Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

10.0

CRITICAL

CVE-2024-51551

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02...

Affected Products :
Published: Dec. 05, 2024

Modified: Dec. 05, 2024
10.0

HIGH

CVE-2022-1039

The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by defaul...

Affected Products : da50n_firmware da50n
EPSS Score: %0.21

Published: Apr. 20, 2022

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2024-28354

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.@smb[%d].username in the apply.cgi interface, thereby gaining root shell pr...

Affected Products : tew-827dru_firmware tew-827dru
Published: Mar. 15, 2024

Modified: Apr. 01, 2025
10.0

HIGH

CVE-2011-2595

Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a (1) String or (2) Int tag in a FotoSlate Project (aka PLP) file....

Affected Products : fotoslate
EPSS Score: %74.00

Published: Sep. 14, 2011

Modified: Apr. 11, 2025
10.0

CRITICAL

CVE-2022-40981

All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior is vulnerable to malicious file upload. An attacker could take advantage of this to store malicious files on the server, which could override sensitive and useful existing files on th...

Affected Products : remote_access_server_firmware ras-c-100-lw ras-e-100 ras-e-220 ras-e-400 ras-ec-220-lw ras-ec-400-lw ras-ec-480-lw ras-ecw-220-lw ras-ecw-400-lw +4 more products
EPSS Score: %0.04

Published: Nov. 10, 2022

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2024-33566

Missing Authorization vulnerability in N-Media OrderConvo allows OS Command Injection.This issue affects OrderConvo: from n/a through 12.4. ...

Affected Products :
Published: Apr. 29, 2024

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2022-1375

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_slogHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system com...

Affected Products : diaenergie
EPSS Score: %0.22

Published: May. 02, 2022

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2017-14479

In the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for Solaris), a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution wi...

Affected Products : mysql_multi-master_replication_manager
EPSS Score: %5.01

Published: May. 09, 2018

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2024-6886

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0....

Affected Products : gitea
Published: Aug. 06, 2024

Modified: Aug. 06, 2024
10.0

HIGH

CVE-2021-27692

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted "action/umountUSBPartition" request. This occurs because the "formSetUS...

Affected Products : g1_firmware g3_firmware g3 g1
EPSS Score: %2.58

Published: Apr. 16, 2021

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2024-8353

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.1 via deserialization of untrusted input via several parameters like 'give_title' and 'card_address...

Affected Products : givewp
Published: Sep. 28, 2024

Modified: Oct. 01, 2024
10.0

HIGH

CVE-2009-0718

Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to execute arbitrary code via unknown vectors....

Affected Products : storageworks_storage_mirroring
EPSS Score: %5.16

Published: Apr. 21, 2009

Modified: Apr. 09, 2025
10.0

CRITICAL

CVE-2024-6298

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely...

Affected Products : aspect-ent-2_firmware aspect-ent-12_firmware aspect-ent-256_firmware aspect-ent-96_firmware nexus-2128_firmware nexus-2128-a_firmware nexus-2128-g_firmware nexus-2128-f_firmware nexus-3-2128_firmware nexus-3-264_firmware +28 more products
Published: Jul. 05, 2024

Modified: Dec. 05, 2024
10.0

HIGH

CVE-2008-0528

Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data....

Affected Products : unified_ip_phone skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware
EPSS Score: %8.91

Published: Feb. 15, 2008

Modified: Apr. 09, 2025
10.0

HIGH

CVE-2017-9860

An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network protocol to update the device firmware without ever having to authenticate. If an attacker is able to create a custom firmware version th...

Affected Products : sunny_boy_3600_firmware sunny_boy_5000_firmware sunny_tripower_core1_firmware sunny_tripower_15000tl_firmware sunny_tripower_20000tl_firmware sunny_tripower_25000tl_firmware sunny_tripower_5000tl_firmware sunny_tripower_12000tl_firmware sunny_tripower_60_firmware sunny_boy_3000tl_firmware +68 more products
EPSS Score: %0.44

Published: Aug. 05, 2017

Modified: Apr. 20, 2025
10.0

HIGH

CVE-2019-10533

Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon We...

Affected Products : qca6574au_firmware sdm660_firmware msm8996au_firmware sd_450_firmware sd_625_firmware sd_820_firmware sd_820a_firmware sd_835_firmware qcs605_firmware sd_675_firmware +68 more products
EPSS Score: %0.25

Published: Nov. 06, 2019

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2019-10534

Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear...

Affected Products : qca6574au_firmware sdm660_firmware msm8996au_firmware sd_450_firmware sd_625_firmware sd_820_firmware sd_820a_firmware sd_835_firmware qcs605_firmware sd_675_firmware +68 more products
EPSS Score: %0.22

Published: Nov. 06, 2019

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2019-10539

Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon ...

Affected Products : qca6574au_firmware ipq8074_firmware qca6574_firmware qca8081_firmware sd_8cx_firmware sdm660_firmware msm8996au_firmware sd_450_firmware sd_625_firmware sd_820_firmware +88 more products
EPSS Score: %0.43

Published: Sep. 30, 2019

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2019-10540

Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdra...

Affected Products : qca6574au_firmware ipq8074_firmware qca8081_firmware sd_8cx_firmware sdm660_firmware msm8996au_firmware sd_820_firmware sd_835_firmware qca6174a_firmware qca9377_firmware +44 more products
EPSS Score: %0.94

Published: Sep. 30, 2019

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2018-0040

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services....

Affected Products : contrail_service_orchestration
EPSS Score: %0.17

Published: Jul. 11, 2018

Modified: Nov. 21, 2024

Showing 20 of 292731 Results

1
...
105
106
107
108
109
110
111
...
14637

Browse by Apps

Latest CVE Feed

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable