Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-13020 |
high | 8.8 | 0.0031 | 2026-10-29 | Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firef | |
CVE-2025-13019 |
high | 8.1 | 0.0027 | 2026-10-29 | Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in F | |
CVE-2025-13018 |
high | 8.1 | 0.0027 | 2026-10-29 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox | |
CVE-2025-13017 |
high | 8.1 | 0.0027 | 2026-10-29 | Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixe | |
CVE-2025-13016 |
high | 7.5 | 0.0041 | 2026-10-29 | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability | |
CVE-2025-13015 |
low | 3.4 | 0.0023 | 2026-10-29 | Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, | |
CVE-2025-13014 |
high | 8.8 | 0.0032 | 2026-10-29 | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 145, | |
CVE-2025-13013 |
medium | 6.1 | 0.0022 | 2026-10-29 | Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firef | |
CVE-2025-13012 |
high | 7.5 | 0.0024 | 2026-10-29 | Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Fir | |
CVE-2025-62066 |
high | 7.5 | 0.0039 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-62057 |
high | 7.1 | 0.0024 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62055 |
high | 8.1 | 0.0043 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-62053 |
high | 8.1 | 0.0043 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-62047 |
critical | 9.9 | 0.0045 | 2026-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons c | |
CVE-2025-62037 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a t | |
CVE-2025-62036 |
high | 7.1 | 0.0023 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62035 |
high | 8.8 | 0.0045 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo | |
CVE-2025-62034 |
high | 8.8 | 0.0035 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: f | |
CVE-2025-62033 |
medium | 6.5 | 0.0030 | 2026-10-29 | Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a t | |
CVE-2025-62032 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-62028 |
medium | 4.3 | 0.0024 | 2026-10-29 | Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Sali | |
CVE-2025-59556 |
high | 7.1 | 0.0023 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-58964 |
high | 7.1 | 0.0023 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2025-58629 |
high | 7.5 | 0.0038 | 2026-10-29 | Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploitin | |
CVE-2025-58627 |
critical | 9.8 | 0.0045 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous | |
CVE-2025-48090 |
high | 8.1 | 0.0044 | 2026-10-29 | Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme b | |
CVE-2025-48089 |
critical | 9.3 | 0.0036 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2025-39463 |
high | 7.5 | 0.0061 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2025-63334 |
critical | 9.8 | 0.0118 | 2026-10-29 | PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execu | |
CVE-2025-63418 |
medium | 6.1 | 0.0023 | 2026-10-29 | A DOM-based Cross-Site Scripting (XSS) vulnerability in the SelfBest platform 2023.3 allow | |
CVE-2025-63417 |
high | 7.2 | 0.0025 | 2026-10-29 | A Stored Cross-Site Scripting (XSS) vulnerability in the chat functionality of the SelfBes | |
CVE-2023-43000 |
high | 8.8 | 0.0404 | 2026-10-29 | KEV | Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to th |
CVE-2025-63248 |
high | 7.5 | 0.0032 | 2026-10-29 | DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, | |
CVE-2025-57244 |
medium | 5.4 | 0.0022 | 2026-10-29 | OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting (XSS) in the | |
CVE-2025-54335 |
medium | 6.5 | 0.0022 | 2026-10-29 | An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1 | |
CVE-2025-52910 |
critical | 9.8 | 0.0039 | 2026-10-29 | An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exyn | |
CVE-2025-60925 |
medium | 5.3 | 0.0033 | 2026-10-29 | codeshare v1.0.0 was discovered to contain an information leakage vulnerability. | |
CVE-2025-50363 |
medium | 5.4 | 0.0025 | 2026-10-29 | Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) i | |
CVE-2025-63448 |
medium | 6.1 | 0.0030 | 2026-10-29 | Water Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit_product. | |
CVE-2025-63561 |
high | 7.5 | 0.0040 | 2026-10-29 | Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is susceptible to a | |
CVE-2025-63465 |
high | 7.5 | 0.0041 | 2026-10-29 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the s | |
CVE-2025-63464 |
high | 7.5 | 0.0041 | 2026-10-29 | Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the s | |
CVE-2025-63462 |
high | 7.5 | 0.0041 | 2026-10-29 | Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the | |
CVE-2025-60749 |
high | 7.8 | 0.0016 | 2026-10-29 | DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used b | |
CVE-2025-61498 |
high | 7.5 | 0.0038 | 2026-10-29 | A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers | |
CVE-2025-61196 |
high | 8.8 | 0.0056 | 2026-10-29 | An issue in BusinessNext CRMnext v.10.8.3.0 allows a remote attacker to execute arbitrary | |
CVE-2025-60319 |
medium | 6.5 | 0.0026 | 2026-10-29 | PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authoriz | |
CVE-2025-60542 |
medium | 6.5 | 0.0027 | 2026-10-29 | SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.sav | |
CVE-2023-7324 |
high | 8.1 | 0.0031 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possib | |
CVE-2025-64212 |
medium | 5.4 | 0.0022 | 2026-10-29 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms- |