Recent Vulnerabilities

Sources: amazon_linux archlinux azure_linux bitnami_vulndb capec capec_enrichment_dashboard certeu certfr circl_kev cisa_known_exploited cna_scorecard cnvd csaf_abb csaf_adstecindustrialitgmbh csaf_amd csaf_aumariestergmbhcokg csaf_baadem2mproductsgmbh csaf_beckhoffautomationgmbhcokg csaf_bendergmbhcokg csaf_bosch csaf_bsi csaf_bsi_aggregator csaf_bsi_cvd_white csaf_bsi_white csaf_bsi_wid_white csaf_carlogavazziautomation csaf_certbund csaf_certvde csaf_cisa csaf_cisa_it csaf_cisa_ot csaf_cisco csaf_claaskgaa csaf_codesysgmbh csaf_dell csaf_duraggmbh csaf_endresshauserag csaf_ericsson csaf_euchnergmbhcokg csaf_festosecokg csaf_frauschersensortechnikgmbh csaf_hancom csaf_harmaninternational csaf_helmholzgmbhcokg csaf_himapaulhildebrandtgmbh csaf_hitachi csaf_hpe csaf_huawei csaf_hydacinternationalgmbh csaf_ibm csaf_ifmelectronicgmbh csaf_janitzaelectronicsgmbh csaf_jumogmbhcokg csaf_juniper csaf_kebautomationkg csaf_kukaag csaf_lenovo csaf_lenzese csaf_mbconnectlinegmbh csaf_mettlertoledogmbh csaf_metzconnectgmbh csaf_microsoft csaf_mieleciekg csaf_moxa csaf_murrelektronikgmbh csaf_ncscnl csaf_ndaal csaf_netapp csaf_nozomi csaf_nozominetworks csaf_nvidia csaf_opcfoundation csaf_openeuler csaf_opensuse csaf_oracle csaf_ox csaf_paloalto csaf_panasonic csaf_pentagrid csaf_pepperlfuchsse csaf_phoenix csaf_pilzgmbhcokg csaf_qnap csaf_redhat csaf_samsung csaf_sauterag csaf_schneider csaf_sick csaf_siemens csaf_smasolartechnologyag csaf_suse csaf_swarcotrafficsystemsgmbh csaf_synology csaf_tibco csaf_trend csaf_trumpfsecokg csaf_trustsource csaf_tuxcare csaf_ubiquiti csaf_vartastoragegmbh csaf_vegagrieshaberkg csaf_vmware csaf_wagogmbhcokg csaf_weidmuellerinterfacegmbhcokg csaf_welotecgmbh csaf_wiesemanntheisgmbh csaf_yaskawaeuropegmbh csaf_yokogawa csaf_zyxel cve_forecast cve_icu cve_vs_github_dashboard cvelistv5 cwe_dashboard cwe_enrichment cwec debian_rustsec debian_security_tracker drupal emb3d emb3d_dashboard epss_dashboard epss_history epss_kev_enrichment euvd_kev fedora fkie_nvd freebsd gcve gcve_enriched gcve_enrichment gcve_enrichment_dashboard gentoo github gsd jvn kev_ransomware mitre_attack moksha ndaal_kev netbsd nuclei_dashboard nuclei_enrichment nvd nvd_cpe_dictionary openbsd opencve oracle_linux ossf_malicious_packages osv_almalinux osv_alpine osv_android osv_bellsoft osv_chainguard osv_cran osv_github_actions osv_golang osv_haskell osv_hex osv_linux osv_maven osv_npm osv_nuget osv_ocaml osv_ossfuzz osv_packagist osv_pub osv_rocky osv_rubygems osv_rustsec osv_swift osv_ubuntu osv_wolfi publish_stats pysec sadp_pilot ssvc ssvc_dashboard tailscale tsunami_enrichment variot vulncheck_kev vulnrichment Clear
ID Title Severity CVSS Source Updated
cve-2025-5278 A flaw was found in GNU Coreutils MEDIUM 4.4 cvelistv5 2026-11-06
cve-2025-25208 A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the cluster MEDIUM 5.7 cvelistv5 2026-11-06
cve-2025-25207 The Authorino service in the Red Hat Connectivity Link is the authorization service for zero trust API security MEDIUM 5.7 cvelistv5 2026-11-06
cve-2024-7259 A flaw was found in oVirt MEDIUM 4.9 cvelistv5 2026-11-06
cve-2025-7425 A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memor... HIGH 7.8 cvelistv5 2026-11-06
cve-2025-6020 SUSE CVE CVE-2025-6020 HIGH 7.0 cvelistv5 2026-09-05
cve-2025-5914 SUSE CVE CVE-2025-5914 HIGH 7.0 cvelistv5 2026-08-31
cve-2025-63604 A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code exec... MEDIUM 6.5 cvelistv5 2026-11-05
cve-2025-61224 Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'[56.1] allows a remote attacker to execute arbi... MEDIUM 6.5 cvelistv5 2026-11-05
cve-2025-61198 A stored cross-site scripting (XSS) vulnerability in Optimod 5950 - Optimod 5950HD - Optimod 5750 - Optimod 5750HD - ... MEDIUM 5.4 cvelistv5 2026-11-05
cve-2025-61197 An issue in Orban Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio Optimod version 1.0.0.33 -... HIGH 8.9 cvelistv5 2026-11-05
cve-2025-61188 Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability MEDIUM 6.3 cvelistv5 2026-11-05
cve-2025-61096 PHPGurukul Online Shopping Portal Project v2.1 is vulnerable to SQL Injection in /shopping/login.php via the fullname... MEDIUM 6.5 cvelistv5 2026-11-05
cve-2025-61087 SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the Customer Name... MEDIUM 6.1 cvelistv5 2026-11-05
cve-2025-61045 TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the mac paramete... CRITICAL 9.8 cvelistv5 2026-11-05
cve-2025-61044 TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the agentName pa... CRITICAL 9.8 cvelistv5 2026-11-05
cve-2025-60991 A reflected cross-site scripted (XSS) vulnerability in Codazon Magento Themes v1.1.0.0 to v2.4.7 allows attackers to ... HIGH 8.8 cvelistv5 2026-11-05
cve-2025-60969 Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0076-000 Ver 4... MEDIUM 5.7 cvelistv5 2026-11-05
cve-2025-60967 Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0076-00... HIGH 7.3 cvelistv5 2026-11-05
cve-2025-60965 OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver ... CRITICAL 9.1 cvelistv5 2026-11-05
cve-2025-60964 OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver ... CRITICAL 9.1 cvelistv5 2026-11-05
cve-2025-60963 OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver ... HIGH 8.2 cvelistv5 2026-11-05
cve-2025-60962 OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver ... HIGH 8.2 cvelistv5 2026-11-05
cve-2025-60961 Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-00... MEDIUM 6.1 cvelistv5 2026-11-05
cve-2025-60960 OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver ... HIGH 8.2 cvelistv5 2026-11-05
cve-2025-60959 OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver ... HIGH 8.2 cvelistv5 2026-11-05
cve-2025-60958 Cross Site Scripting (XSS) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-00... HIGH 7.3 cvelistv5 2026-11-05
cve-2025-60957 OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver ... CRITICAL 9.9 cvelistv5 2026-11-05
cve-2025-60956 Cross Site Request Forgery (CSRF) vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-... HIGH 8.0 cvelistv5 2026-11-05
cve-2025-60833 An XML External Entity (XXE) vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers t... MEDIUM 6.5 cvelistv5 2026-11-05