Total CVEs detected worldwide to date.
CVE Threat Dashboard - Common Vulnerabilities and Exposures Database
CVE Database Dashboard – Real-time tracking of cybersecurity threats. Monitor the latest Common Vulnerabilities and Exposures (CVEs), analyze trends, and stay informed with real-time security intelligence, updated every 30 minutes. Be the first to spot emerging vulnerabilities and strengthen your defense. Explore the latest CVEs affecting software, systems, and networks worldwide.
Tracking all new vulnerabilities.
Ongoing analysis for enhanced threat understanding.
Top 10 CVE Newest Entries - Real-Time Updates
Stay ahead of cybersecurity threats with real-time updates on the latest vulnerabilities. This section highlights the top 10 most recently disclosed Common Vulnerabilities and Exposures (CVEs). Explore details, impact assessments, and mitigation strategies to safeguard your systems.
-
CVE-2025-12854 Moderate Vulnerability Alert
Detected on 07 Nov 2025, 13:15 UTC (only 1 hour ago)
A vulnerability was identified in newbee-mall-plus up to 2.4.1. This vulnerability affects the function executeSeckill of the file /seckillExecution/. The manipulation of the argument userid leads ...
-
CVE-2025-12853 Security Flaw Alert
Detected on 07 Nov 2025, 13:15 UTC (only 1 hour ago)
A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. This affects the function delete_house of the file /admin_class.php. Executing manipulation of the argument...
-
CVE-2025-10968 Severe Vulnerability Alert
Detected on 07 Nov 2025, 13:15 UTC (only 1 hour ago)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in GG Soft Software Services Inc. PaperWork allows Blind SQL...
-
CVE-2025-10870 Security Notice
Detected on 07 Nov 2025, 10:15 UTC (only 4 hours ago)⏳ Analysis in Progress
SQL injection vulnerability in DIAL's CentrosNet v2.64. Allows an attacker to retrieve, create, update, and delete databases by sending POST and GET requests with the 'ultralogin' parameter in '/ce...
-
CVE-2025-46413 Risk & Patch Advisory
Detected on 07 Nov 2025, 09:15 UTC (only 5 hours ago)
Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker.
-
CVE-2025-10966 Vulnerability Insight
Detected on 07 Nov 2025, 08:15 UTC (only 6 hours ago)⏳ Analysis in Progress
curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.
-
CVE-2025-64346 Vulnerability Insight
Detected on 07 Nov 2025, 06:15 UTC (only 8 hours ago)⏳ Analysis in Progress
archives is a Go library for extracting archives (tar, zip, etc.). Version 1.0.0 does not prevent a malicious user to feed a specially crafted archive to the library causing RCE, modification of fi...
-
CVE-2025-64343 Severe Cybersecurity Threat
Detected on 07 Nov 2025, 06:15 UTC (only 8 hours ago)
(conda) Constructor is a tool that enables users to create installers for conda package collections. In versions 3.12.2 and below, the installation directory inherits permissions from its parent d...
-
CVE-2025-64339 Security Notice
Detected on 07 Nov 2025, 06:15 UTC (only 8 hours ago)⏳ Analysis in Progress
ClipBucket v5 is an open source video sharing platform. In versions 5.5.2-#146 and below, the Manage Playlists feature is vulnerable to stored Cross-site Scripting (XSS),specifically in the Playlis...
-
CVE-2025-12527 Cybersecurity Threat Advisory
Detected on 07 Nov 2025, 06:15 UTC (only 8 hours ago)
The Page & Post Notes plugin for WordPress is vulnerable to unauthorized modification of notes due to a missing capability check on the 'yydev_notes_save_dashboard_data' function in all versions up...
Anticipate and Assess Emerging Threats
With the constant rise of new vulnerabilities, anticipating potential threats is critical to safeguarding your systems. Beyond simply consulting the CVE database, it is essential to understand the potential impact of each vulnerability and maintain a continuous vulnerability management strategy. By quickly identifying the exploits that can affect your resources, you enhance your organization’s security posture in the face of targeted attacks.
- Proactive Monitoring: regularly review bulletins and CVE updates.
- Risk Analysis: prioritize vulnerabilities based on their severity and the affected environment.
- Collaboration: coordinate with business teams to implement timely fixes and mitigate risks.
Recently Updated Vulnerabilities
Keep track of recent changes to existing vulnerabilities. This section highlights the latest modifications to CVE records, ensuring you have the most current information for effective vulnerability management.
Discover the most recent updates to CVEs, including critical vulnerabilities and their revised scores. Stay ahead of threats by accessing updated security details.
-
CVE-2025-12478 Emergency Security Advisory
Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . -
CVE-2025-12479 Urgent Exploit Warning
Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . -
CVE-2025-12854 Security Issue Details
A vulnerability was identified in newbee-mall-plus up to 2.4.1. This vulnerability affects the function executeSeckill of the file /seckillExecution/. The manipulation of the ar... -
CVE-2025-12853 Cybersecurity Threat Advisory
A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. This affects the function delete_house of the file /admin_class.php. Executing manipula... -
CVE-2025-10968 Severe Vulnerability Alert
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in GG Soft Software Services Inc. PaperW...
Top Critical CVEs - Highest Severity Risks
Monitor vulnerabilities that are pending detailed examination. This section lists the ten most recent CVEs that are awaiting comprehensive analysis, allowing you to anticipate potential risks.
Discover the Top Critical CVEs
Explore the most critical CVEs with the highest severity scores. Prioritize these vulnerabilities to safeguard your systems against the most dangerous threats.
- CVE-2025-64180 High-Severity Security Breach Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical vulnerability permits unauthorized access to internal networ...
- CVE-2025-6327 Critical Vulnerability Alert Unrestricted Upload of File with Dangerous Type vulnerability in KingAddons.com King Addons for Elementor king-addons allows Upload a Web Shell to a Web Server.This issue affect...
- CVE-2025-55108 Critical Vulnerability Alert The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions when mutual SSL/TLS authentication is ...
- CVE-2025-61956 Emergency Security Advisory Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations witho...
- CVE-2025-61945 Emergency Security Advisory Radiometrics VizAir is vulnerable to any remote attacker via access to the admin panel of the VizAir system without authentication. Once inside, the attacker can modify critical...
Understanding the CVE Landscape
Keeping track of the most recent Common Vulnerabilities and Exposures (CVEs) is essential for businesses aiming to strengthen their cybersecurity posture. By monitoring newly disclosed vulnerabilities, security teams can proactively patch critical flaws, mitigate the risk of exploits, and safeguard critical infrastructures. Our curated list of the Top 10 Latest CVEs reflects real-time updates, ensuring you stay informed about newly released advisories across multiple vendors.
Average CVSS Score Over the Last 30 Days
6.14
Assess the severity of recent vulnerabilities. This section displays the average Common Vulnerability Scoring System (CVSS) score for CVEs reported in the past 30 days, indicating the criticality level of recent threats.
Number of Critical CVSS Scores (Above 9)
17497
Identify the count of highly severe vulnerabilities. This section enumerates the number of CVEs with a CVSS score above 9, signifying critical security issues that require immediate attention.
Assessing Risk Through CVSS Scores
CVSS (Common Vulnerability Scoring System) provides a standardized way to gauge the severity of vulnerabilities. High-severity or critical CVEs often require immediate attention, especially if they affect widely used software components. Failing to address them promptly can lead to unauthorized access, data breaches, and operational disruptions. Our platform not only highlights top-scoring vulnerabilities but also provides direct links to remediation steps and references.
Monthly CVE Growth
-11.3 %
Understand the trend of vulnerabilities over the past month. This section presents statistical data on the growth of CVEs in the last 30 days, helping you gauge the current security landscape.
Quarterly CVE Growth
10.8 %
Analyze the increase in vulnerabilities over the past quarter. This section provides insights into the quarterly growth of CVEs, assisting in long-term security planning.
Annual CVE Growth
24.9 %
Review the yearly escalation of reported vulnerabilities. This section offers an overview of the annual growth in CVEs, highlighting the evolving nature of security threats.
Strengthen Remediation and Patch Management
Once critical flaws are identified, deploying fixes swiftly and methodically is essential to minimize the impact of vulnerabilities on your infrastructure. Remediation efforts should be part of an overall patch management program and regular security audits. By optimizing your update process and performing routine tests, you reduce residual risks that attackers could otherwise exploit.
For more information on best practices for vulnerability fixes and improving response time, please visit our dedicated page: How to Fix CVEs .