Export limit exceeded: 417953 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (417953 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2025-61855 | 2025-10-02 | N/A | ||
| Not used | ||||
| CVE-2025-61854 | 2025-10-02 | N/A | ||
| Not used | ||||
| CVE-2025-61853 | 2025-10-02 | N/A | ||
| Not used | ||||
| CVE-2025-61852 | 2025-10-02 | N/A | ||
| Not used | ||||
| CVE-2025-61851 | 2025-10-02 | N/A | ||
| Not used | ||||
| CVE-2025-61850 | 2025-10-02 | N/A | ||
| Not used | ||||
| CVE-2025-61849 | 2025-10-02 | N/A | ||
| Not used | ||||
| CVE-2025-55621 | 1 Reolink | 1 Reolink | 2025-10-02 | 6.5 Medium |
| An Insecure Direct Object Reference (IDOR) vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access and download other users' profile photos via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior; the photos are part of a social platform on which users expect to find one another. | ||||
| CVE-2025-55622 | 1 Reolink | 1 Reolink | 2025-10-02 | 6.5 Medium |
| Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience. | ||||
| CVE-2025-24133 | 1 Apple | 2 Ios, Ipados | 2025-10-02 | N/A |
| This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | ||||
| CVE-2025-9669 | 1 Jinher | 1 Jinher Oa | 2025-10-01 | 7.3 High |
| A vulnerability has been found in Jinher OA 1.0. This issue affects some unknown processing of the file GetTreeDate.aspx. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. | ||||
| CVE-2023-21481 | 1 Samsung | 1 Account | 2025-10-01 | 5.4 Medium |
| Improper URL input validation vulnerability in Samsung Account application prior to version 14.1.0.0 allows remote attackers to get sensitive information. | ||||
| CVE-2023-21482 | 2 Google, Samsung | 4 Android, Camera, Mobile and 1 more | 2025-10-01 | 6.1 Medium |
| Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13 allows physical attackers to install package through Galaxy store before completion of Setup wizard. | ||||
| CVE-2025-51531 | 2 Sage, Sagedpw | 2 Dpw, Sage Dpw | 2025-10-01 | 6.1 Medium |
| A reflected cross-site scripting (XSS) vulnerability in Sage DPW 2024_12_004 and earlier allows attackers to execute arbitrary JavaScript in the context of a victim's browser via injecting a crafted payload into the tabfields parameter at /dpw/scripts/cgiip.exe/WService. The vendor has stated that the issue is fixed in 2025_06_000, released in June 2025. | ||||
| CVE-2025-51532 | 1 Sagedpw | 1 Sage Dpw | 2025-10-01 | 7.5 High |
| Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request. The vendor has stated that the issue is fixed in 2025_06_000, released in June 2025. | ||||
| CVE-2024-55398 | 1 4cstrategies | 1 Exonaut | 2025-10-01 | 6.5 Medium |
| 4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions. | ||||
| CVE-2024-55402 | 1 4cstrategies | 1 Exonaut | 2025-10-01 | 5.3 Medium |
| 4C Strategies Exonaut before v22.4 was discovered to contain an access control issue. | ||||
| CVE-2025-46660 | 1 4cstrategies | 1 Exonaut | 2025-10-01 | 5.3 Medium |
| An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are hashed without a salt. | ||||
| CVE-2024-55401 | 1 4cstrategies | 1 Exonaut | 2025-10-01 | 6.5 Medium |
| An issue in 4C Strategies Exonaut before v22.4 allows attackers to execute a directory traversal. | ||||
| CVE-2025-51533 | 2 Sage, Sagedpw | 2 Dpw, Sage Dpw | 2025-10-01 | 5.3 Medium |
| An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access internal forms via sending a crafted GET request. | ||||