Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

9.8

CRITICAL

CVE-2024-28200

The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-abl...

Affected Products : n-central
Published: Jul. 01, 2024

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2017-8911

An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker....

Affected Products : tnef
Published: May. 12, 2017

Modified: Apr. 20, 2025
9.8

CRITICAL

CVE-2014-2023

Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to (1) unsubscribe_forum.php or (2) unsubscribe_t...

Affected Products : tapatalk
Published: Oct. 26, 2017

Modified: Apr. 20, 2025
9.8

CRITICAL

CVE-2020-9493

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution....

Affected Products : log4j reload4j chainsaw
Published: Jun. 16, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2024-28056

Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authentication component is removed from an Amplify project, a Condition property is removed but "Effect":"Allow" re...

Affected Products : amplify_cli
Published: Apr. 15, 2024

Modified: Jun. 30, 2025
9.8

CRITICAL

CVE-2018-6959

VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking of a valid vRA user's session....

Affected Products : vrealize_automation
Published: Apr. 13, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2020-29283

An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php....

Affected Products : online_doctor_appointment_booking_system_php_and_mysql
Published: Dec. 02, 2020

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2018-8088

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 ...

Affected Products : enterprise_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_tus enterprise_linux_eus goldengate_application_adapters virtualization virtualization_host +5 more products
Published: Mar. 20, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2017-5430

Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerabil...

Affected Products : firefox firefox_esr thunderbird enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation
Published: Jun. 11, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2020-28940

On Western Digital My Cloud OS 5 devices before 5.06.115, the NAS Admin dashboard has an authentication bypass vulnerability that could allow an unauthenticated user to execute privileged commands on the device....

Affected Products : my_cloud_os_5 my_cloud_ex2_ultra my_cloud_ex4100 my_cloud_pr2100 my_cloud_pr4100 my_cloud_mirror_gen_2
Published: Dec. 01, 2020

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2020-28929

Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrative hashed credentials via the maintenance/troubleshoot.php?download=1 URI....

Affected Products : eps_tse_server_8_firmware eps_tse_server_8
Published: Dec. 16, 2020

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2014-1510

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to tri...

Affected Products : firefox firefox_esr thunderbird ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus +7 more products
Published: Mar. 19, 2014

Modified: Apr. 12, 2025
9.8

CRITICAL

CVE-2024-27841

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An app may be able to disclose kernel memory....

Affected Products : macos iphone_os ipados
Published: May. 14, 2024

Modified: Dec. 09, 2024
9.8

CRITICAL

CVE-2014-1532

Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to execute arbitr...

Affected Products : firefox firefox_esr thunderbird ubuntu_linux fedora debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus +6 more products
Published: Apr. 30, 2014

Modified: Apr. 12, 2025
9.8

CRITICAL

CVE-2014-1511

Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors....

Affected Products : firefox firefox_esr thunderbird ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus +7 more products
Published: Mar. 19, 2014

Modified: Apr. 12, 2025
9.8

CRITICAL

CVE-2017-5897

The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds access....

Affected Products : linux_kernel ubuntu_linux debian_linux
Published: Mar. 23, 2017

Modified: Apr. 20, 2025
9.8

CRITICAL

CVE-2020-28926

ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove....

Affected Products : debian_linux readymedia
Published: Nov. 30, 2020

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2019-0725

A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Remote Code Execution Vulnerability'....

Affected Products : windows_10 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server
Published: May. 16, 2019

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2014-1514

vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to execute...

Affected Products : firefox firefox_esr thunderbird ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus +7 more products
Published: Mar. 19, 2014

Modified: Apr. 12, 2025
9.8

CRITICAL

CVE-2024-27810

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to read sensitive location information....

Affected Products : macos iphone_os tvos watchos ipad_os ipados
Published: May. 14, 2024

Modified: Dec. 12, 2024

Showing 20 of 293353 Results

1
...
1421
1422
1423
1424
1425
1426
1427
...
14668

Browse by Apps

Latest CVE Feed

9.8

9.8

9.8

9.8

9.8

9.8

9.8

9.8

9.8

9.8

9.8

9.8

9.8

9.8

9.8

9.8

9.8

9.8

9.8

9.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable