 6.5 | 0.0033 | 2026-10-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in Liquid Web / St | |
CVE-2025-66532 |
medium | 4.3 | 0.0030 | 2026-10-29 | Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting | |
CVE-2025-40941 |
medium | 5.3 | 0.0030 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-40940 |
medium | 6.9 | 0.0039 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-40939 |
medium | 5.1 | 0.0023 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-40938 |
critical | 9.2 | 0.0040 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-40937 |
high | 8.7 | 0.0063 | 2026-10-29 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affect | |
CVE-2025-40831 |
high | 7.1 | 0.0042 | 2026-10-29 | A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). Th | |
CVE-2025-40830 |
high | 8.4 | 0.0017 | 2026-10-29 | A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). Th | |
CVE-2025-40819 |
medium | 4.3 | 0.0027 | 2026-10-29 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 S | |
CVE-2025-40818 |
low | 3.3 | 0.0011 | 2026-10-29 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 S | |
CVE-2025-40807 |
medium | 5.3 | 0.0031 | 2026-10-29 | A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The aff | |
CVE-2025-40806 |
medium | 6.9 | 0.0047 | 2026-10-29 | A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The aff | |
CVE-2024-56840 |
high | 7.5 | 0.0068 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG |