CVE-2025 list

CVE-2025 records published in November 2025

Page three of three: records 2,001 to 2,914 of the 2,914 published in November 2025, newest first. The first page carries the figures for November 2025.

CVE-2025 records published in November 2025, newest first: records 2,001 to 2,914 of 2,914
CVE Summary CVSS EPSS Published Signals
CVE-2025-47773Combodo iTop has XSS vulnerability in /pages/ajax.render.php8.8CNA v3.10.2%2025-11-10Fix
CVE-2025-47286Combodo iTop vulnerable to remote code execution in the backup creation functionality8.6CNA v4.00.5%2025-11-10Fix
CVE-2025-46430Dell Display and Peripheral Manager execution with unnecessary privileges7.3CNA v3.10.1%2025-11-10Fix
CVE-2025-43723Dell PowerScale OneFS weak cryptographic algorithm5.9CNA v3.10.2%2025-11-10Fix
CVE-2025-43079Local privilege escalation via qagent_uninstall.sh Qualys Cloud Agents6.3CNA v3.10.2%2025-11-10Fix
CVE-2025-41731Jumo: Insufficient entropy in PRNG may lead to root access7.4CNA v3.10.1%2025-11-10Fix
CVE-2025-41107Stored XSS in Smart School5.4NVD v3.10.2%2025-11-10
CVE-2025-41001Cross-site scripting (XSS) in SOPlanning5.4v3.10.2%2025-11-10
CVE-2025-33150IBM Cognos Analytics Certified Containers information disclosure5.3CNA v3.10.3%2025-11-10Fix
CVE-2025-12967AWS Advanced Python Wrapper: Privilege escalation in Aurora PostgreSQL instance8.6CNA v4.00.7%2025-11-10Fix
CVE-2025-12939SourceCodester Interview Management System addCandidate.php SQL injection9.8NVD v3.10.4%2025-11-10
CVE-2025-12938Projectworlds Online Admission System process_login.php SQL injection9.8NVD v3.10.5%2025-11-10
CVE-2025-12933SourceCodester Baby Care System updatewelcome.php SQL injection9.8NVD v3.10.4%2025-11-10
CVE-2025-12932SourceCodester Baby Care System admin.php SQL injection9.8NVD v3.10.4%2025-11-10
CVE-2025-12931SourceCodester Food Ordering System edit-orders.php SQL injection9.8NVD v3.10.4%2025-11-10
CVE-2025-12930SourceCodester Food Ordering System view-ticket.php SQL injection9.8NVD v3.10.4%2025-11-10
CVE-2025-12929SourceCodester Survey Application System LoginRegistration.php update_user SQL injection9.8NVD v3.10.5%2025-11-10
CVE-2025-12928code-projects Online Job Search Engine login.php SQL injection9.8NVD v3.10.5%2025-11-10
CVE-2025-12927DedeBIZ archives_add.php SQL injection7.2v3.10.3%2025-11-10
CVE-2025-12926SourceCodester Farm Management System review.php SQL injection8.8NVD v3.10.3%2025-11-10
CVE-2025-12925rymcu forest UserDicController.java deleteDic authorization9.8NVD v3.10.5%2025-11-10
CVE-2025-12924rymcu forest BankController.java GlobalResult authorization6.5NVD v3.10.4%2025-11-10
CVE-2025-12923liweiyi ChestnutCMS download resourceDownload path traversal4.9NVD v3.10.6%2025-11-10
CVE-2025-12922OpenClinica Community Edition CRF Data Import ImportCRFData path traversal8.8NVD v3.10.6%2025-11-10
CVE-2025-12921OpenClinica Community Edition CRF Data Import ImportCRFData XML injection8.8NVD v3.10.6%2025-11-10
CVE-2025-12868CyberTutor｜New Site Server use of client-side authentication9.3CNA v4.00.5%2025-11-10Fix
CVE-2025-12867Hundred Plus｜EIP Plus arbitrary File Uplaod8.6CNA v4.00.7%2025-11-10Fix
CVE-2025-12866Hundred Plus｜EIP Plus weak password recovery Mechanism9.3CNA v4.00.5%2025-11-10Fix
CVE-2025-12865E-Excellence｜U-Office Force SQL injection8.7CNA v4.00.4%2025-11-10Fix
CVE-2025-12864E-Excellence｜U-Office Force SQL injection8.7CNA v4.00.4%2025-11-10Fix
CVE-2025-12729Google Chrome Omnibox inappropriate implementation4.2CISA ADP v3.10.2%2025-11-10Fix
CVE-2025-12728Google Chrome Omnibox inappropriate implementation4.2CISA ADP v3.10.2%2025-11-10Fix
CVE-2025-12727Google Chrome V8 inappropriate implementation8.8CISA ADP v3.10.3%2025-11-10Fix
CVE-2025-12726Google Chrome Views inappropriate implementation7.5CISA ADP v3.10.2%2025-11-10Fix
CVE-2025-12725Google Chrome WebGPU out-of-bounds read8.8CISA ADP v3.10.3%2025-11-10Fix
CVE-2025-12613Cloudinary Node SDK is vulnerable to arbitrary argument injection8.8CNA v4.00.4%2025-11-10Fix
CVE-2025-12480Gladinet Triofox improper access control9.1CNA v3.195.4%2025-11-10KEVNucleiEmerging ThreatsFix
CVE-2025-12447Google Chrome Omnibox incorrect security UI4.2CISA ADP v3.10.2%2025-11-10Fix
CVE-2025-12446Google Chrome SplitView incorrect security UI4.2CISA ADP v3.10.2%2025-11-10Fix
CVE-2025-12445Google Chrome authentication bypass6.5CISA ADP v3.10.1%2025-11-10Fix
CVE-2025-12444Google Chrome Fullscreen UI incorrect security UI4.2CISA ADP v3.10.2%2025-11-10Fix
CVE-2025-12443Google Chrome WebXR out-of-bounds read4.3CISA ADP v3.10.2%2025-11-10Fix
CVE-2025-12441Google Chrome V8 out-of-bounds read4.3CISA ADP v3.10.2%2025-11-10Fix
CVE-2025-12440Google Chrome Autofill inappropriate implementation5.3CISA ADP v3.10.2%2025-11-10Fix
CVE-2025-12439Google Chrome App-Bound Encryption inappropriate implementation5.5CISA ADP v3.10.1%2025-11-10Fix
CVE-2025-12438Google ChromeOS use-after-free8.8CISA ADP v3.10.3%2025-11-10Fix
CVE-2025-12437Google Chrome PageInfo use-after-free7.5CISA ADP v3.10.2%2025-11-10Fix
CVE-2025-12436Google Chrome missing authentication5.9CISA ADP v3.10.2%2025-11-10Fix
CVE-2025-12435Google Chrome Omnibox incorrect security UI5.4CISA ADP v3.10.3%2025-11-10Fix
CVE-2025-12434Google Chrome race condition4.2CISA ADP v3.10.2%2025-11-10Fix
CVE-2025-12433Google Chrome V8 inappropriate implementation4.3CISA ADP v3.10.3%2025-11-10Fix
CVE-2025-12432Google Chrome race condition8.8CISA ADP v3.10.2%2025-11-10Fix
CVE-2025-12431Google Chrome extensions inappropriate implementation6.5CISA ADP v3.10.2%2025-11-10Fix
CVE-2025-12430Google Chrome Media object lifecycle issue7.5CISA ADP v3.10.3%2025-11-10Fix
CVE-2025-12429Google Chrome V8 inappropriate implementation8.8CISA ADP v3.10.3%2025-11-10Fix
CVE-2025-12428Google Chrome V8 type confusion8.8CISA ADP v3.16.9%2025-11-10Fix
CVE-2025-12409SQL injection in Looker Studio7.3CNA v4.00.3%2025-11-10Fix
CVE-2025-12405Unauthorized access through stored credentials in Looker Studio7.7CNA v4.00.3%2025-11-10Fix
CVE-2025-12397SQL injection in Looker Studio7.6CNA v4.00.3%2025-11-10Fix
CVE-2025-12155Command injection in Looker7.1CNA v4.01.3%2025-11-10Fix
CVE-2025-11892GitHub Enterprise Server issue search label filter cross-site scripting8.6CNA v4.00.7%2025-11-10Fix
CVE-2025-11578GitHub Enterprise Server pre-receive hooks privilege escalation7.5CNA v4.00.7%2025-11-10Fix
CVE-2025-40109Linux kernel crypto RNG interface vulnerability–0.2%2025-11-09Fix
CVE-2025-40108Linux kernel qcom-geni serial driver vulnerability–0.2%2025-11-09Fix
CVE-2025-12920qianfox FoxCMS Product.php edit cross-site scripting4.8v3.10.3%2025-11-09
CVE-2025-12919EverShop Order Order.resolvers.js resource injection6.3CNA v4.00.5%2025-11-09
CVE-2025-12918yungifez Skuul School Management System View Fee Invoice fee-invoices resource injection5.3v3.10.4%2025-11-09
CVE-2025-12917TOZED ZLT T10 Reboot proc_post denial of service5.3CNA v4.00.6%2025-11-09
CVE-2025-12916Sangfor Operation and Maintenance Security Management System Frontend portal_login command injection9.8NVD v3.15.1%2025-11-09
CVE-2025-64496open-webui Open WebUI affected by an External Model Server code injection7.3CNA v3.17.8%2025-11-08Fix
CVE-2025-64495open-webui Open WebUI vulnerable to Stored DOM XSS8.7CNA v3.10.5%2025-11-08Exploit codeFix
CVE-2025-64494charmbracelet soft-serve soft Serve does not sanitize ANSI escape sequences in user input4.6CNA v3.10.2%2025-11-08Fix
CVE-2025-64493SuiteCRM is vulnerable to authenticated blind SQL injection via GraphQL6.5CNA v3.10.3%2025-11-08Fix
CVE-2025-64492SuiteCRM is vulnerable to Authenticated Time Based blind SQL injection8.8CNA v3.10.3%2025-11-08Fix
CVE-2025-64491SuiteCRM is vulnerable to unauthenticated reflected XSS through its Login page6.1CNA v3.10.2%2025-11-08Fix
CVE-2025-64490SuiteCRM's Inconsistent RBAC Enforcement enables Access Control Bypass8.3CNA v3.10.3%2025-11-08Fix
CVE-2025-64489SuiteCRM: Privilege escalation via Improper Session Invalidation and Inactive User Bypass8.3CNA v3.10.3%2025-11-08Fix
CVE-2025-64488SuiteCRM: Authenticated SQL injection possible in Reschedule Call module8.6CNA v4.00.4%2025-11-08Fix
CVE-2025-64486calibre is vulnerable to arbitrary code execution when opening FB2 files9.3CNA v4.00.2%2025-11-08Fix
CVE-2025-64485CVAT: Mounted share file overwrite via crafted request5.3CNA v4.00.4%2025-11-08Fix
CVE-2025-1291570mai X200 Init script file inclusion7.1CNA v4.00.5%2025-11-08
CVE-2025-12914aaPanel BaoTa Backend database SQL injection5.1CNA v4.00.3%2025-11-08
CVE-2025-12913code-projects Responsive Hotel Site roomdel.php SQL injection9.8NVD v3.10.4%2025-11-08
CVE-2025-12911Google Chrome Permissions inappropriate implementation4.3CISA ADP v3.10.2%2025-11-08Fix
CVE-2025-12910Google Chrome Passkeys inappropriate implementation6.2CISA ADP v3.10.1%2025-11-08Fix
CVE-2025-12909Google Chrome Devtools insufficient policy enforcement5.3CISA ADP v3.10.2%2025-11-08Fix
CVE-2025-12908Google Chrome spoofing5.4CISA ADP v3.10.2%2025-11-08Fix
CVE-2025-12907Google Chrome arbitrary code execution8.8CISA ADP v3.10.3%2025-11-08Fix
CVE-2025-12906Google Chrome Permissions inappropriate implementation5.4CISA ADP v3.10.2%2025-11-08Fix
CVE-2025-12905Google Chrome Downloads inappropriate implementation5.4CISA ADP v3.10.2%2025-11-08Fix
CVE-2025-12837aThemes Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-11-08Fix
CVE-2025-12643Saphali LiqPay for donate WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-11-08Fix
CVE-2025-12621Flexible Refund and Return Order for WooCommerce WordPress plugin unauthorized access5.3CNA v3.10.3%2025-11-08Fix
CVE-2025-12583Simple Downloads List WordPress plugin unauthorized access6.4CNA v3.10.2%2025-11-08Fix
CVE-2025-12498metagauss EventPrime booking notes missing authorization4.3CNA v3.10.2%2025-11-08Fix
CVE-2025-12399Alex Reservations: Smart Restaurant Booking WordPress plugin arbitrary file upload7.2CNA v3.10.7%2025-11-08Exploit codeFix
CVE-2025-12353WPFunnels WordPress plugin unauthorized user Registration5.3CNA v3.10.2%2025-11-08Fix
CVE-2025-12193Mang Board WP WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2025-11-08Fix
CVE-2025-12177Download Manager WordPress plugin unauthenticated Cron Trigger due to Hard-coded Cron Key5.3CNA v3.10.2%2025-11-08Fix
CVE-2025-12167Contact Form 7 AWeber Extension WordPress plugin missing authorization authenticated Log reset4.3CNA v3.10.2%2025-11-08Fix
CVE-2025-12161Smart Auto Upload Images WordPress plugin authenticated (Contributor+) arbitrary file upload8.8CNA v3.10.6%2025-11-08Fix
CVE-2025-12125HTML Forms WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.2%2025-11-08Fix
CVE-2025-12112Insert Headers and Footers Code HT Script WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-11-08Fix
CVE-2025-12099Academy LMS WordPress LMS Plugin for Complete eLearning Solution PHP object injection7.2CNA v3.10.6%2025-11-08Fix
CVE-2025-12098Academy LMS Pro WordPress plugin unauthenticated sensitive information exposure5.3CNA v3.10.3%2025-11-08Fix
CVE-2025-12092CYAN Backup WordPress plugin authenticated (Admin+) arbitrary file deletion6.5CNA v3.10.8%2025-11-08Fix
CVE-2025-12064WP2Social Auto Publish WordPress plugin reflected cross-site scripting via PostMessage6.1CNA v3.10.2%2025-11-08Fix
CVE-2025-12042Course Booking System WordPress plugin missing authorization to unauthenticated Booking data export5.3CNA v3.10.3%2025-11-08Fix
CVE-2025-12000WPFunnels WordPress plugin authenticated (Administrator+) arbitrary file deletion via path traversal6.5CNA v3.10.8%2025-11-08Fix
CVE-2025-11980Quick Featured Images WordPress plugin authenticated (Editor+) SQL injection via delete_orphaned4.9CNA v3.10.3%2025-11-08Fix
CVE-2025-11972Tag, Category, and Taxonomy Manager AI Autotagger with OpenAI WordPress plugin SQL injection4.9CNA v3.10.3%2025-11-08Fix
CVE-2025-11967Mail Mint WordPress plugin authenticated (Admin+) arbitrary file upload7.2CNA v3.10.6%2025-11-08Fix
CVE-2025-11748Groups WordPress plugin insecure direct object reference to arbitrary Group Join4.3CNA v3.10.2%2025-11-08Fix
CVE-2025-11452Asgaros Forum WordPress plugin unauthenticated SQL injection7.5CNA v3.11.3%2025-11-08NucleiFix
CVE-2025-11448Gallery Plugin for WordPress WordPress plugin unauthorized access4.3CNA v3.10.2%2025-11-08Fix
CVE-2025-9334Better Find and Replace WordPress plugin authenticated (Subscriber+) limited code injection8.8CNA v3.10.5%2025-11-08Fix
CVE-2025-7663Ovatheme Events Manager WordPress plugin missing authorization6.5CNA v3.10.2%2025-11-08Fix
CVE-2025-64481Open redirect endpoint in Datasette2.7CNA v4.00.4%2025-11-07Fix
CVE-2025-64442HumHub is vulnerable to XSS through its Meta Search component7.1CNA v4.00.2%2025-11-07Fix
CVE-2025-64439LangGraph Checkpoint affected by RCE in json mode of JsonPlusSerializer7.4CNA v4.00.9%2025-11-07Fix
CVE-2025-64437KubeVirt Isolation Detection Flaw allows arbitrary File Permission Changes5.0CNA v3.10.2%2025-11-07Fix
CVE-2025-64436KubeVirt Excessive Role Permissions could Enable Unauthorized VMI Migrations Between Nodes6.9CNA v4.00.3%2025-11-07Fix
CVE-2025-64435KubeVirt VMI denial of service (DoS) using Pod Impersonation5.3CNA v3.10.4%2025-11-07Fix
CVE-2025-64434KubeVirt Improper TLS Certificate Management Handling allows API Identity spoofing4.7CNA v3.10.2%2025-11-07Fix
CVE-2025-64433KubeVirt arbitrary Container File Read6.5CNA v3.10.5%2025-11-07Fix
CVE-2025-64432KubeVirt affected by an authentication bypass in Kubernetes Aggregation Layer4.7CNA v3.10.1%2025-11-07Fix
CVE-2025-64431IDOR vulnerabilities in ZITADEL's Organization API allows Cross-Tenant Data Tempering8.7CNA v4.00.3%2025-11-07Fix
CVE-2025-64430parse-community parse-server parse Server vulnerable to server-side request forgery in file upload7.5CNA v3.10.6%2025-11-07Fix
CVE-2025-64347Apollo Router improperly Enforces Renamed Access Control Directives7.5CNA v3.10.3%2025-11-07Fix
CVE-2025-64346Github.com/jaredallard/archives has improper limitation of a pathname to a restricted directory6.0CNA v4.00.4%2025-11-07Fix
CVE-2025-64343(conda) Constructor: Excessive permissions during and after installation7.8CNA v3.10.1%2025-11-07Fix
CVE-2025-64339ClipBucket v5: Stored XSS vulnerability in Manage Playlists7.2CNA v4.00.3%2025-11-07Fix
CVE-2025-64338ClipBucket's Manage Photos feature is vulnerable to stored XSS via Collection Name5.1CNA v4.00.5%2025-11-07Fix
CVE-2025-64336ClipBucket v5's Manage Photo feature is vulnerable to stored XSS Attack via Photo Title7.2CNA v4.00.3%2025-11-07Fix
CVE-2025-64329containerd CRI server: Host memory exhaustion through Attach goroutine leak6.9CNA v4.00.2%2025-11-07Fix
CVE-2025-64328Sangoma FreePBX OS command injection8.6CNA v4.084.6%2025-11-07KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2025-64323kgateway is missing xDS authorization5.3CNA v3.10.2%2025-11-07Fix
CVE-2025-64187OctoPrint is vulnerable to XSS through action Command Notifications and Prompts4.6CNA v4.00.2%2025-11-07Fix
CVE-2025-64184Dosage vulnerable to directory traversal through crafted HTTP responses8.8CNA v3.10.5%2025-11-07Fix
CVE-2025-64180Manager-io/Manager: Complete Bypass of SSRF Protection via time-of-check time-of-use (TOCTOU)10.0CNA v3.10.3%2025-11-07Fix
CVE-2025-63785Onlook text editor feature of the DOM-based cross-site scripting6.1CISA ADP v3.10.3%2025-11-07
CVE-2025-63784Onlook OAuth callback handler in file open redirect6.5CISA ADP v3.10.4%2025-11-07
CVE-2025-63783Onlook improper input validation7.6CISA ADP v3.10.3%2025-11-07
CVE-2025-63718Pamzey Patients Waiting Area Queue Management System SourceCodester PQMS SQL injection6.5CISA ADP v3.10.2%2025-11-07
CVE-2025-63717Mayuri K Pet Grooming Management Software cross-site request forgery6.5CISA ADP v3.10.1%2025-11-07
CVE-2025-63716Rems Leads Manager Tool cross-site request forgery6.5CISA ADP v3.10.1%2025-11-07
CVE-2025-63714Remyandrade Modern User Account Generator SourceCodester User Account Generator cross-site scripting6.1CISA ADP v3.10.3%2025-11-07
CVE-2025-63713Remyandrade Matching Type Test SourceCodester "MatchMaster" cross-site scripting6.1CISA ADP v3.10.3%2025-11-07
CVE-2025-63691PIG4CLOUD pig improper authorization9.6CISA ADP v3.10.4%2025-11-07
CVE-2025-63690PIG4CLOUD pig unsafe reflection9.1CISA ADP v3.11.0%2025-11-07
CVE-2025-63689YCF1998 Money-pos SQL injection10.0CISA ADP v3.10.9%2025-11-07
CVE-2025-63687rymcu forest incorrect authorization6.5CISA ADP v3.10.3%2025-11-07
CVE-2025-63686GuoMinJim PersonManage arbitrary file read6.5CISA ADP v3.10.4%2025-11-07
CVE-2025-63640Rems Medicine Reminder App cross-site scripting6.1CISA ADP v3.10.2%2025-11-07
CVE-2025-63639Remyandrade FAQ Bot With AI Assistant cross-site scripting6.1CISA ADP v3.10.2%2025-11-07
CVE-2025-63638Remyandrade Ai-powered To-do List App cross-site scripting6.1CISA ADP v3.10.2%2025-11-07
CVE-2025-63544Nooncarlett Techstore cross-site scripting6.1CISA ADP v3.10.2%2025-11-07
CVE-2025-63543Nooncarlett Techstore cross-site scripting6.1CISA ADP v3.10.2%2025-11-07
CVE-2025-63420CrushFTP cross-site scripting4.1CISA ADP v3.10.3%2025-11-07Exploit code
CVE-2025-61261ckeditor5 A reflected cross-site scripting5.4CISA ADP v3.10.3%2025-11-07Fix
CVE-2025-60574Webair Tquadra Cms path traversal7.5CISA ADP v3.10.5%2025-11-07
CVE-2025-58469QNAP QuLog Center cross-site request forgery1.2CNA v4.00.2%2025-11-07Fix
CVE-2025-58465QNAP Download Station cross-site scripting2.2CNA v4.00.2%2025-11-07Fix
CVE-2025-58464QNAP QuMagie path traversal7.8CNA v4.00.5%2025-11-07Fix
CVE-2025-58463QNAP Download Station path traversal2.3CNA v4.00.5%2025-11-07Fix
CVE-2025-57712QNAP Qsync Central path traversal4.0CNA v4.00.4%2025-11-07Fix
CVE-2025-57706QNAP File Station cross-site scripting2.2CNA v4.00.2%2025-11-07Fix
CVE-2025-57698AstrBot contains a directory traversal7.5CISA ADP v3.10.8%2025-11-07
CVE-2025-57697AstrBot has an arbitrary file read vulnerability in function _encode_image_bs646.5CISA ADP v3.10.3%2025-11-07
CVE-2025-54168QNAP QuLog Center cross-site scripting2.2CNA v4.00.2%2025-11-07Fix
CVE-2025-54167QNAP Notification Center cross-site scripting7.2CNA v4.00.5%2025-11-07Fix
CVE-2025-53413QNAP File Station 5 resource exhaustion4.9CNA v4.00.5%2025-11-07Fix
CVE-2025-53412QNAP File Station 5 null pointer dereference0.6CNA v4.00.5%2025-11-07Fix
CVE-2025-53411QNAP File Station 5 resource exhaustion1.2CNA v4.00.5%2025-11-07Fix
CVE-2025-53410QNAP File Station 5 resource exhaustion4.9CNA v4.00.5%2025-11-07Fix
CVE-2025-53409QNAP File Station 5 resource exhaustion4.9CNA v4.00.5%2025-11-07Fix
CVE-2025-53408QNAP File Station 5 null pointer dereference1.3CNA v4.00.3%2025-11-07Fix
CVE-2025-52865QNAP File Station null pointer dereference1.3CNA v4.00.3%2025-11-07Fix
CVE-2025-52662Nuxt DevTools vulnerable to cross-site scripting (XSS)6.1NVD v3.10.3%2025-11-07Fix
CVE-2025-52425QNAP QuMagie SQL injection9.5CNA v4.00.4%2025-11-07Fix
CVE-2025-48985Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files5.3NVD v3.10.3%2025-11-07Fix
CVE-2025-47207QNAP File Station 5 null pointer dereference5.3CNA v4.00.3%2025-11-07Fix
CVE-2025-46413Buffalo WSR-1800AX4 BUFFALO Wi-Fi router ' weak password hash5.3CNA v4.00.1%2025-11-07
CVE-2025-37736Elastic Cloud Enterprise improper authorization8.8CNA v3.10.4%2025-11-07Fix
CVE-2025-36186IBM Db2 privilege escalation7.4CNA v3.10.1%2025-11-07Fix
CVE-2025-36185IBM Db2 denial of service6.2CNA v3.10.1%2025-11-07Fix
CVE-2025-36136IBM denial of service5.1CNA v3.10.1%2025-11-07Fix
CVE-2025-36135IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to cross-site scripting5.4CNA v3.10.2%2025-11-07Fix
CVE-2025-36131IBM Db2 information disclosure4.6CNA v3.10.2%2025-11-07Fix
CVE-2025-36008IBM Db2 denial of service6.5CNA v3.10.3%2025-11-07Fix
CVE-2025-36006IBM Db2 denial of service6.5CNA v3.10.3%2025-11-07Fix
CVE-2025-34299Monsta FTP unauthenticated arbitrary file upload9.8NVD v3.172.7%2025-11-07Reported exploitedNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2025-33012IBM Db2 improper account lockout6.3CNA v3.10.2%2025-11-07Fix
CVE-2025-12902Solidigm D5-P5316 improper initialization4.4CNA v3.10.1%2025-11-07
CVE-2025-12896Solidigm D5-P5316 missing brute-force protection4.4CNA v3.10.1%2025-11-07
CVE-2025-12890zephyrproject-rtos Zephyr bluetooth: Peripheral: Invalid handling of malformed connection request6.5CNA v3.10.2%2025-11-07
CVE-2025-12875mruby array.c ary_fill_exec out-of-bounds write7.8v3.10.2%2025-11-07
CVE-2025-12873Campcodes School File Management update_user.php SQL injection9.8NVD v3.10.4%2025-11-07
CVE-2025-12862Projectworlds Online Notes Sharing Platform userprofile.php unrestricted upload9.8NVD v3.10.4%2025-11-07
CVE-2025-12861DedeBIZ spec_add.php SQL injection7.2v3.10.3%2025-11-07
CVE-2025-12860DedeBIZ freelist_main.php SQL injection7.2v3.10.3%2025-11-07
CVE-2025-12859DedeBIZ templets_one_edit.php SQL injection7.2v3.10.3%2025-11-07
CVE-2025-12857code-projects Responsive Hotel Site roombook.php SQL injection9.8NVD v3.10.4%2025-11-07
CVE-2025-12856code-projects Responsive Hotel Site reservation.php SQL injection9.8NVD v3.10.4%2025-11-07
CVE-2025-12855code-projects Responsive Hotel Site newsletterdel.php SQL injection9.8NVD v3.10.4%2025-11-07
CVE-2025-12854newbee-mall-plus seckillExecution executeSeckill authorization6.3CNA v4.00.5%2025-11-07
CVE-2025-12853SourceCodester Best House Rental Management System admin_class.php delete_house SQL injection9.8NVD v3.10.4%2025-11-07
CVE-2025-12829Amazon Ion-C An uninitialized memory use6.9CNA v4.00.2%2025-11-07Fix
CVE-2025-12789Red Hat Single Sign-On 7 Rhsso: Open redirect6.1CNA v3.10.2%2025-11-07
CVE-2025-12527Page and Post Notes WordPress plugin missing authorization authenticated Note Update/Deletion4.3CNA v3.10.3%2025-11-07Fix
CVE-2025-12520WP Airbnb Review Slider WordPress plugin authenticated (Admin+) stored cross-site scripting4.0CNA v3.10.2%2025-11-07Fix
CVE-2025-12418Potential denial of service in Supported Versions of Revenera InstallShield5.6CNA v4.00.2%2025-11-07Fix
CVE-2025-12352Gravity Forms WordPress plugin unauthenticated arbitrary file upload via copy_post_image9.8CNA v3.11.1%2025-11-07Fix
CVE-2025-11546NEC CLUSTERPRO X OS command injection9.3CNA v4.00.4%2025-11-07
CVE-2025-10968SQLi in GG Soft's PaperWork8.8CNA v3.10.3%2025-11-07Fix
CVE-2025-10966curl missing SFTP host verification with wolfSSH4.3CISA ADP v3.10.4%2025-11-07Fix
CVE-2025-10870SQL injection in DIAL's CentrosNet9.3CNA v4.00.3%2025-11-07
CVE-2025-10230Red Hat Enterprise Linux 10 samba: Command injection in wins server hook script10.0CNA v3.139.8%2025-11-07Exploit codeFix
CVE-2025-9458Autodesk Shared Components PRT File Parsing memory corruption7.8CNA v3.10.2%2025-11-07Fix
CVE-2025-7719Smallworld SWMFS arbitrary File Ops5.3CNA v4.00.4%2025-11-07Fix
CVE-2025-7700Ffmpeg: Null pointer dereference in ffmpeg als decoder (libavcodec/alsdec.c)5.3CNA v3.10.4%2025-11-07Fix
CVE-2025-5483LC Wizard - missing authorization to unauthenticated privilege escalation8.1CNA v3.10.3%2025-11-07Fix
CVE-2025-4522IDonate - insecure direct object reference to Authenticated arbitrary User Deletion6.5CNA v3.10.3%2025-11-07Fix
CVE-2025-4519IDonate - missing authorization to Authenticated account takeover/privilege escalation8.8CNA v3.10.4%2025-11-07Fix
CVE-2025-3222Smallworld SWMFS improper authentication9.3CNA v4.00.5%2025-11-07
CVE-2025-2534IBM Db2 denial of service5.3CNA v3.10.3%2025-11-07Fix
CVE-2025-64327ThinkDashboard: Blind server-side request forgery (SSRF) vulnerability in /API/ping endpoint5.3CNA v3.10.3%2025-11-06Fix
CVE-2025-64326Weblate leaks the IP of project members inviting users to assume reviewer roles in Audit log2.6CNA v3.10.2%2025-11-06Fix
CVE-2025-64302Advantech DeviceOn/iEdge cross-site scripting5.4v3.10.2%2025-11-06
CVE-2025-64287Alloggio - Hotel Booking WordPress theme local file inclusion8.1CNA v3.10.4%2025-11-06
CVE-2025-64232Import from YML WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-64224Grand Conference Theme Custom Post Type WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-64198Easy Social Share Buttons WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-64196Booster for WooCommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-64179lakeFS: Unauthenticated access to API usage metrics5.3CNA v3.10.3%2025-11-06Fix
CVE-2025-64178Jellysweep uses uncontrolled data in image cache API endpoint8.9CNA v4.00.3%2025-11-06Fix
CVE-2025-64177ThinkDashboard: Stored XSS in Dashboard via Malicious Bookmark5.4CNA v3.10.2%2025-11-06Fix
CVE-2025-64176ThinkDashboard: Arbitrary file upload vulnerability in the Backup Import feature5.3CNA v3.10.3%2025-11-06Fix
CVE-2025-64174OpenMage is vulnerable to XSS in Admin Notifications4.6CNA v4.00.2%2025-11-06Fix
CVE-2025-64173Apollo Router Core: Access Control Bypass on Polymorphic Types7.5CNA v3.10.3%2025-11-06Fix
CVE-2025-641713scale-sre MARIN3R DiscoveryServiceCertificate controller missing authorization8.7CNA v4.00.2%2025-11-06Fix
CVE-2025-64164DataEase is vulnerable to Oracle JNDI injection8.9CNA v4.00.6%2025-11-06Fix
CVE-2025-64163DataEase's DB2 is vulnerable to SSRF8.9CNA v4.01.1%2025-11-06Fix
CVE-2025-64114ClipBucket v5: SQL injection possible through ClipBucket Custom fields plugin6.5CNA v3.10.4%2025-11-06Fix
CVE-2025-63589CMSimple_XH A reflected cross-site scripting7.1CISA ADP v3.10.3%2025-11-06
CVE-2025-63588CMSimple_XH query handling of CMSimpleXH reflected cross-site scripting7.1CISA ADP v3.10.3%2025-11-06
CVE-2025-63560Kiloview E3 denial of service7.5CISA ADP v3.10.5%2025-11-06
CVE-2025-63551Metinfo XML external entity injection7.5CISA ADP v3.10.5%2025-11-06
CVE-2025-63307Alexusmai Laravel File Manager cross-site scripting8.1CISA ADP v3.10.4%2025-11-06Exploit code
CVE-2025-62950Contest Gallery WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-11-06Exploit codeFix
CVE-2025-62914Effect Maker WordPress plugin broken access control6.5CNA v3.10.2%2025-11-06
CVE-2025-62630Advantech DeviceOn/iEdge path traversal9.8NVD v3.10.7%2025-11-06
CVE-2025-62596youki AppArmor path validation race condition7.3CNA v4.00.2%2025-11-06Fix
CVE-2025-62161youki container escape via masked path abuse due to mount race conditions7.3CNA v4.00.2%2025-11-06Fix
CVE-2025-62076Simple Payment WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-62075Simple Payment WordPress plugin local file inclusion7.5CNA v3.10.4%2025-11-06Fix
CVE-2025-62074WPMobile.App WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-62067Savory WordPress theme local file inclusion8.1CNA v3.10.4%2025-11-06Fix
CVE-2025-62066Revolution WordPress theme local file inclusion7.5CNA v3.10.4%2025-11-06Fix
CVE-2025-62065RTMKit WordPress plugin arbitrary file upload9.9CNA v3.10.3%2025-11-06Fix
CVE-2025-62064Search and Go WordPress theme broken authentication9.8CNA v3.10.4%2025-11-06Fix
CVE-2025-62059SureRank WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-62057favethemes Houzez Theme Functionality plugin cross-site scripting7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-62055Academist WordPress theme local file inclusion8.1CNA v3.10.4%2025-11-06Fix
CVE-2025-62053Houzez WordPress theme local file inclusion8.1CNA v3.10.4%2025-11-06Fix
CVE-2025-62051UDesign Core WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-11-06Fix
CVE-2025-62049Cost Calculator Builder WordPress plugin broken access control6.5CNA v3.10.3%2025-11-06Fix
CVE-2025-62047Case Addons WordPress plugin arbitrary file upload9.9CNA v3.10.4%2025-11-06Fix
CVE-2025-62046TheGem Demo Import (for WPBakery) WordPress plugin arbitrary content deletion vulnerability6.5CNA v3.10.4%2025-11-06Fix
CVE-2025-62045TheGem Theme Elements (for WPBakery) WordPress plugin local file inclusion8.1CNA v3.10.5%2025-11-06Fix
CVE-2025-62044TheGem Theme Elements (for WPBakery) WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-11-06Fix
CVE-2025-62041TheGem (Elementor) WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2025-11-06Fix
CVE-2025-62040YOP Poll WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-11-06Fix
CVE-2025-62039AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin sensitive data exposure7.5CNA v3.11.3%2025-11-06NucleiFix
CVE-2025-62038MeetingHub WordPress plugin sensitive data exposure6.5CNA v3.10.3%2025-11-06Fix
CVE-2025-62037Togo WordPress theme broken access control6.5CNA v3.10.3%2025-11-06Fix
CVE-2025-62036Togo WordPress theme cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-62035Togo WordPress theme PHP object injection8.8CNA v3.10.4%2025-11-06Fix
CVE-2025-62034Togo WordPress theme privilege escalation8.8CNA v3.10.4%2025-11-06Fix
CVE-2025-62033Togo WordPress theme broken access control6.5CNA v3.10.3%2025-11-06Fix
CVE-2025-62032tagDiv Cloud Library WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-11-06Fix
CVE-2025-62031tagDiv Composer WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-62030tagDiv Composer WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-11-06Fix
CVE-2025-62028Salient WordPress theme broken access control4.3CNA v3.10.2%2025-11-06Fix
CVE-2025-62018Kallyas WordPress theme broken access control5.3CNA v3.10.3%2025-11-06Fix
CVE-2025-62017Kallyas WordPress theme broken access control5.4CNA v3.10.3%2025-11-06Fix
CVE-2025-62016Kallyas WordPress theme arbitrary file upload9.9CNA v3.10.4%2025-11-06Fix
CVE-2025-62014ITok WordPress theme local file inclusion8.1CNA v3.10.5%2025-11-06Fix
CVE-2025-62012TheGem (Elementor) WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-11-06Fix
CVE-2025-62011TheGem WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-11-06Fix
CVE-2025-62010Famita WordPress theme local file inclusion8.1CNA v3.10.5%2025-11-06Fix
CVE-2025-61994GROWI cross-site scripting4.8CNA v4.00.2%2025-11-06
CVE-2025-60541Linshenkx Prompt Optimizer /api/proxy/ component server-side request forgery7.3CISA ADP v3.10.2%2025-11-06
CVE-2025-60248WPC Product Options for WooCommerce WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06Fix
CVE-2025-60247Bux Woocommerce WordPress plugin broken access control6.5CNA v3.10.3%2025-11-06
CVE-2025-60245WP User Manager WordPress plugin PHP object injection9.8CNA v3.10.5%2025-11-06Fix
CVE-2025-60244TableOn WordPress plugin content injection7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-60243Selling Commander for WooCommerce WordPress plugin privilege escalation9.8CNA v3.10.4%2025-11-06
CVE-2025-60242Download Counter WordPress plugin arbitrary file download7.5CNA v3.10.5%2025-11-06
CVE-2025-60241Premmerce WordPress plugin local file inclusion7.5CNA v3.10.4%2025-11-06Fix
CVE-2025-60240AnyComment WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06
CVE-2025-60239CoSchool LMS WordPress plugin SQL injection8.5CNA v3.10.3%2025-11-06
CVE-2025-60235Plugify Support Ticket System for WooCommerce (Premium) unrestricted file upload10.0CNA v3.10.5%2025-11-06
CVE-2025-60207Custom User Registration Fields for WooCommerce WordPress plugin arbitrary file upload10.0CNA v3.10.5%2025-11-06
CVE-2025-60204WooCommerce Store Toolkit WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06Fix
CVE-2025-60203Store Exporter WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06Fix
CVE-2025-60202Favorites WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06Fix
CVE-2025-60201WP Customer Area WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06Fix
CVE-2025-60200LearnPress Export Import WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06Fix
CVE-2025-60199InHype - Blog and Magazine WordPress theme local file inclusion8.1CNA v3.10.4%2025-11-06
CVE-2025-60198Saxon - Viral Content Blog and Magazine Marketing WordPress theme local file inclusion8.1CNA v3.10.4%2025-11-06
CVE-2025-60197Simple Contact Forms WordPress plugin local file inclusion8.1CNA v3.10.4%2025-11-06
CVE-2025-60196Clearblue® Ovulation Calculator WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06
CVE-2025-60195Atarim WordPress plugin privilege escalation9.8CNA v3.10.4%2025-11-06Fix
CVE-2025-60194Premmerce Product Search for WooCommerce WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06Fix
CVE-2025-60193Premmerce User Roles WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06Fix
CVE-2025-60192Premmerce Wholesale Pricing for WooCommerce WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06Fix
CVE-2025-60191Premmerce Wishlist for WooCommerce WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06Fix
CVE-2025-60190Immocaster WordPress plugin local file inclusion8.1CNA v3.10.5%2025-11-06
CVE-2025-60189PoloPag Pix Automático para Woocommerce WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06Fix
CVE-2025-60188Atarim WordPress plugin sensitive data exposure7.5CNA v3.13.7%2025-11-06NucleiExploit codeFix
CVE-2025-60187Atarim WordPress plugin arbitrary file upload4.8CNA v3.10.2%2025-11-06Fix
CVE-2025-60074Lazy Load Optimizer WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06
CVE-2025-60073Responsive Sidebar WordPress plugin local file inclusion7.5CNA v3.10.5%2025-11-06
CVE-2025-59556GoStore WordPress theme cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-59392Elspec-ltd G5DFR authentication bypass6.8CISA ADP v3.10.2%2025-11-06Fix
CVE-2025-59171Advantech DeviceOn/iEdge path traversal9.8NVD v3.10.8%2025-11-06
CVE-2025-58998s2Member WordPress plugin PHP object injection9.8CNA v3.10.5%2025-11-06Fix
CVE-2025-58996Advanced Settings WordPress plugin arbitrary file upload9.1CNA v3.10.5%2025-11-06Fix
CVE-2025-58995Leblix WordPress theme local file inclusion8.1CNA v3.10.5%2025-11-06Fix
CVE-2025-58994Greenify WordPress theme local file inclusion8.1CNA v3.10.5%2025-11-06Fix
CVE-2025-58986Jock On Air Now (JOAN) WordPress plugin broken access control6.5CNA v3.10.3%2025-11-06Fix
CVE-2025-58972Barcode Scanner with Inventory and Order Manager WordPress plugin path traversal7.2CNA v3.10.5%2025-11-06Fix
CVE-2025-58964Enzy WordPress theme cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-58638Institutions Directory WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-58636WP Gravity Forms Keap/Infusionsoft WordPress plugin deserialization of untrusted data9.8CNA v3.10.5%2025-11-06Fix
CVE-2025-58629Miraculous WordPress theme arbitrary content deletion vulnerability7.5CNA v3.10.4%2025-11-06Fix
CVE-2025-58627Miraculous Core WordPress plugin insecure direct object references (IDOR)9.8CNA v3.10.4%2025-11-06Fix
CVE-2025-58619Falang multilanguage WordPress plugin PHP object injection8.8CNA v3.10.4%2025-11-06Fix
CVE-2025-58595All In One Login WordPress plugin bypass vulnerability vulnerability9.1CISA ADP v3.10.3%2025-11-06Fix
CVE-2025-58592TranslatePress WordPress plugin deserialization of untrusted data8.1CNA v3.10.4%2025-11-06Fix
CVE-2025-58423Advantech DeviceOn/iEdge path traversal8.7CNA v4.00.6%2025-11-06
CVE-2025-58243imEvent WordPress theme broken access control5.3CNA v3.10.3%2025-11-06
CVE-2025-58207Ai Image Alt Text Generator for WP WordPress plugin broken access control8.2CNA v3.10.3%2025-11-06Fix
CVE-2025-54737Jobmonster WordPress theme cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-54722WooTour WordPress theme cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-54721Resca WordPress theme cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-54719Yogi - Health Beauty and Yoga WordPress theme deserialization of untrusted data8.8CNA v3.10.4%2025-11-06Fix
CVE-2025-54718Yogi - Health Beauty and Yoga WordPress theme cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-54711Info Cards WordPress plugin broken access control7.1CNA v3.10.3%2025-11-06Fix
CVE-2025-53586WeMusic WordPress theme PHP object injection8.8CNA v3.10.4%2025-11-06Fix
CVE-2025-53585WeMusic WordPress theme cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-53574Doliconnect WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-53573Epic Review WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-53349Kalium WordPress theme cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-53324Gutenify WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-53316WP GDPR Cookie Consent WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-11-06
CVE-2025-53286Dropify WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06
CVE-2025-53283borisolhor Drop Uploader for CF7 unrestricted file upload10.0CNA v3.10.4%2025-11-06
CVE-2025-53252Zegen WordPress theme local file inclusion7.5CNA v3.10.5%2025-11-06
CVE-2025-53246Backup and Move WordPress plugin broken access control6.5CNA v3.10.3%2025-11-06
CVE-2025-53245WP Logo Changer WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06
CVE-2025-53242Seil WordPress theme deserialization of untrusted data9.8CNA v3.10.5%2025-11-06
CVE-2025-53239User Registration Aide WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06
CVE-2025-53214Sertifier Certificate and Badge Maker WordPress plugin broken access control6.5CNA v3.10.2%2025-11-06
CVE-2025-52881opencontainers runc symlink following7.3CNA v4.00.6%2025-11-06Fix
CVE-2025-52773HieCOR Payment Gateway WordPress plugin SQL injection9.3CNA v3.10.3%2025-11-06Fix
CVE-2025-52764flexoslider WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06
CVE-2025-52565opencontainers runc container escape due to /dev/console mount and related races8.4CNA v4.00.6%2025-11-06Fix
CVE-2025-49909Penci Bookmark and Follow WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-49905Range Slider Addon for Gravity Forms WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-49904Booking and Rental Manager WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-49900Advanced scrollbar WordPress plugin privilege escalation8.8CNA v3.10.4%2025-11-06Fix
CVE-2025-49398Easy Appointments WordPress plugin content injection6.5CNA v3.10.2%2025-11-06Fix
CVE-2025-49394Image Gallery block WordPress plugin bPlugins missing authorization7.1CNA v3.10.3%2025-11-06Fix
CVE-2025-49393Sign-up Sheets WordPress plugin PHP object injection9.8CNA v3.10.5%2025-11-06Fix
CVE-2025-49390Cookie Notice and Consent WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-11-06Fix
CVE-2025-49386Preserve Code Formatting WordPress plugin PHP object injection8.8CNA v3.10.4%2025-11-06Fix
CVE-2025-49372HAPPY WordPress plugin remote code execution (RCE)10.0CNA v3.10.4%2025-11-06Fix
CVE-2025-48330WordPress Real Time Validation for Gravity Forms plugin local file inclusion7.5CNA v3.10.5%2025-11-06
CVE-2025-48290Kinsley WordPress theme local file inclusion8.1CNA v3.10.5%2025-11-06Fix
CVE-2025-48090Blanka - One Page WordPress theme local file inclusion8.1CNA v3.10.4%2025-11-06Fix
CVE-2025-48089Education WordPress Theme HiStudy SQL injection9.3CNA v3.10.3%2025-11-06Fix
CVE-2025-48086Ajax Search Lite WordPress plugin PHP object injection5.5CNA v3.10.2%2025-11-06Fix
CVE-2025-48085Simple Stripe WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-11-06
CVE-2025-48083wpNamedUsers WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-11-06
CVE-2025-48078Slick Google Map WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-11-06Fix
CVE-2025-48077Block Country WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-11-06
CVE-2025-47588Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin arbitrary code execution9.1CNA v3.10.4%2025-11-06Fix
CVE-2025-39468Modal Survey WordPress plugin local file inclusion8.1CNA v3.10.6%2025-11-06
CVE-2025-39467Wanderland WordPress theme local file inclusion8.1CNA v3.10.6%2025-11-06Fix
CVE-2025-39466Mikado-Themes Dør local file inclusion8.1CNA v3.10.6%2025-11-06Fix
CVE-2025-39465Advanced Google Maps WordPress plugin broken access control4.3CNA v3.10.2%2025-11-06Fix
CVE-2025-39463Dessau WordPress theme local file inclusion7.5CNA v3.10.6%2025-11-06Fix
CVE-2025-37735Elastic Kibana improper preservation of permissions7.0CNA v3.10.1%2025-11-06
CVE-2025-36054Cross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server6.1CNA v3.10.2%2025-11-06Fix
CVE-2025-34247Advantech WebAccess/VPN SQL injection via NetworksController.addNetworkAction6.5NVD v3.10.3%2025-11-06Fix
CVE-2025-34246Advantech WebAccess/VPN SQL injection via AjaxPrevalidationController.ajaxAction6.5NVD v3.10.3%2025-11-06Fix
CVE-2025-34245Advantech WebAccess/VPN SQL injection via AjaxStandaloneVpnClientsController.ajaxAction6.5NVD v3.10.3%2025-11-06Fix
CVE-2025-34244Advantech WebAccess/VPN SQL injection via AjaxFwRulesController.ajaxDeviceFwRulesAction6.5NVD v3.10.3%2025-11-06Fix
CVE-2025-34243Advantech WebAccess/VPN SQL injection via AjaxFwRulesController.ajaxNetworkFwRulesAction6.5NVD v3.10.3%2025-11-06Fix
CVE-2025-34242Advantech WebAccess/VPN SQL injection via AjaxNetworkController.ajaxAction6.5NVD v3.10.3%2025-11-06Fix
CVE-2025-34241Advantech WebAccess/VPN SQL injection via AjaxDeviceController.ajaxDeviceAction6.5NVD v3.10.3%2025-11-06Fix
CVE-2025-34240Advantech WebAccess/VPN SQL injection via AppManagementController.appUpgradeAction6.5NVD v3.10.3%2025-11-06Fix
CVE-2025-34239Advantech WebAccess/VPN command injection in AppManagementController.appUpgradeAction7.2NVD v3.11.7%2025-11-06Fix
CVE-2025-34238Advantech WebAccess/VPN path traversal6.5NVD v3.10.4%2025-11-06Fix
CVE-2025-34237Advantech WebAccess/VPN stored XSS via StandaloneVpnClientsController.addStandaloneVpnClientAction5.4NVD v3.10.2%2025-11-06Fix
CVE-2025-34236Advantech WebAccess/VPN stored XSS via NetworksController.addNetworkAction5.4NVD v3.10.2%2025-11-06Fix
CVE-2025-33110IBM OpenPages Vulnerable to HTML injection5.4CNA v3.10.2%2025-11-06Fix
CVE-2025-32222WordPress Widget Logic plugin remote code execution (RCE)9.9CNA v3.10.5%2025-11-06Fix
CVE-2025-31133runc container escape via masked path abuse due to mount race conditions7.3CNA v4.00.8%2025-11-06Exploit codeFix
CVE-2025-31029replyMail WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.2%2025-11-06
CVE-2025-28953smart SEO WordPress theme SQL injection8.5CNA v3.10.3%2025-11-06
CVE-2025-27919AnyDesk improper access control8.2v3.10.3%2025-11-06Fix
CVE-2025-27918AnyDesk integer overflow9.8v3.10.5%2025-11-06Fix
CVE-2025-27917AnyDesk null pointer dereference7.5v3.10.5%2025-11-06Fix
CVE-2025-27916AnyDesk authentication bypass by spoofing7.5v3.10.3%2025-11-06Fix
CVE-2025-22397Integrated Dell Remote Access Controller 9 14G path traversal6.7CNA v3.10.4%2025-11-06Fix
CVE-2025-22288Smush Image Compression and Optimization WordPress plugin directory traversal4.1CNA v3.10.3%2025-11-06Fix
CVE-2025-12815AWS Research and Engineering Studio Virtual Desktop preview page vulnerability5.3CNA v4.00.3%2025-11-06Fix
CVE-2025-12808Devolutions Server improper access control6.5CISA ADP v3.10.4%2025-11-06Fix
CVE-2025-12790Nicholas J Humfrey ruby-mqtt rubygem-mqtt: Rubygem-mqtt hostname validation7.4CNA v3.10.4%2025-11-06Fix
CVE-2025-12636Ubia Ubox API credential storage insufficiently protected credentials7.1CNA v4.00.3%2025-11-06Fix
CVE-2025-12563Blog2Social: Social Media Auto Post and Scheduler WordPress plugin file upload4.3CNA v3.10.2%2025-11-06Fix
CVE-2025-12560Blog2Social: Social Media Auto Post and Scheduler WordPress plugin blind server-side request forgery4.3CNA v3.10.2%2025-11-06Fix
CVE-2025-12556IDIS ICM Viewer argument injection8.7CNA v4.00.5%2025-11-06Fix
CVE-2025-12490Netgate pfSense CE Suricata path traversal remote code execution8.8CNA v3.017.0%2025-11-06
CVE-2025-12489evernote-mcp-server openBrowser command injection privilege escalation7.8CNA v3.01.4%2025-11-06
CVE-2025-12488oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs remote code execution9.8CNA v3.00.8%2025-11-06
CVE-2025-12487oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs remote code execution9.8CNA v3.00.8%2025-11-06
CVE-2025-12486Heimdall Data Database Proxy cross-site scripting remote code execution8.8CNA v3.00.5%2025-11-06
CVE-2025-12485Devolutions Server improper privilege management8.8CISA ADP v3.10.6%2025-11-06Fix
CVE-2025-12471Hubbub Lite WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-11-06Fix
CVE-2025-12360Better Find and Replace WordPress plugin missing authorization4.3CNA v3.10.2%2025-11-06Fix
CVE-2025-12036Google Chrome V8 out-of-bounds access8.8CISA ADP v3.13.7%2025-11-06Fix
CVE-2025-11956Proliz Software OBS stored cross-site scripting8.9CNA v3.10.3%2025-11-06Fix
CVE-2025-11756Google Chrome Safe Browsing use-after-free8.8CISA ADP v3.10.4%2025-11-06Fix
CVE-2025-11460Google Chrome Storage use-after-free8.8CISA ADP v3.10.3%2025-11-06Fix
CVE-2025-11458Google Chrome Sync heap-based buffer overflow8.1CISA ADP v3.10.3%2025-11-06Fix
CVE-2025-11271Easy Digital Download WordPress plugin insufficient verification to order manipulation5.3CNA v3.10.3%2025-11-06Fix
CVE-2025-11268Strong Testimonials WordPress plugin unauthenticated arbitrary shortcode execution4.3CNA v3.10.3%2025-11-06Fix
CVE-2025-11219Google Chrome V8 use-after-free3.1CISA ADP v3.10.3%2025-11-06Fix
CVE-2025-11216Google Chrome Storage inappropriate implementation6.3CISA ADP v3.10.2%2025-11-06Fix
CVE-2025-11215Google Chrome V8 off-by-one error4.3CISA ADP v3.10.3%2025-11-06Fix
CVE-2025-11213Google Chrome Omnibox inappropriate implementation6.3CISA ADP v3.10.2%2025-11-06Fix
CVE-2025-11212Google Chrome Media inappropriate implementation6.3CISA ADP v3.10.2%2025-11-06Fix
CVE-2025-11211Google Chrome Media out-of-bounds read7.5CISA ADP v3.10.4%2025-11-06Fix
CVE-2025-11210Google Chrome Tab side-channel information leak5.4CISA ADP v3.10.2%2025-11-06Fix
CVE-2025-11209Google Chrome Omnibox inappropriate implementation8.2CISA ADP v3.10.3%2025-11-06Fix
CVE-2025-11208Google Chrome Media inappropriate implementation6.3CISA ADP v3.10.2%2025-11-06Fix
CVE-2025-11207Google Chrome Storage side-channel information leak6.5CISA ADP v3.10.3%2025-11-06Fix
CVE-2025-11206Google Chrome Video heap-based buffer overflow7.1CISA ADP v3.10.2%2025-11-06Fix
CVE-2025-11205Google Chrome WebGPU heap-based buffer overflow8.8CISA ADP v3.10.3%2025-11-06Fix
CVE-2025-10955HTML injection in Netcad Software's Netigma6.1CNA v3.10.2%2025-11-06Fix
CVE-2025-10885Autodesk Installer privilege escalation7.8CNA v3.10.2%2025-11-06Fix
CVE-2025-10691Easy Email Subscription WordPress plugin cross-site request forgery to arbitrary Subscriber deletion4.3CNA v3.10.1%2025-11-06Fix
CVE-2025-10683Easy Email Subscription WordPress plugin authenticated (Admin+) SQL injection via uid4.9CNA v3.10.3%2025-11-06Fix
CVE-2025-10259Denial of service(DoS) vulnerability in TCP Communication function on MELSEC iQ-F Series CPU module5.3CNA v3.10.4%2025-11-06
CVE-2025-9338ASUS Armoury Crate memory corruption7.3CNA v4.00.1%2025-11-06Fix
CVE-2025-6327King Addons for Elementor WordPress plugin arbitrary file upload10.0CNA v3.10.5%2025-11-06Fix
CVE-2025-6325King Addons for Elementor WordPress plugin privilege escalation9.8CNA v3.10.4%2025-11-06Exploit codeFix
CVE-2025-5803VikBooking Hotel Booking Engine and PMS WordPress plugin broken access control5.3CNA v3.10.3%2025-11-06Fix
CVE-2025-64459Django potential SQL injection via _connector keyword argument in QuerySet and Q objects9.1CISA ADP v3.119.3%2025-11-05Emerging ThreatsExploit codeFix
CVE-2025-64458Django HttpResponseRedirect denial of service7.5CISA ADP v3.11.9%2025-11-05Exploit codeFix
CVE-2025-64151Roboticsware FA-Panel6 unquoted search path8.4CNA v4.00.2%2025-11-05
CVE-2025-64110Cursor: Authentication bypass possible via New Cursorignore Write8.7CNA v4.00.4%2025-11-05Fix
CVE-2025-64109Cursor CLI Beta: Command injection via Untrusted MCP Configuration8.8CNA v3.10.5%2025-11-05Fix
CVE-2025-63601snipeitapp Snipe-IT unrestricted file upload9.9CISA ADP v3.10.6%2025-11-05Fix
CVE-2025-63585opensource-socialnetwork SQL injection6.5CISA ADP v3.10.2%2025-11-05
CVE-2025-63418Selfbest A DOM-based cross-site scripting6.1CISA ADP v3.10.2%2025-11-05
CVE-2025-63417Selfbest chat functionality of the stored cross-site scripting7.2CISA ADP v3.10.2%2025-11-05
CVE-2025-63416Selfbest cross-site scripting9.1CISA ADP v3.10.4%2025-11-05
CVE-2025-63334Magdesign Pocketvj Control Panel OS command injection9.8CISA ADP v3.11.1%2025-11-05Fix
CVE-2025-63248diaowen DWSurvey insecure direct object reference7.5CISA ADP v3.10.3%2025-11-05
CVE-2025-62225Sony Optical Disc Archive Software unquoted search path8.4CNA v4.00.2%2025-11-05
CVE-2025-61304Dynatrace Activegate Ping Extension OS command injection9.8CISA ADP v3.11.9%2025-11-05Exploit code
CVE-2025-61084MDaemon Mail Server From header validation email spoofing7.1CISA ADP v3.10.2%2025-11-05
CVE-2025-60784Xiaozhangbang Voluntary Like System improper authorization6.5CISA ADP v3.10.4%2025-11-05
CVE-2025-60753libarchive infinite loop5.5CISA ADP v3.10.2%2025-11-05Fix
CVE-2025-59716ownCloud Guests observable discrepancy5.3CISA ADP v3.10.9%2025-11-05Nuclei
CVE-2025-58337Apache Doris-MCP-Server: Improper access control results in bypassing a read-only mode5.4CISA ADP v3.10.3%2025-11-05Fix
CVE-2025-57244OpenKM cross-site scripting5.4CISA ADP v3.10.2%2025-11-05
CVE-2025-57130ZwiiCMS improper access control8.8v3.10.4%2025-11-05
CVE-2025-56232Cdprojekt GOG Galaxy man-in-the-middle6.8CISA ADP v3.10.1%2025-11-05
CVE-2025-56231Tonec Internet Download Manager improper certificate validation9.1CISA ADP v3.10.2%2025-11-05
CVE-2025-55343Quipux SQL injection9.9CISA ADP v3.10.5%2025-11-05
CVE-2025-55342Quipux information disclosure5.3CISA ADP v3.10.2%2025-11-05
CVE-2025-55341Quipux cross-site scripting6.5CISA ADP v3.10.2%2025-11-05
CVE-2025-55278HCL DevOps Loop is susceptible to an improper authentication8.1CNA v3.10.2%2025-11-05
CVE-2025-55108BMC Control-M/Agent mutual TLS authentication remote code execution9.5CNA v4.00.8%2025-11-05Fix
CVE-2025-52602HCL BigFix Query WebUI Query application information disclosure4.2CNA v3.10.2%2025-11-05Fix
CVE-2025-47151Entr'ouvert Lasso lasso_node_impl_init_from_xml functionality type confusion9.8CNA v3.11.1%2025-11-05Fix
CVE-2025-46784Entr'ouvert Lasso denial of service7.5CNA v3.10.6%2025-11-05Fix
CVE-2025-46705Entr'ouvert Lasso g_assert_not_reached functionality denial of service7.5CNA v3.10.6%2025-11-05Fix
CVE-2025-46424Dell CloudLink denial of service6.7CNA v3.10.1%2025-11-05Fix
CVE-2025-46404Entr'ouvert Lasso denial of service7.5CNA v3.10.6%2025-11-05Fix
CVE-2025-46366Dell CloudLink plaintext password storage6.7CNA v3.10.1%2025-11-05Fix
CVE-2025-46365Dell CloudLink command injection5.3CNA v3.10.4%2025-11-05Fix
CVE-2025-46364Dell CloudLin improper privilege management9.1CNA v3.10.3%2025-11-05Fix
CVE-2025-45379Dell CloudLink OS command injection8.4CNA v3.10.7%2025-11-05Fix
CVE-2025-45378Dell CloudLink OS command injection9.1CNA v3.10.4%2025-11-05Fix
CVE-2025-43990Dell Command Monitor (DCM) execution with unnecessary privileges7.3CNA v3.10.1%2025-11-05Exploit codeFix
CVE-2025-43418Apple iOS and iPadOS improper access control4.6CISA ADP v3.10.2%2025-11-05Fix
CVE-2025-31954HCL iAutomate is susceptible to a sensitive information disclosure5.4CNA v3.10.2%2025-11-05Fix
CVE-2025-30479Dell CloudLink OS command injection8.4CNA v3.11.0%2025-11-05Fix
CVE-2025-21079Samsung Mobile Samsung Members improper input validation7.1CNA v3.10.5%2025-11-05Fix
CVE-2025-21078Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.8.8CNA v3.10.2%2025-11-05Fix
CVE-2025-21077Samsung Mobile Samsung Email improper input validation3.3CNA v3.10.1%2025-11-05Fix
CVE-2025-21076Samsung Mobile Samsung Account improper handling of insufficient permissions5.5CNA v3.10.1%2025-11-05Fix
CVE-2025-21075Samsung Mobile Devices libimagecodec.quram.so out-of-bounds write4.3CNA v3.10.3%2025-11-05Fix
CVE-2025-21074Samsung Mobile Devices libimagecodec.quram.so out-of-bounds read4.3CNA v3.10.3%2025-11-05Fix
CVE-2025-21073Samsung Mobile Devices USB connection mode insecure default configuration6.8CNA v3.10.2%2025-11-05Fix
CVE-2025-21071Samsung Mobile Devices handling opcode in fingerprint trustlet out-of-bounds write5.7CNA v3.10.1%2025-11-05Fix
CVE-2025-20377Cisco Unified Intelligence Center API information disclosure4.3CNA v3.10.3%2025-11-05Fix
CVE-2025-20376Cisco Unified Contact Center Express remote code execution6.5CNA v3.10.4%2025-11-05Fix
CVE-2025-20375Cisco Unified Contact Center Express arbitrary file upload6.5CNA v3.10.4%2025-11-05Fix
CVE-2025-20374Cisco Unified Contact Center Express arbitrary file download4.9CNA v3.11.1%2025-11-05Fix
CVE-2025-20358Cisco Unified Contact Center Express Editor authentication bypass9.4CNA v3.10.9%2025-11-05Fix
CVE-2025-20354Cisco Unified Contact Center Express remote code execution9.8CNA v3.10.9%2025-11-05Fix
CVE-2025-20343Cisco Identity Services Engine Radius Suppression denial of service8.6CNA v3.10.7%2025-11-05Exploit codeFix
CVE-2025-20305Cisco Identity Services Engine Software insufficient access control granularity4.3CNA v3.10.3%2025-11-05Fix
CVE-2025-20304Cisco Identity Services Engine Software cross-site scripting5.4CNA v3.10.2%2025-11-05Fix
CVE-2025-20303Cisco Identity Services Engine Software cross-site scripting5.4CNA v3.13.6%2025-11-05Fix
CVE-2025-20289Cisco Identity Services Engine Software cross-site scripting4.8CNA v3.10.2%2025-11-05Fix
CVE-2025-12779Amazon WorkSpaces system information disclosure8.8CNA v4.00.2%2025-11-05Fix
CVE-2025-12745QuickJS QuickJS.c js_array_buffer_slice buffer over-read7.8v3.10.2%2025-11-05
CVE-2025-12735expr-eval does not restrict functions passed to the evaluate function9.8CISA ADP v3.11.8%2025-11-05Exploit codeFix
CVE-2025-12677KiotViet Sync WordPress plugin unauthenticated Webhook key exposure5.3CNA v3.10.3%2025-11-05
CVE-2025-12676KiotViet Sync WordPress plugin use of hard-coded password to authorization bypass5.3CNA v3.10.3%2025-11-05
CVE-2025-12675KiotViet Sync WordPress plugin missing authorization to authenticated (Subscriber+) settings update4.3CNA v3.10.2%2025-11-05
CVE-2025-12674KiotViet Sync WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.10.8%2025-11-05Exploit code
CVE-2025-12582Features WordPress plugin missing authorization to authenticated (Subscriber+) option reset4.3CNA v3.10.2%2025-11-05
CVE-2025-12580SMS for WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2025-11-05
CVE-2025-12497Premium Portfolio Features for Phlox WordPress plugin unauthenticated local file inclusion8.1CNA v3.10.6%2025-11-05Fix
CVE-2025-12469FunnelKit Automations WordPress plugin missing authorization4.3CNA v3.10.2%2025-11-05Fix
CVE-2025-12468FunnelKit Automations WordPress plugin information disclosure5.3CNA v3.10.3%2025-11-05Fix
CVE-2025-12388B Carousel Block WordPress plugin server-side request forgery6.4CNA v3.10.2%2025-11-05Fix
CVE-2025-12384Document Embedder WordPress plugin unauthorized access8.6CNA v3.10.3%2025-11-05Fix
CVE-2025-12197The Events Calendar - unauthenticated SQL injection via s7.5CNA v3.118.2%2025-11-05Fix
CVE-2025-12192Events Calendar WordPress plugin information disclosure5.3CNA v3.10.3%2025-11-05Fix
CVE-2025-12139File Manager for Google Drive WordPress plugin information disclosure7.5CNA v3.12.3%2025-11-05NucleiFix
CVE-2025-11987Visual Link Preview WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-11-05Fix
CVE-2025-11917WPeMatico RSS Feed Fetcher WordPress plugin server-side request forgery6.4CNA v3.10.2%2025-11-05Fix
CVE-2025-11835Paid Membership Subscriptions WordPress plugin unauthorized access5.3CNA v3.10.2%2025-11-05Fix
CVE-2025-11820Graphina Elementor Charts and Graphs WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-11-05Fix
CVE-2025-11749AI Engine WordPress plugin unauthenticated sensitive information exposure to privilege escalation9.8CNA v3.174.8%2025-11-05Reported exploitedNucleiMetasploitExploit codeFix
CVE-2025-11745Ad Inserter WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-11-05Fix
CVE-2025-11373averta Depicter media upload AJAX route missing authorization4.3CNA v3.10.2%2025-11-05Fix
CVE-2025-11162Spectra WordPress plugin authenticated (Contributor+) stored cross-site scripting via Custom CSS6.4CNA v3.10.2%2025-11-05Fix
CVE-2025-11093Arbitrary code execution with higher privileged users in Multiple WSO2 Products8.4CNA v3.10.4%2025-11-05Fix
CVE-2025-11072Download Counter Button WordPress plugin unauthenticated arbitrary file download5.3CISA ADP v3.10.3%2025-11-05
CVE-2025-10907Authenticated arbitrary file upload in multiple WSO2 Products8.4CNA v3.10.6%2025-11-05Fix
CVE-2025-10873ElementInvader Addons for Elementor Unauthenticated arbitrary Email Sending5.3CISA ADP v3.10.2%2025-11-05Fix
CVE-2025-10853WSO2 Open Banking IAM management console of multiple reflected cross-site scripting5.2CNA v3.10.2%2025-11-05Fix
CVE-2025-10713XML external entity vulnerability in multiple WSO2 Products due to Improper XML Parser Configuration6.5CNA v3.10.4%2025-11-05Fix
CVE-2025-10622Foreman: Os command injection via ct_location and fcct_location parameters8.0CNA v3.10.6%2025-11-05Fix
CVE-2025-10567FunnelKit WordPress plugin reflected XSS6.3CISA ADP v3.10.2%2025-11-05Fix
CVE-2025-8871Everest Forms (Pro) WordPress plugin unauthenticated PHP object injection5.6CNA v3.10.3%2025-11-05Fix
CVE-2025-6027Ace User Management WordPress plugin Subscriber+ authentication bypass via password rest6.3CISA ADP v3.10.2%2025-11-05
CVE-2025-5770Reflected cross-site scripting (XSS) in Authentication endpoints of multiple WSO2 Products6.1CNA v3.10.2%2025-11-05Fix
CVE-2025-3125Authenticated arbitrary file upload in multiple WSO2 Products6.7CNA v3.10.8%2025-11-05Fix
CVE-2025-64322Salesforce Agentforce Vibes Extension incorrect permission assignment5.3CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-64321Salesforce Agentforce Vibes Extension improper neutralization5.3CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-64320Salesforce Agentforce Vibes Extension improper neutralization6.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-64319Salesforce Mulesoft Anypoint Code Builder incorrect permission assignment5.3CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-64318Salesforce Mulesoft Anypoint Code Builder improper neutralization5.3CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-64108Cursor's Sensitive File Modification can lead to NTFS Path Quirks8.8CNA v3.10.5%2025-11-04Fix
CVE-2025-64107Cursor is vulnerable to Path Manipulation using Backslashes on Windows8.8CNA v3.10.4%2025-11-04Fix
CVE-2025-64106Cursor: Speedbump Modal Bypass in MCP Server Deep-Link8.8CNA v3.10.4%2025-11-04Fix
CVE-2025-63294WorkDo Hrm Saas missing authorization6.5CISA ADP v3.10.3%2025-11-04
CVE-2025-62722LinkAce: Stored XSS vulnerability in Link Title field through Social Media Sharing feature8.7CNA v4.00.3%2025-11-04Fix
CVE-2025-62721LinkAce: Authorization bypass allows unauthorized access to All Private Links, Lists, and Tags7.1CNA v4.00.4%2025-11-04Fix
CVE-2025-62720LinkAce: Data Exfiltration via Export functions allow Access to All Users' Private Links7.1CNA v4.00.4%2025-11-04Fix
CVE-2025-62719LinkAce: Limited server-side request forgery (SSRF) in Keyword Fetching Functionality2.3CNA v4.00.3%2025-11-04Fix
CVE-2025-62715ClipBucket v5: Stored XSS via Collection Tags5.3CNA v4.00.2%2025-11-04Fix
CVE-2025-62520MantisBT unauthorized disclosure of private project column configuration5.3CNA v4.00.3%2025-11-04Fix
CVE-2025-62507Redis: Bug in XACKDEL may lead to stack overflow and potential RCE7.7CNA v4.06.8%2025-11-04Fix
CVE-2025-62369Xibo CMS: Remote code execution through module templates7.2CNA v3.11.0%2025-11-04Exploit codeFix
CVE-2025-61956Missing authentication for critical function in Radiometrics VizAir9.8v3.10.7%2025-11-04
CVE-2025-61945Missing authentication for critical function in Radiometrics VizAir9.8v3.10.7%2025-11-04
CVE-2025-61431Infinity Zucchetti cross-site scripting6.1CISA ADP v3.10.2%2025-11-04
CVE-2025-60925Codeshare information disclosure5.3CISA ADP v3.10.3%2025-11-04
CVE-2025-59596Absolute Security Secure Access denial of service6.0CNA v4.00.2%2025-11-04Fix
CVE-2025-59595Absolute Secure Access denial of service8.2CNA v4.00.4%2025-11-04Fix
CVE-2025-56230Tencent Docs Desktop update component improper certificate validation7.5CISA ADP v3.10.2%2025-11-04
CVE-2025-55155MantisBT: Authentication bypass for some passwords due to PHP type juggling5.4CNA v3.10.2%2025-11-04Fix
CVE-2025-54863Insufficiently protected credentials in Radiometrics VizAir9.8v3.10.6%2025-11-04
CVE-2025-54526Fuji Electric Monitouch V-SFT-6 stack-based buffer overflow8.4CNA v4.00.2%2025-11-04Fix
CVE-2025-54496Fuji Electric Monitouch V-SFT-6 heap-based buffer overflow8.4CNA v4.00.2%2025-11-04Fix
CVE-2025-54335Samsung Exynos 1480 use-after-free6.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-54334Samsung Exynos 1280 null pointer dereference7.5CISA ADP v3.10.4%2025-11-04Fix
CVE-2025-54333Samsung Exynos 1380 release of an invalid pointer5.3CISA ADP v3.10.3%2025-11-04Fix
CVE-2025-54332Samsung Exynos 1380 null pointer dereference7.5CISA ADP v3.10.4%2025-11-04Fix
CVE-2025-54331Samsung Exynos 1380 untrusted pointer dereference5.3CISA ADP v3.10.3%2025-11-04Fix
CVE-2025-54330Samsung Exynos 1380 out-of-bounds read5.3CISA ADP v3.10.3%2025-11-04Fix
CVE-2025-54329Samsung Exynos 980 heap-based buffer overflow7.5CISA ADP v3.10.4%2025-11-04Fix
CVE-2025-54327Samsung Exynos 1280 improper input validation6.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-54325Samsung Exynos 1080 out-of-bounds read5.3CISA ADP v3.10.3%2025-11-04Fix
CVE-2025-54323Samsung Exynos 980 information disclosure7.5CISA ADP v3.10.3%2025-11-04Fix
CVE-2025-52910Samsung Exynos 1280 use-after-free9.8CISA ADP v3.10.4%2025-11-04Fix
CVE-2025-52513Samsung Exynos 2400 out-of-bounds write7.5CISA ADP v3.10.4%2025-11-04Fix
CVE-2025-52512Samsung Exynos 2400 out-of-bounds read7.5CISA ADP v3.10.4%2025-11-04Fix
CVE-2025-49494Samsung Exynos 2100 denial of service7.5CISA ADP v3.10.4%2025-11-04Fix
CVE-2025-48884Galette is vulnerable to XSS through Document Type5.3CNA v4.00.2%2025-11-04Fix
CVE-2025-48076Galette is vulnerable to cross-site scripting5.3CNA v4.00.2%2025-11-04Fix
CVE-2025-47776MantisBT: Authentication bypass for some passwords due to PHP type juggling8.8CNA v4.00.3%2025-11-04Fix
CVE-2025-47370Qualcomm Snapdragon reachable assertion in BT controller6.5CNA v3.10.1%2025-11-04Fix
CVE-2025-47368Qualcomm Snapdragon buffer over-read in DSP service7.8CNA v3.10.1%2025-11-04Fix
CVE-2025-47367Qualcomm Snapdragon out-of-bounds write in WinBlast driver7.8CNA v3.10.1%2025-11-04Fix
CVE-2025-47365Qualcomm Snapdragon integer overflow or wraparound in Automotive Platform7.8CNA v3.10.1%2025-11-04Fix
CVE-2025-47362Qualcomm Snapdragon buffer over-read in Automotive software platform based on QNX6.1CNA v3.10.1%2025-11-04Fix
CVE-2025-47361Qualcomm Snapdragon improper validation of array index in Automotive software platform based on QNX7.8CNA v3.10.1%2025-11-04Fix
CVE-2025-47360Qualcomm Snapdragon stack-based buffer overflow in Automotive software platform based on QNX7.8CNA v3.10.1%2025-11-04Fix
CVE-2025-47357Qualcomm Snapdragon missing authentication for critical function in SMSS8.0CNA v3.10.1%2025-11-04Fix
CVE-2025-47353Qualcomm Snapdragon exposed dangerous method7.8CNA v3.10.1%2025-11-04Fix
CVE-2025-47352Qualcomm Snapdragon improper validation of array index in Audio7.8CNA v3.10.1%2025-11-04Fix
CVE-2025-46556MantisBT is vulnerable to denial of service (DoS) attack via Excessive Note Length6.5CNA v3.10.4%2025-11-04Fix
CVE-2025-43507Apple macOS incorrect default permissions6.5CISA ADP v3.10.4%2025-11-04Fix
CVE-2025-43505Apple Xcode out-of-bounds write8.8CISA ADP v3.10.3%2025-11-04Fix
CVE-2025-43504Apple Xcode buffer overflow4.9CISA ADP v3.10.4%2025-11-04Fix
CVE-2025-43503Apple Safari authentication bypass by spoofing4.3CISA ADP v3.10.4%2025-11-04Fix
CVE-2025-43502Apple Safari improper access control7.5CISA ADP v3.10.5%2025-11-04Fix
CVE-2025-43500Apple macOS personal information exposure7.5CISA ADP v3.10.5%2025-11-04Fix
CVE-2025-43499Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43498Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43496Apple macOS personal information exposure7.5CISA ADP v3.10.5%2025-11-04Fix
CVE-2025-43495Apple iOS and iPadOS information disclosure5.4CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43493Apple Safari authentication bypass by spoofing4.3CISA ADP v3.10.4%2025-11-04Fix
CVE-2025-43481Apple macOS sandbox escape5.2CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43480Apple Safari permissive cross-domain policy8.1CISA ADP v3.10.5%2025-11-04Fix
CVE-2025-43479Apple macOS insecure permissions5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43478Apple macOS use-after-free5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43477Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43476Apple macOS insecure permissions7.8CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43474Apple macOS out-of-bounds read7.8CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43472Apple macOS privilege escalation7.8CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43469Apple macOS personal information exposure5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43468Apple macOS improper signature verification5.5CISA ADP v3.10.1%2025-11-04Fix
CVE-2025-43462Apple macOS denial of service7.5CISA ADP v3.10.6%2025-11-04Fix
CVE-2025-43460Apple iOS and iPadOS logic flaw4.6CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43459Apple watchOS incorrect authorization4.6CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43458Apple Safari crash4.3CISA ADP v3.10.6%2025-11-04Fix
CVE-2025-43457Apple Safari use-after-free6.5CISA ADP v3.10.6%2025-11-04Fix
CVE-2025-43455Apple macOS information disclosure5.5CISA ADP v3.10.3%2025-11-04Fix
CVE-2025-43454Apple iOS and iPadOS improper access control7.5CISA ADP v3.10.5%2025-11-04Fix
CVE-2025-43452Apple iOS and iPadOS personal information exposure4.6CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43450Apple iOS and iPadOS logic flaw7.5CISA ADP v3.10.4%2025-11-04Fix
CVE-2025-43449Apple iOS and iPadOS information disclosure7.5CISA ADP v3.10.5%2025-11-04Fix
CVE-2025-43448Apple macOS link following6.3CISA ADP v3.10.3%2025-11-04Fix
CVE-2025-43447Apple macOS out-of-bounds write5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43446Apple macOS link following5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43445Apple macOS out-of-bounds read4.3CISA ADP v3.11.1%2025-11-04Fix
CVE-2025-43444Apple macOS incorrect default permissions5.3CISA ADP v3.10.5%2025-11-04Fix
CVE-2025-43443Apple Safari denial of service4.3CISA ADP v3.10.7%2025-11-04Fix
CVE-2025-43442Apple iOS and iPadOS incorrect default permissions3.3CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43441Apple Safari buffer overflow4.3CISA ADP v3.11.0%2025-11-04Fix
CVE-2025-43440Apple Safari cross-site scripting6.5CISA ADP v3.10.5%2025-11-04Fix
CVE-2025-43439Apple visionOS personal information exposure5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43438Apple Safari use-after-free4.3CISA ADP v3.11.1%2025-11-04Fix
CVE-2025-43436Apple macOS authentication bypass7.5CISA ADP v3.10.6%2025-11-04Fix
CVE-2025-43435Apple Safari memory corruption4.3CISA ADP v3.10.8%2025-11-04Fix
CVE-2025-43434Apple Safari use-after-free4.3CISA ADP v3.11.3%2025-11-04Fix
CVE-2025-43433Apple Safari buffer overflow8.8CISA ADP v3.11.2%2025-11-04Fix
CVE-2025-43432Apple Safari use-after-free4.3CISA ADP v3.10.8%2025-11-04Fix
CVE-2025-43431Apple Safari out-of-bounds write8.8CISA ADP v3.10.9%2025-11-04Fix
CVE-2025-43430Apple Safari crash4.3CISA ADP v3.11.1%2025-11-04Fix
CVE-2025-43429Apple Safari buffer overflow4.3CISA ADP v3.11.5%2025-11-04Fix
CVE-2025-43427Apple Safari crash4.3CISA ADP v3.10.6%2025-11-04Fix
CVE-2025-43426Apple macOS sensitive information in log files5.5CISA ADP v3.10.3%2025-11-04Fix
CVE-2025-43425Apple Safari memory corruption4.3CISA ADP v3.10.7%2025-11-04Fix
CVE-2025-43424Apple macOS HID device handling memory corruption6.5CISA ADP v3.10.3%2025-11-04Fix
CVE-2025-43423Apple macOS sensitive information in log files2.0CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43422Apple iOS and iPadOS authentication bypass4.6CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43421Apple Safari out-of-bounds read4.3CISA ADP v3.10.6%2025-11-04Fix
CVE-2025-43420Apple macOS race condition4.7CISA ADP v3.10.1%2025-11-04Fix
CVE-2025-43419Apple Safari memory corruption8.8CISA ADP v3.10.4%2025-11-04Fix
CVE-2025-43414Apple macOS insecure permissions6.2CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43413Apple macOS improper access control7.5CISA ADP v3.10.6%2025-11-04Fix
CVE-2025-43412Apple macOS sandbox escape6.3CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43411Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43409Apple macOS personal information exposure5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43408Apple macOS improper access control2.4CISA ADP v3.10.3%2025-11-04Fix
CVE-2025-43407Apple macOS sandbox escape7.8CISA ADP v3.10.2%2025-11-04Exploit codeFix
CVE-2025-43405Apple macOS personal information exposure7.5CISA ADP v3.10.6%2025-11-04Fix
CVE-2025-43401Apple macOS denial of service7.5CISA ADP v3.11.0%2025-11-04Fix
CVE-2025-43399Apple macOS personal information exposure7.5CISA ADP v3.10.6%2025-11-04Fix
CVE-2025-43398Apple macOS denial of service5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43397Apple macOS incorrect authorization5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43396Apple macOS logic flaw5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43395Apple macOS link following3.3CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43394Apple macOS link following5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43392Apple Safari permissive cross-domain policy4.3CISA ADP v3.10.5%2025-11-04Fix
CVE-2025-43391Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43390Apple macOS improper signature verification5.5CISA ADP v3.10.1%2025-11-04Fix
CVE-2025-43389Apple macOS personal information exposure5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43387Apple macOS incorrect authorization7.8CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43386Apple macOS out-of-bounds read7.8CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43385Apple macOS out-of-bounds read4.3CISA ADP v3.11.0%2025-11-04Fix
CVE-2025-43384Apple macOS out-of-bounds read4.3CISA ADP v3.11.0%2025-11-04Fix
CVE-2025-43383Apple macOS out-of-bounds read4.3CISA ADP v3.11.0%2025-11-04Fix
CVE-2025-43382Apple macOS path traversal5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43380Apple macOS out-of-bounds write5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43379Apple macOS link following5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43378Apple macOS insecure permissions5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43377Apple macOS out-of-bounds read5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43376Apple Safari logic flaw7.5v3.10.8%2025-11-04Fix
CVE-2025-43373Apple macOS out-of-bounds write7.5CISA ADP v3.10.5%2025-11-04Fix
CVE-2025-43365Apple iOS and iPadOS denial of service2.8CISA ADP v3.10.1%2025-11-04Fix
CVE-2025-43364Apple macOS race condition7.8CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43361Apple macOS out-of-bounds read7.8CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43360Apple iOS and iPadOS information disclosure5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43350Apple iOS and iPadOS incorrect default permissions2.4CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43348Apple macOS logic flaw5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43345Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43338Apple macOS cross-site scripting7.1CISA ADP v3.10.3%2025-11-04Fix
CVE-2025-43336Apple macOS incorrect authorization4.4CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43335Apple macOS improper access control5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43334Apple macOS improper access control5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43323Apple macOS information disclosure8.1CISA ADP v3.10.4%2025-11-04Fix
CVE-2025-43322Apple macOS logic flaw5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43309Apple iOS and iPadOS logic flaw2.4CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-43288Apple macOS link following5.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-41345Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-41344Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-41343Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-41342Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-41341Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-41340Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-41339Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-41338Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-41337Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-41336Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-41335Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-41114Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-41113Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-41112Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-41111Missing authorization vulnerability in CanalDenuncia.app7.5v3.10.3%2025-11-04Fix
CVE-2025-35021Abilis CPX Fallback Shell Connection Relay6.5CNA v3.10.3%2025-11-04Fix
CVE-2025-33176NVIDIA RunAI improper channel restriction6.2CNA v3.10.2%2025-11-04Fix
CVE-2025-32786GLPI Inventory Plugin SQL injection7.5CNA v3.17.0%2025-11-04Emerging ThreatsFix
CVE-2025-27374Samsung Exynos 9820 out-of-bounds write5.3CISA ADP v3.10.3%2025-11-04Fix
CVE-2025-27074Qualcomm Snapdragon incorrect calculation of buffer size in SCE-Mink8.8CNA v3.10.1%2025-11-04Fix
CVE-2025-27070Qualcomm Snapdragon out-of-bounds write in Windows Compute7.8CNA v3.10.1%2025-11-04Fix
CVE-2025-27064Qualcomm Snapdragon buffer over-read in Core services6.1CNA v3.10.1%2025-11-04Fix
CVE-2025-23358NVIDIA NVApp uncontrolled search path8.2CNA v3.10.2%2025-11-04Fix
CVE-2025-20749MediaTek chipsets stack overflow in charger6.7CISA ADP v3.10.1%2025-11-04Fix
CVE-2025-20748MediaTek chipsets classic buffer overflow in wlan6.7CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-20747MediaTek chipsets stack overflow in gnss6.7CISA ADP v3.10.1%2025-11-04Fix
CVE-2025-20746MediaTek chipsets stack overflow in gnss6.7CISA ADP v3.10.1%2025-11-04Fix
CVE-2025-20745MediaTek chipsets use-after-free in apusys4.2v3.10.1%2025-11-04Fix
CVE-2025-20744MediaTek chipsets use-after-free in pda4.2v3.10.1%2025-11-04Fix
CVE-2025-20743MediaTek chipsets use-after-free in clkdbg4.2v3.10.1%2025-11-04Fix
CVE-2025-20742MediaTek chipsets heap overflow in wlan8.0CISA ADP v3.10.3%2025-11-04Fix
CVE-2025-20741MediaTek chipsets heap overflow in wlan6.7CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-20740MediaTek chipsets time-of-check time-of-use (toctou) race condition in wlan4.7CISA ADP v3.10.1%2025-11-04Fix
CVE-2025-20739MediaTek chipsets stack overflow in wlan6.7CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-20738MediaTek chipsets stack overflow in wlan6.7CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-20737MediaTek chipsets stack overflow in wlan7.8CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-20736MediaTek chipsets stack overflow in wlan6.7CISA ADP v3.10.1%2025-11-04Fix
CVE-2025-20735MediaTek chipsets heap overflow in wlan7.8CISA ADP v3.10.1%2025-11-04Fix
CVE-2025-20734MediaTek chipsets heap overflow in wlan5.3v3.10.1%2025-11-04Fix
CVE-2025-20733MediaTek chipsets heap overflow in wlan7.8CISA ADP v3.10.1%2025-11-04Fix
CVE-2025-20732MediaTek chipsets stack overflow in wlan5.3v3.10.1%2025-11-04Fix
CVE-2025-20731MediaTek chipsets heap overflow in wlan5.3v3.10.1%2025-11-04Fix
CVE-2025-20730MediaTek chipsets improper authentication generic in preloader6.7CISA ADP v3.10.1%2025-11-04Fix
CVE-2025-20729MediaTek chipsets heap overflow in wlan4.2v3.10.1%2025-11-04Fix
CVE-2025-20728MediaTek chipsets heap overflow in wlan7.8CISA ADP v3.10.1%2025-11-04Fix
CVE-2025-20727MediaTek chipsets out-of-bounds write in Modem8.1CISA ADP v3.10.6%2025-11-04Fix
CVE-2025-20726MediaTek chipsets heap overflow in Modem7.5CISA ADP v3.10.5%2025-11-04Fix
CVE-2025-20725MediaTek chipsets out-of-bounds write in ims service7.5CISA ADP v3.10.5%2025-11-04Fix
CVE-2025-12695DSPy does not properly restrict file reads5.9CNA v3.10.3%2025-11-04
CVE-2025-12683Voidtools Everything null DACL assigned to Named Pipe communicating with SYSTEM service5.8CNA v4.00.1%2025-11-04Fix
CVE-2025-12682Easy Upload Files During Checkout WordPress plugin unauthenticated arbitrary JavaScript file upload9.8CNA v3.10.7%2025-11-04Fix
CVE-2025-12493ShopLentor WordPress plugin unauthenticated local PHP file inclusion via load_template9.8CNA v3.10.8%2025-11-04Fix
CVE-2025-12456Centangle-Team WordPress plugin cross-site request forgery6.1CNA v3.10.2%2025-11-04
CVE-2025-12452Visit Counter cross-site request forgery to stored cross-site scripting6.1CNA v3.10.1%2025-11-04
CVE-2025-12416Pagerank Tools WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-11-04
CVE-2025-12415MapMap WordPress plugin cross-site request forgery6.1CNA v3.10.2%2025-11-04
CVE-2025-12413Social Media WPCF7 Stop Words WordPress plugin cross-site request forgery to settings update5.4CNA v3.10.1%2025-11-04
CVE-2025-12412Top Bar Notification WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-11-04
CVE-2025-12410SH Contextual Help WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-11-04
CVE-2025-12403Associados Amazon WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-11-04
CVE-2025-12402LinkedIn Resume WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-11-04
CVE-2025-12401Label Plugins WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-11-04
CVE-2025-12400LMB^Box Smileys WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-11-04
CVE-2025-12396Clubmember WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.2%2025-11-04
CVE-2025-12393kris_iv Free Quotation stored cross-site scripting4.4CNA v3.10.2%2025-11-04
CVE-2025-12389Import Export For WooCommerce WordPress plugin missing authorization authenticated settings update4.3CNA v3.10.2%2025-11-04
CVE-2025-12371Nari Accountant WordPress plugin authenticated (Editor+) stored cross-site scripting4.4CNA v3.10.2%2025-11-04
CVE-2025-12369Extensions for Leaflet Map WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-11-04Fix
CVE-2025-12350DominoKit WordPress plugin missing authorization to unauthenticated settings update5.3CNA v3.10.2%2025-11-04
CVE-2025-12324TablePress Tables in WordPress made easy plugin stored cross-site scripting6.4CNA v3.10.2%2025-11-04Fix
CVE-2025-12188Posts Navigation Links for Sections and Headings WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-11-04
CVE-2025-12184MeetingList WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.2%2025-11-04
CVE-2025-12158Simple User Capabilities WordPress plugin missing authorization authenticated privilege escalation9.8CNA v3.10.5%2025-11-04
CVE-2025-12157Simple User Capabilities WordPress plugin missing authorization to unauthenticated capability reset5.3CNA v3.10.3%2025-11-04
CVE-2025-12156aitool Ai Auto Tool Content Writing Assistant post creation function missing authorization4.3CNA v3.10.2%2025-11-04Fix
CVE-2025-12108Missing authentication for critical function Survision License Plate Recognition Camera9.3CNA v4.00.5%2025-11-04Fix
CVE-2025-12070ViaAds WordPress plugin cross-site request forgery to API Key update4.3CNA v3.10.2%2025-11-04Fix
CVE-2025-12069WP Global Screen Options WordPress plugin cross-site request forgery to Screen options update4.3CNA v3.10.1%2025-11-04
CVE-2025-12065WP Carticon WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.2%2025-11-04
CVE-2025-12045Orbit Fox Companion WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-11-04Fix
CVE-2025-11890Crypto Payment Gateway with Payeer for WooCommerce WordPress plugin unauthenticated Payment bypass7.5CNA v3.10.3%2025-11-04
CVE-2025-11841Greenshift animation and page builder blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-11-04Fix
CVE-2025-11812Reuse Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-11-04
CVE-2025-11758All in One Time Clock Lite WordPress plugin unauthorized access6.5CNA v3.10.3%2025-11-04Fix
CVE-2025-11753Multi-language Responsive Portfolio WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2025-11-04
CVE-2025-11733Footnotes Made Easy WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2025-11-04Fix
CVE-2025-11724EM Beer Manager WordPress plugin authenticated (Subscriber+) arbitrary file upload8.8CNA v3.10.6%2025-11-04
CVE-2025-11704Elegance Menu WordPress plugin authenticated (Contributor+) local file inclusion7.5CNA v3.10.6%2025-11-04Fix
CVE-2025-11690IDOR vulnerability in the CFMOTO RIDE API8.5CNA v3.10.2%2025-11-04
CVE-2025-11008CE21 Suite WordPress plugin unauthenticated sensitive information exposure to privilege escalation9.8CNA v3.10.5%2025-11-04
CVE-2025-11007CE21 Suite - missing authorization to unauthenticated privilege escalation9.8CNA v3.10.5%2025-11-04
CVE-2025-10896litonice13 Elementor addons Recommended Plugins Library installer missing authorization8.8CNA v3.10.7%2025-11-04Fix
CVE-2025-10875Salesforce Mulesoft Anypoint Code Builder improper neutralization6.5CISA ADP v3.10.2%2025-11-04Fix
CVE-2025-64294WP Snow Effect WordPress plugin broken access control5.3CNA v3.10.2%2025-11-03
CVE-2025-63593getgrav grav cross-site scripting6.1CISA ADP v3.10.2%2025-11-03Fix
CVE-2025-63453Car-booking-system-php SQL injection9.8CISA ADP v3.10.6%2025-11-03
CVE-2025-63452Car-booking-system-php SQL injection9.4CISA ADP v3.10.5%2025-11-03
CVE-2025-63451Car-booking-system-php SQL injection9.8CISA ADP v3.10.6%2025-11-03
CVE-2025-63450Car-booking-system-php cross-site scripting5.4CISA ADP v3.10.3%2025-11-03
CVE-2025-63449Water Management System cross-site scripting5.4CISA ADP v3.10.3%2025-11-03
CVE-2025-63448Water Management System cross-site scripting6.1CISA ADP v3.10.3%2025-11-03
CVE-2025-63447Water Management System cross-site scripting6.1CISA ADP v3.10.3%2025-11-03
CVE-2025-63446Water Management System cross-site scripting6.1CISA ADP v3.10.3%2025-11-03
CVE-2025-63443School Management System PHP cross-site scripting5.4CISA ADP v3.10.2%2025-11-03
CVE-2025-63442Nababur Simple-User-Management-System cross-site scripting4.6CISA ADP v3.10.2%2025-11-03
CVE-2025-63441opensource-socialnetwork cross-site scripting7.3v3.10.3%2025-11-03Exploit codeFix
CVE-2025-63293Fairsketch RISE Ultimate Project Manager missing authorization6.5CISA ADP v3.10.4%2025-11-03
CVE-2025-60892Raspberry Pi Imager OS customization public-key authentication setting information disclosure6.8CISA ADP v3.10.2%2025-11-03
CVE-2025-60785Kagilum Icescrum Postgres drivers component remote code execution8.8CISA ADP v3.10.8%2025-11-03
CVE-2025-60503Ultimate Fosters UltimatePOS administrative interface of ultimatefosters cross-site scripting8.7CISA ADP v3.10.4%2025-11-03Exploit code
CVE-2025-50735NextChat path traversal7.5CISA ADP v3.10.9%2025-11-03
CVE-2025-50363PHPGurukul Maid Hiring Management System cross-site scripting5.4CISA ADP v3.10.3%2025-11-03Exploit code
CVE-2025-48397Eaton Brightlayer Software Suite (BLSS) missing authentication7.1CNA v3.10.2%2025-11-03
CVE-2025-48396Eaton Brightlayer Software Suite (BLSS) unrestricted file upload8.3CNA v3.10.4%2025-11-03
CVE-2025-45663Netsurf-browser netsurf uninitialized memory use6.5CISA ADP v3.10.4%2025-11-03
CVE-2025-40107Linux kernel hi311x CAN driver null pointer dereference–0.2%2025-11-03Fix
CVE-2025-36172IBM Cloud Pak for Business Automation Business Automation Workflow stored cross-site scripting6.4CNA v3.10.2%2025-11-03Fix
CVE-2025-36093Security vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 20254.8CNA v3.10.3%2025-11-03Fix
CVE-2025-36092IBM Business Automation Insights improper input validation6.5CNA v3.10.5%2025-11-03Fix
CVE-2025-36091IBM Business Automation Insights unverified ownership4.3CNA v3.10.4%2025-11-03Fix
CVE-2025-34501Shuffle Master Deck Mate 2 hard-coded credentials and Exposed services7.0CNA v4.00.2%2025-11-03Fix
CVE-2025-29699Netsurf-browser netsurf use-after-free6.5CISA ADP v3.10.3%2025-11-03
CVE-2025-12657MongoDB Server malformed KMIP response may result in access violation5.9CNA v4.00.4%2025-11-03Fix
CVE-2025-12642lighttpd HTTP Header Smuggling via Trailer Merge9.1v3.10.4%2025-11-03Fix
CVE-2025-12626jeecgboot jeewx-boot WxActGoldeneggsPrizesController.java getImgUrl path traversal5.3CNA v4.00.4%2025-11-03
CVE-2025-12623fushengqian fuint Authentication Token ClientSignController.java authorization2.3CNA v4.00.3%2025-11-03
CVE-2025-12622Tenda AC10 SysRunCmd formSysRunCmd buffer overflow9.8v3.10.9%2025-11-03Emerging Threats
CVE-2025-12619Tenda A15 openNetworkGateway fromSetWirelessRepeat buffer overflow9.8v3.10.9%2025-11-03Emerging Threats
CVE-2025-12618Tenda AC8 DatabaseIniSet buffer overflow9.8v3.15.4%2025-11-03Emerging Threats
CVE-2025-12617itsourcecode Billing System login_crud.php SQL injection9.8v3.10.5%2025-11-03
CVE-2025-12616PHPGurukul News Portal settings.py insertion of sensitive information into debugging code5.9v3.10.6%2025-11-03
CVE-2025-12615PHPGurukul News Portal settings.py hard-coded key8.1v3.10.4%2025-11-03
CVE-2025-12614SourceCodester Best House Rental Management System admin_class.php delete_payment SQL injection9.8v3.10.4%2025-11-03
CVE-2025-12612Campcodes School Fees Payment Management System ajax.php SQL injection9.8v3.10.3%2025-11-03
CVE-2025-12611Tenda AC21 SetPptpServerCfg formSetPPTPServer buffer overflow9.8v3.10.7%2025-11-03
CVE-2025-12610CodeAstro Gym Management System view-progress-report.php SQL injection7.2v3.10.4%2025-11-03
CVE-2025-12609CodeAstro Gym Management System update-progress.php SQL injection8.8v3.10.4%2025-11-03
CVE-2025-12608itsourcecode Online Loan Management System manage_user.php SQL injection9.8v3.10.4%2025-11-03
CVE-2025-12607itsourcecode Online Loan Management System manage_payment.php SQL injection9.8v3.10.4%2025-11-03
CVE-2025-12606itsourcecode Online Loan Management System manage_borrower.php SQL injection9.8v3.10.4%2025-11-03
CVE-2025-12531IBM InfoSphere Information Server is affected by an XML external entity injection (XXE)7.1CNA v3.10.8%2025-11-03Fix
CVE-2025-12503Digiwin EasyFlow .NET and EasyFlow AiNet SQL injection7.1CNA v4.00.3%2025-11-03Fix
CVE-2025-12463Unauthenticated SQL injection in Guetebruck G-Cam Series Cameras9.8CNA v3.10.6%2025-11-03Emerging Threats
CVE-2025-11953React Native Community CLI OS command injection9.8CNA v3.194.0%2025-11-03KEVNucleiExploit codeFix
CVE-2025-11761HP Client Management Script Library Security Update8.5CNA v4.00.2%2025-11-03Fix
CVE-2025-11193Lenovo Tab M11 TB330FU TB330XU plaintext password storage6.8CNA v4.00.1%2025-11-03Fix
CVE-2025-10280SailPoint IdentityIQ incorrect content type cross-site scripting7.1CNA v3.10.2%2025-11-03Fix
CVE-2025-8900Doccure Core WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.4%2025-11-03Fix
CVE-2025-8558Proofpoint Insider Threat Management (ITM) Server missing authentication2.3CNA v4.00.6%2025-11-03Fix
CVE-2025-0987IDOR in CB Project's CVLand9.9CNA v3.10.3%2025-11-03
CVE-2025-12605itsourcecode Online Loan Management System manage_loan.php SQL injection9.8v3.10.4%2025-11-02
CVE-2025-12604itsourcecode Online Loan Management System load_fields.php SQL injection9.8v3.10.4%2025-11-02
CVE-2025-12598SourceCodester Best House Rental Management System admin_class.php save_tenant SQL injection9.8v3.10.4%2025-11-02
CVE-2025-12597SourceCodester Best House Rental Management System admin_class.php save_category SQL injection9.8v3.10.4%2025-11-02
CVE-2025-12596Tenda AC23 saveParentControlInfo buffer overflow9.8v3.11.2%2025-11-02
CVE-2025-12595Tenda AC23 SetVirtualServerCfg formSetVirtualSer buffer overflow9.8v3.11.1%2025-11-02
CVE-2025-12594code-projects Simple Online Hotel Reservation System add_account.php SQL injection7.2v3.10.4%2025-11-02
CVE-2025-12593code-projects Simple Online Hotel Reservation System Photo edit_room.php unrestricted upload7.2v3.10.4%2025-11-02
CVE-2025-62276Liferay Portal and DXP use an incorrect cache-control header4.6CNA v4.00.1%2025-11-01Fix
CVE-2025-62275Liferay Portal and DXP do not check permissions of images in a blog entry6.9CNA v4.00.3%2025-11-01Fix
CVE-2025-36367IBM i is affected by a privilege escalation in IBM i SQL services8.8CNA v3.10.3%2025-11-01Fix
CVE-2025-12603Azure Access Technology BLU-IC2 /etc/timezone can be Arbitrarily Written2.3CNA v4.00.3%2025-11-01
CVE-2025-12602Azure Access Technology BLU-IC2 /etc/avahi/services/z9.service can be Arbitrarily Written2.3CNA v4.00.3%2025-11-01
CVE-2025-12601Azure Access Technology BLU-IC2 denial of service due to SlowLoris10.0CNA v4.00.3%2025-11-01
CVE-2025-12600Azure Access Technology BLU-IC2 web UI Malfunction10.0CNA v4.00.4%2025-11-01
CVE-2025-12599Azure Access Technology BLU-IC2 Multiple Devices are Sharing the Same Secrets for SDKSocket10.0CNA v4.00.4%2025-11-01
CVE-2025-12367SiteSEO SEO Simplified WordPress plugin missing authorization authenticated plugin settings update4.3CNA v3.10.2%2025-11-01Fix
CVE-2025-12180Qi Blocks WordPress plugin missing authorization authenticated plugin settings update4.3CNA v3.10.2%2025-11-01Fix
CVE-2025-12171RESTful Content Syndication - Authenticated (Contributor+) arbitrary file upload8.8CNA v3.10.5%2025-11-01Fix
CVE-2025-12137Import WP Export and Import CSV and XML files to WordPress plugin arbitrary file read4.9CNA v3.10.5%2025-11-01Fix
CVE-2025-12118Schema Scalpel WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-11-01Fix
CVE-2025-12090Employee Spotlight WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-11-01Fix
CVE-2025-12038Folderly WordPress plugin incorrect authorization to authenticated (Author+) Term deletion4.3CNA v3.10.2%2025-11-01Fix
CVE-2025-11995Community Events WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2025-11-01Fix
CVE-2025-11983WP Discourse WordPress plugin authenticated (Author+) information exposure4.3CNA v3.10.3%2025-11-01Fix
CVE-2025-11928CSS and JavaScript Toolbox WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.2%2025-11-01Fix
CVE-2025-11927gijo Flying Images admin settings stored cross-site scripting4.4CNA v3.10.2%2025-11-01Fix
CVE-2025-11922Inactive Logout WordPress plugin authenticated (Subscriber+) stored cross-site scripting6.4CNA v3.10.2%2025-11-01Fix
CVE-2025-11920WPCOM Member WordPress plugin authenticated (Contributor+) local file inclusion via shortcode8.8CNA v3.10.6%2025-11-01Fix
CVE-2025-11833Post SMTP WordPress plugin unauthorized access9.8CNA v3.161.5%2025-11-01Reported exploitedNucleiEmerging ThreatsFix
CVE-2025-11816WP Legal Pages Privacy Policy Generator account disconnect missing authorization5.3CNA v3.10.3%2025-11-01Fix
CVE-2025-11755Delicious Recipes WordPress plugin authenticated (Contributor+) arbitrary file upload8.8CNA v3.10.5%2025-11-01Fix
CVE-2025-11740wpForo Forum WordPress plugin authenticated (Susbscriber+) SQL injection6.5CNA v3.10.3%2025-11-01Fix
CVE-2025-11502Schema and Structured Data for WP and AMP WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-11-01Fix
CVE-2025-11499Tablesome Table WordPress plugin unrestricted file upload9.8CNA v3.11.1%2025-11-01Fix
CVE-2025-11377List category posts WordPress plugin authenticated (Contributor+) information exposure4.3CNA v3.10.2%2025-11-01Fix
CVE-2025-11174Document Library Lite WordPress plugin missing authorization to sensitive information exposure5.3CNA v3.10.4%2025-11-01Exploit codeFix
CVE-2025-10487Advanced Ads WordPress plugin unauthenticated limited code execution7.3CNA v3.10.5%2025-11-01Fix
CVE-2025-6990Kallyas WordPress theme authenticated (Contributor+) remote code execution8.8CNA v3.10.6%2025-11-01
CVE-2025-6988Kallyas WordPress theme authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-11-01Fix
CVE-2025-6574Service Finder Bookings WordPress plugin privilege escalation8.8CNA v3.10.3%2025-11-01Fix
CVE-2025-5949Service Finder Bookings WordPress plugin privilege escalation8.8CNA v3.10.4%2025-11-01Fix