Search

Expected end of text, found ':' (at char 27), (line:1, col:28)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (317991 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-11696 1 Rockwellautomation 1 Studio 5000 Simulation Interface 2025-11-12 N/A
A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes.
CVE-2025-9408 1 Zephyrproject-rtos 1 Zephyr 2025-11-12 8.2 High
System call entry on Cortex M (and possibly R and A, but I think not) has a race which allows very practical privilege escalation for malicious userspace processes.
CVE-2025-13032 3 Avast, Avg, Microsoft 3 Antivirus, Antivirus, Windows 2025-11-12 9.9 Critical
Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overflow.
CVE-2025-41105 1 Fairsketch 1 Rise Crm Framework 2025-11-12 N/A
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/tickets/save'.
CVE-2025-13019 1 Mozilla 2 Firefox, Firefox Esr 2025-11-12 6.1 Medium
Same-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5.
CVE-2025-13012 1 Mozilla 2 Firefox, Firefox Esr 2025-11-12 7.5 High
Race condition in the Graphics component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, and Firefox ESR < 115.30.
CVE-2025-13014 1 Mozilla 2 Firefox, Firefox Esr 2025-11-12 6.1 Medium
Use-after-free in the Audio/Video component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, and Firefox ESR < 115.30.
CVE-2025-41101 1 Fairsketch 1 Rise Crm Framework 2025-11-12 N/A
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in'/projects/save'.
CVE-2025-13018 1 Mozilla 2 Firefox, Firefox Esr 2025-11-12 6.1 Medium
Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5.
CVE-2025-13020 1 Mozilla 2 Firefox, Firefox Esr 2025-11-12 6.1 Medium
Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5.
CVE-2025-13026 1 Mozilla 1 Firefox 2025-11-12 7.5 High
Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145.
CVE-2025-13016 1 Mozilla 2 Firefox, Firefox Esr 2025-11-12 7.5 High
Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5.
CVE-2025-64773 1 Jetbrains 1 Youtrack 2025-11-12 2.7 Low
In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit
CVE-2025-13022 1 Mozilla 1 Firefox 2025-11-12 7.5 High
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145.
CVE-2025-11862 1 Rockwellautomation 1 Verve Asset Manager 2025-11-12 N/A
A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API.
CVE-2025-11960 1 Aryom 1 Kvknet 2025-11-12 6.1 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Aryom Software High Technology Systems Inc. KVKNET allows Reflected XSS.This issue affects KVKNET: before 2.1.8.
CVE-2025-41103 1 Fairsketch 1 Rise Crm Framework 2025-11-12 N/A
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'reply_message' in '/messages/reply'.
CVE-2025-11697 1 Rockwellautomation 1 Studio 5000 Simulation Interface 2025-11-12 N/A
A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to extract files using path traversal sequences, resulting in execution of scripts with Administrator privileges on system reboot.
CVE-2025-32732 2 Intel, Microsoft 4 Qat Driver, Qat Driver Firmware, Qat Drivers and 1 more 2025-11-12 6.6 Medium
Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVE-2025-24516 1 Intel 1 Cip Software 2025-11-12 4.5 Medium
Improper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.