Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2024-56839 |
high | 8.6 | 0.0068 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56838 |
high | 8.6 | 0.0042 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56837 |
high | 8.6 | 0.0055 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56836 |
high | 7.7 | 0.0046 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2024-56835 |
high | 8.7 | 0.0054 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGG | |
CVE-2025-65883 |
high | 8.4 | 0.0039 | 2026-10-29 | A vulnerability has been identified in Genexis Platinum P4410 router (Firmware P4410-V2–1. | |
CVE-2025-63499 |
medium | 6.1 | 0.0032 | 2026-10-29 | Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter. | |
CVE-2025-63402 |
medium | 5.5 | 0.0035 | 2026-10-29 | An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacke | |
CVE-2025-62686 |
medium | 6.2 | 0.0020 | 2026-10-29 | A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelpe | |
CVE-2025-55076 |
medium | 6.2 | 0.0022 | 2026-10-29 | A local privilege escalation vulnerability exists in the InstallationHelper service includ | |
CVE-2025-65877 |
high | 7.5 | 0.0032 | 2026-10-29 | Lvzhou CMS before commit c4ea0eb9cab5f6739b2c87e77d9ef304017ed615 (2025-09-22) is vulnerab | |
CVE-2025-65656 |
critical | 9.8 | 0.0050 | 2026-10-29 | dcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/Extend/Vers | |
CVE-2025-65358 |
critical | 9.8 | 0.0044 | 2026-10-29 | Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerabilit | |
CVE-2025-65840 |
high | 8.8 | 0.0019 | 2026-10-29 | PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery (CSRF) in the CkEditorAd | |
CVE-2025-63365 |
high | 7.1 | 0.0032 | 2026-10-29 | SoftSea EPUB File Reader 1.0.0.0 is vulnerable to Directory Traversal. The vulnerability r | |
CVE-2025-63528 |
medium | 5.4 | 0.0035 | 2026-10-29 | A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 | |
CVE-2025-51735 |
high | 7.5 | 0.0036 | 2026-10-29 | CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0. | |
CVE-2025-51734 |
medium | 5.4 | 0.0019 | 2026-10-29 | Cross-site scripting (XSS) vulnerability in HCL Technologies Ltd. Unica 12.0.0. | |
CVE-2024-5540 |
medium | 6.9 | 0.0034 | 2026-10-29 | The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in | |
CVE-2025-65675 |
medium | 5.4 | 0.0025 | 2026-10-29 | Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authentic | |
CVE-2025-46175 |
high | 7.5 | 0.0033 | 2026-10-29 | Ruoyi v4.8.0 is vulnerable to Incorrect Access Control. There is a missing checkUserDataSc | |
CVE-2025-66020 |
high | 7.5 | 0.0036 | 2026-10-29 | Valibot helps validate data using a schema. In versions from 0.31.0 to 1.1.0, the EMOJI_RE | |
CVE-2025-66056 |
medium | 4.3 | 0.0027 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2025-34336 |
medium | 6.9 | 0.0046 | 2026-10-29 | eGovFramework/egovframe-common-components versions up to and including 4.3.1 contain an un | |
CVE-2024-44662 |
medium | 6.5 | 0.0026 | 2026-10-29 | PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username para | |
CVE-2024-44653 |
medium | 6.5 | 0.0026 | 2026-10-29 | Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email paramete | |
CVE-2024-46336 |
medium | 6.1 | 0.0024 | 2026-10-29 | kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /cl | |
CVE-2024-46334 |
medium | 6.1 | 0.0024 | 2026-10-29 | kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the | |
CVE-2024-44652 |
medium | 6.5 | 0.0026 | 2026-10-29 | Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, usernam | |
CVE-2024-44648 |
medium | 6.5 | 0.0026 | 2026-10-29 | PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters | |
CVE-2024-44647 |
medium | 6.1 | 0.0024 | 2026-10-29 | PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark param | |
CVE-2025-40936 |
high | 7.3 | 0.0020 | 2026-10-29 | A vulnerability has been identified in PS/IGES Parasolid Translator Component (All version | |
CVE-2025-40834 |
medium | 6.8 | 0.0025 | 2026-10-29 | A vulnerability has been identified in Mendix RichText (All versions >= V4.0.0 < V4.6.1). | |
CVE-2024-55016 |
medium | 6.5 | 0.0026 | 2026-10-29 | PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id | |
CVE-2024-44639 |
medium | 6.5 | 0.0026 | 2026-10-29 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, s | |
CVE-2024-44636 |
medium | 6.5 | 0.0021 | 2026-10-29 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and | |
CVE-2024-44635 |
medium | 6.1 | 0.0024 | 2026-10-29 | PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via admi | |
CVE-2024-44632 |
medium | 6.5 | 0.0026 | 2026-10-29 | PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emaili | |
CVE-2022-4984 |
high | 8.7 | 0.0048 | 2026-10-29 | ZenTao Biz < 6.5, ZenTao Max < 3.0, ZenTao Open Source Edition < 16.5, and ZenTao Open Sou | |
CVE-2025-9316 |
medium | 6.9 | 0.3739 | 2026-10-29 | N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affec | |
CVE-2025-11700 |
high | 8.4 | 0.3168 | 2026-10-29 | N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection lea | |
CVE-2025-11367 |
critical | 10.0 | 0.0063 | 2026-10-29 | The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deseriali | |
CVE-2025-11366 |
critical | 9.4 | 0.0060 | 2026-10-29 | N-central < 2025.4 is vulnerable to authentication bypass via path traversal | |
CVE-2025-40827 |
high | 8.5 | 0.0017 | 2026-10-29 | A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Soli | |
CVE-2025-40760 |
medium | 6.8 | 0.0014 | 2026-10-29 | A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affe | |
CVE-2024-32011 |
high | 8.7 | 0.0042 | 2026-10-29 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update | |
CVE-2024-32010 |
high | 8.5 | 0.0013 | 2026-10-29 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update | |
CVE-2024-32009 |
high | 8.5 | 0.0012 | 2026-10-29 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update | |
CVE-2024-32008 |
high | 8.5 | 0.0013 | 2026-10-29 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update | |
CVE-2025-13032 |
high | 7.8 | 0.0025 | 2026-10-29 | Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows loca |