Search

Published: All 7d 30d 90d 12m
Severity: All Critical High Medium Low

98,287 CVEs

CVEs (98,287, showing first 500)

Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.

Showing 76–100 of 98,287 (capped at 500)

CVE ID Severity Patch CVSS Published ↑ Description
CVE-2025-60552 HIGH 7.5 2025-10-24 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup.
CVE-2025-60553 CRITICAL 9.8 2025-10-24 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard52.
CVE-2025-60554 CRITICAL 9.8 2025-10-24 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEnableWizard.
CVE-2025-60555 HIGH 7.5 2025-10-24 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizardSelectMode.
CVE-2025-60556 HIGH 7.5 2025-10-24 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizard1.
CVE-2025-60557 HIGH 7.5 2025-10-24 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEasy_Wizard.
CVE-2025-60558 HIGH 7.5 2025-10-24 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formVirtualServ.
CVE-2025-60559 HIGH 7.5 2025-10-24 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetDomainFilter.
CVE-2025-60561 HIGH 7.5 2025-10-24 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEmail.
CVE-2025-60562 HIGH 7.5 2025-10-24 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formWlSiteSurvey.
CVE-2025-60563 HIGH 7.5 2025-10-24 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetPortTr.
CVE-2025-60564 HIGH 7.5 2025-10-24 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetLog.
CVE-2025-60565 HIGH 7.5 2025-10-24 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSchedule.
CVE-2025-60566 HIGH 7.5 2025-10-24 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetMACFilter.
CVE-2025-60801 HIGH Patched 8.2 2025-10-24 jshERP up to commit fbda24da was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the jsh_erp function.
CVE-2025-60803 CRITICAL 9.8 2025-10-24 Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the component /api/aaa;/../register.
CVE-2025-62714 HIGH — 2025-10-24 Karmada Dashboard is a general-purpose, web-based control panel for Karmada which is a multi-cluster management project. Prior to version 0.2.0, there is an authentication …
CVE-2025-60729 MEDIUM 5.3 2025-10-24 PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function
CVE-2025-60730 HIGH 7.6 2025-10-24 PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function
CVE-2025-60731 HIGH 7.6 2025-10-24 PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function
CVE-2025-60735 HIGH 7.6 2025-10-24 PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function
CVE-2025-60419 MEDIUM 6.2 2025-10-24 An issue was discovered in the NDIS Usermode IO driver (RtkIOAC60.sys, version 6.0.5600.16348) allowing local authenticated attackers to send a crafted IOCTL request to the…
CVE-2025-62716 HIGH Patched 8.1 2025-10-24 Plane is open-source project management software. Prior to version 1.1.0, an open redirect vulnerability in the ?next_path query parameter allows attackers to supply arbitr…
CVE-2025-52099 NONE — 2025-10-24 Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-29088. Reason: This record is a duplicate of CVE-2025-29088. Notes: All CVE users should reference CVE-202…
CVE-2025-60954 HIGH 8.3 2025-10-24 Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely we…