Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

4.0

MEDIUM

CVE-2016-3516

Unspecified vulnerability in the Oracle Enterprise Communications Broker component in Oracle Communications Applications before PCz 2.0.0m4p1 allows remote authenticated users to affect confidentiality via vectors related to GUI, a different vulnerability...

Affected Products : enterprise_communications_broker
Published: Jul. 21, 2016

Modified: Apr. 12, 2025
4.0

MEDIUM

CVE-2015-4752

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to Server : I_S....

Affected Products : ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_tus mysql enterprise_linux_eus mariadb +2 more products
Published: Jul. 16, 2015

Modified: Apr. 12, 2025
4.0

MEDIUM

CVE-2016-11077

An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of an LDAP account....

Affected Products : mattermost_server
Published: Jun. 19, 2020

Modified: Nov. 21, 2024
4.0

MEDIUM

CVE-2016-3024

IBM Security Access Manager for Web allows web pages to be stored locally which can be read by another user on the system....

Affected Products : security_access_manager_9.0_firmware security_access_manager_for_web_8.0_firmware security_access_manager_for_web_appliance security_access_manager_for_mobile_8.0_firmware security_access_manager_for_mobile_appliance
Published: Feb. 01, 2017

Modified: Apr. 20, 2025
4.0

MEDIUM

CVE-2015-2571

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer....

Affected Products : ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_tus mysql enterprise_linux_eus mariadb +4 more products
Published: Apr. 16, 2015

Modified: Apr. 12, 2025
4.0

MEDIUM

CVE-2016-2947

IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 4.0 ...

Affected Products : rational_doors_next_generation rational_collaborative_lifecycle_management rational_engineering_lifecycle_manager rational_quality_manager rational_rhapsody_design_manager rational_software_architect_design_manager rational_team_concert
Published: Nov. 25, 2016

Modified: Apr. 12, 2025
4.0

MEDIUM

CVE-2016-2868

IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue....

Affected Products : qradar_security_information_and_event_manager
Published: Jul. 02, 2016

Modified: Apr. 12, 2025
4.0

MEDIUM

CVE-2006-5198

The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."...

Affected Products : winzip
Published: Nov. 14, 2006

Modified: Apr. 09, 2025
4.0

MEDIUM

CVE-2006-6058

The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function. NOTE: this issue might be...

Affected Products : linux_kernel
Published: Nov. 22, 2006

Modified: Apr. 09, 2025
4.0

MEDIUM

CVE-2021-32653

Nextcloud Server is a Nextcloud package that handles data storage. Nextcloud Server versions prior to 19.0.11, 20.0.10, or 21.0.2 send user IDs to the lookup server even if the user has no fields set to published. The vulnerability is patched in versions ...

Affected Products : nextcloud_server notes
Published: Jun. 01, 2021

Modified: Nov. 21, 2024
4.0

MEDIUM

CVE-2017-3317

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker...

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_tus mysql enterprise_linux_eus mariadb
Published: Jan. 27, 2017

Modified: Apr. 20, 2025
4.0

MEDIUM

CVE-2006-3934

Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download arbitrary files via an absolute pathname in the filePath parameter....

Affected Products : opencms
Published: Jul. 31, 2006

Modified: Apr. 03, 2025
4.0

MEDIUM

CVE-2021-36057

XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local applic...

Affected Products : debian_linux xmp_toolkit_software_development_kit
Published: Sep. 01, 2021

Modified: Nov. 21, 2024
4.0

MEDIUM

CVE-2017-3318

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high priv...

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_tus mysql enterprise_linux_eus mariadb
Published: Jan. 27, 2017

Modified: Apr. 20, 2025
4.0

MEDIUM

CVE-2021-2326

Vulnerability in the Database Vault component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to...

Affected Products : database_server database_vault
Published: Jul. 21, 2021

Modified: Nov. 21, 2024
4.0

MEDIUM

CVE-2014-6131

IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 ...

Affected Products : rational_doors_next_generation rational_collaborative_lifecycle_management rational_quality_manager rational_team_concert rational_requirements_composer
Published: Mar. 18, 2015

Modified: Apr. 12, 2025
4.0

MEDIUM

CVE-2020-36826

A vulnerability was found in AwesomestCode LiveBot. It has been classified as problematic. Affected is the function parseSend of the file js/parseMessage.js. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Thi...

Affected Products :
Published: Mar. 25, 2024

Modified: Nov. 21, 2024
4.0

MEDIUM

CVE-2012-3168

Unspecified vulnerability in the Siebel CRM component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect availability via unknown vectors related to Siebel Core - Server Infrastructure....

Affected Products : siebel_crm
Published: Jan. 17, 2013

Modified: Apr. 11, 2025
4.0

MEDIUM

CVE-2014-3641

The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header....

Affected Products : cinder
Published: Oct. 08, 2014

Modified: Apr. 12, 2025
4.0

MEDIUM

CVE-2014-3667

Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code....

Affected Products : openshift jenkins
Published: Oct. 16, 2014

Modified: Apr. 12, 2025

Showing 20 of 293510 Results

Browse by Apps

Latest CVE Feed

4.0

4.0

4.0

4.0

4.0

4.0

4.0

4.0

4.0

4.0

4.0

4.0

4.0

4.0

4.0

4.0

4.0

4.0

4.0

4.0

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable