Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (417953 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-62412 1 Librenms 1 Librenms 2025-10-23 3.8 Low
LibreNMS is a community-based GPL-licensed network monitoring system. The alert rule name in the Alerts > Alert Rules page is not properly sanitized, and can be used to inject HTML code. This vulnerability is fixed in 25.10.0.
CVE-2025-62411 1 Librenms 1 Librenms 2025-10-23 5.5 Medium
LibreNMS is a community-based GPL-licensed network monitoring system. LibreNMS <= 25.8.0 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Alert Transports management functionality. When an administrator creates a new Alert Transport, the value of the Transport name field is stored and later rendered in the Transports column of the Alert Rules page without proper input validation or output encoding. This leads to arbitrary JavaScript execution in the admin’s browser. This vulnerability is fixed in 25.10.0.
CVE-2025-61255 1 Phpgurukul 1 Bank Locker Management System 2025-10-23 6.1 Medium
Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting (XSS) vulnerability via the /search parameter, where unsanitized input allows arbitrary HTML and JavaScript injection, potentially resulting in information disclosure and user redirection.
CVE-2025-61540 3 Myupb, Ultimate Php Board, Ultimate Php Board Project 3 Ultimate Php Board, Ultimate Php Board, Ultimate Php Board 2025-10-23 6.5 Medium
SQL injection vulnerability in Ultimate PHP Board 2.2.7 via the username field in lostpassword.php.
CVE-2025-62598 1 Wegia 1 Wegia 2025-10-23 6.1 Medium
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to version 3.5.1, a reflected cross-site scripting (XSS) vulnerability was identified in the editar_info_pessoal.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the action parameter. The vulnerable endpoint is GET /WeGIA/html/pessoa/editar_info_pessoal.php?action=1. This issue has been patched in version 3.5.1.
CVE-2023-53701 1 Linux 1 Linux Kernel 2025-10-23 5.5 Medium
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-62812 2025-10-23 N/A
Not used
CVE-2025-62811 2025-10-23 N/A
Not used
CVE-2025-62810 2025-10-23 N/A
Not used
CVE-2025-62809 2025-10-23 N/A
Not used
CVE-2025-62808 2025-10-23 N/A
Not used
CVE-2025-62807 2025-10-23 N/A
Not used
CVE-2025-62806 2025-10-23 N/A
Not used
CVE-2025-62805 2025-10-23 N/A
Not used
CVE-2025-62804 2025-10-23 N/A
Not used
CVE-2025-5494 1 Zohocorp 1 Manageengine Endpoint Central 2025-10-22 3.9 Low
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.
CVE-2025-36020 1 Ibm 2 Guardium Data Protection, Security Guardium 2025-10-22 5.9 Medium
IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive credential information.
CVE-2025-59041 2 Anthropic, Anthropics 2 Claude Code, Claude Code 2025-10-22 9.8 Critical
Claude Code is an agentic coding tool. At startup, Claude Code executed a command templated in with `git config user.email`. Prior to version 1.0.105, a maliciously configured user email in git could be used to trigger arbitrary code execution before a user accepted the workspace trust dialog. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to version 1.0.105 or the latest version.
CVE-2024-41986 1 Siemens 4 Opcenter Quality, Smartclient Modules, Soa Audit and 1 more 2025-10-22 6.4 Medium
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application support insecure TLS 1.0 and 1.1 protocol. An attacker could achieve a man-in-the-middle attack and compromise confidentiality and integrity of data.
CVE-2024-41985 1 Siemens 4 Opcenter Quality, Smartclient Modules, Soa Audit and 1 more 2025-10-22 2.6 Low
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506). The affected application does not expire the session without logout. This could allow an attacker to get unauthorized access if the session is left idle.