Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

3.1

LOW

CVE-2023-38158

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability...

Affected Products : edge_chromium
EPSS Score: %0.87

Published: Aug. 21, 2023

Modified: Feb. 28, 2025
3.1

LOW

CVE-2019-15126

An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of ...

Affected Products : mac_os_x iphone_os ipados simatic_rf350m_firmware simatic_rf650m_firmware simotics_connect_400_firmware bcm4389_firmware bcm43012_firmware bcm43013_firmware bcm4375_firmware +8 more products
EPSS Score: %7.99

Published: Feb. 05, 2020

Modified: Nov. 21, 2024
3.1

LOW

CVE-2023-49619

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will o...

Affected Products : answer
EPSS Score: %0.98

Published: Jan. 10, 2024

Modified: Jun. 11, 2025
3.1

LOW

CVE-2023-22006

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise ...

Affected Products : debian_linux active_iq_unified_manager oncommand_insight jdk jre graalvm 7-mode_transition_tool graalvm_for_jdk cloud_insights_acquisition_unit cloud_insights_storage_workload_security_agent
EPSS Score: %0.12

Published: Jul. 18, 2023

Modified: Nov. 21, 2024
3.1

LOW

CVE-2009-3552

In RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client-side Red Hat Enterprise Virtualization Manager interface (a Windows Presentation Foundation (WPF) XAML browser application) to connect to the Red Hat Enterpr...

Affected Products : enterprise_virtualization_manager
EPSS Score: %0.19

Published: Nov. 09, 2019

Modified: Nov. 21, 2024
3.1

LOW

CVE-2017-11791

ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Serve...

Affected Products : edge windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 chakracore internet_explorer
EPSS Score: %15.44

Published: Nov. 15, 2017

Modified: Apr. 20, 2025
3.1

LOW

CVE-2017-10345

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploi...

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_tus active_iq_unified_manager cloud_backup enterprise_linux_eus oncommand_balance +20 more products
EPSS Score: %0.52

Published: Oct. 19, 2017

Modified: Apr. 20, 2025
3.1

LOW

CVE-2017-15352

Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C0...

Affected Products : oceanstor_2800_firmware oceanstor_5300_firmware oceanstor_5500_firmware oceanstor_5600_firmware oceanstor_5800_firmware oceanstor_2800 oceanstor_5300 oceanstor_5500 oceanstor_5600 oceanstor_5800
EPSS Score: %0.03

Published: Feb. 15, 2018

Modified: Nov. 21, 2024
3.1

LOW

CVE-2023-23395

Microsoft SharePoint Server Spoofing Vulnerability...

Affected Products : sharepoint_foundation sharepoint_server
EPSS Score: %0.85

Published: Mar. 14, 2023

Modified: Nov. 21, 2024
3.1

LOW

CVE-2016-5561

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect availability via vectors related to IKE....

Affected Products : solaris
EPSS Score: %0.68

Published: Oct. 25, 2016

Modified: Apr. 12, 2025
3.1

LOW

CVE-2017-2739

The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious applications....

Affected Products : vmall
EPSS Score: %0.02

Published: Nov. 22, 2017

Modified: Apr. 20, 2025
3.1

LOW

CVE-2016-3325

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."...

Affected Products : edge internet_explorer
EPSS Score: %32.34

Published: Sep. 14, 2016

Modified: Apr. 12, 2025
3.1

LOW

CVE-2020-15671

When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox ...

Affected Products : firefox
EPSS Score: %0.14

Published: Oct. 01, 2020

Modified: Nov. 21, 2024
3.1

LOW

CVE-2019-2945

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthentic...

Affected Products : ubuntu_linux enterprise_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation leap enterprise_linux_server_aus enterprise_linux_server_tus enterprise_linux_eus +9 more products
EPSS Score: %0.22

Published: Oct. 16, 2019

Modified: Nov. 21, 2024
3.1

LOW

CVE-2024-13293

Cross-Site Request Forgery (CSRF) vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2....

Affected Products : post_file
Published: Jan. 09, 2025

Modified: Sep. 02, 2025

Vuln Type: Cross-Site Request Forgery
3.1

LOW

CVE-2017-3539

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticat...

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus jdk jre satellite +1 more products
EPSS Score: %0.50

Published: Apr. 24, 2017

Modified: Apr. 20, 2025
3.1

LOW

CVE-2024-43411

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A theoretical vulnerability has been identified in CKEditor 4.22 (and above). In a highly unlikely scenario where an attacker gains control over the https://cke4.ckeditor.com domain, th...

Affected Products : ckeditor
Published: Aug. 21, 2024

Modified: Aug. 21, 2024
3.1

LOW

CVE-2016-4583

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document....

Affected Products : iphone_os tvos safari webkitgtk\+ webkit
EPSS Score: %0.59

Published: Jul. 22, 2016

Modified: Apr. 12, 2025
3.1

LOW

CVE-2024-39458

When Jenkins Structs Plugin 337.v1b_04ea_4df7c8 and earlier fails to configure a build step, it logs a warning message containing diagnostic information that may contain secrets passed as step parameters, potentially resulting in accidental exposure of se...

Affected Products :
Published: Jun. 26, 2024

Modified: Nov. 21, 2024
3.1

LOW

CVE-2024-20923

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exp...

Affected Products : jdk jre graalvm
Published: Feb. 17, 2024

Modified: Mar. 26, 2025

Showing 20 of 292325 Results

Browse by Apps

Latest CVE Feed

3.1

3.1

3.1

3.1

3.1

3.1

3.1

3.1

3.1

3.1

3.1

3.1

3.1

3.1

3.1

3.1

3.1

3.1

3.1

3.1

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable