Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 10.0

    HIGH
    CVE-2025-14706

    A vulnerability was identified in Shiguangwu sgwbox N3 2.0.25. This impacts an unknown function of the file /usr/sbin/http_eshell_server of the component NETREBOOT Interface. Such manipulation leads to command injection. The attack can be launched remotel... Read more

    Affected Products : n3_nas n3_firmware n3
    • Published: Dec. 15, 2025
    • Modified: Dec. 31, 2025
    • Vuln Type: Injection

  • 10.0

    CRITICAL
    CVE-2025-63414

    A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an unauthenticated remote attacker to achieve arbitrary command execution. By sending a crafted HTTP request to the /html/execute.php endpoint with a malicious payload in the... Read more

    Affected Products : allsky
    • Published: Dec. 16, 2025
    • Modified: Dec. 31, 2025
    • Vuln Type: Path Traversal

  • 10.0

    HIGH
    CVE-2025-15010

    A vulnerability has been found in Tenda WH450 1.0.0.18. This issue affects some unknown processing of the file /goform/SafeUrlFilter. The manipulation of the argument page leads to stack-based buffer overflow. Remote exploitation of the attack is possible... Read more

    Affected Products : wh450_firmware wh450
    • Published: Dec. 22, 2025
    • Modified: Dec. 30, 2025
    • Vuln Type: Memory Corruption

  • 10.0

    HIGH
    CVE-2025-15007

    A security vulnerability has been detected in Tenda WH450 1.0.0.18. Affected by this issue is some unknown functionality of the file /goform/L7Im of the component HTTP Request Handler. Such manipulation of the argument page leads to stack-based buffer ove... Read more

    Affected Products : wh450_firmware wh450
    • Published: Dec. 22, 2025
    • Modified: Dec. 30, 2025
    • Vuln Type: Memory Corruption

  • 10.0

    HIGH
    CVE-2025-15006

    A weakness has been identified in Tenda WH450 1.0.0.18. Affected by this vulnerability is an unknown functionality of the file /goform/CheckTools of the component HTTP Request Handler. This manipulation of the argument ipaddress causes stack-based buffer ... Read more

    Affected Products : wh450_firmware wh450
    • Published: Dec. 22, 2025
    • Modified: Dec. 30, 2025
    • Vuln Type: Memory Corruption

  • 10.0

    HIGH
    CVE-2025-14709

    A security vulnerability has been detected in Shiguangwu sgwbox N3 2.0.25. Affected by this issue is some unknown functionality of the file /usr/sbin/http_eshell_server of the component WIRELESSCFGGET Interface. The manipulation of the argument params lea... Read more

    Affected Products : n3_nas n3_firmware n3
    • Published: Dec. 15, 2025
    • Modified: Dec. 30, 2025
    • Vuln Type: Memory Corruption

  • 10.0

    HIGH
    CVE-2025-15047

    A vulnerability was found in Tenda WH450 1.0.0.18. This affects an unknown function of the file /goform/PPTPDClient of the component HTTP Request Handler. Performing manipulation of the argument Username results in stack-based buffer overflow. The attack ... Read more

    Affected Products : wh450_firmware wh450
    • Published: Dec. 23, 2025
    • Modified: Dec. 30, 2025
    • Vuln Type: Memory Corruption

  • 10.0

    HIGH
    CVE-2025-15045

    A flaw has been found in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/Natlimit of the component HTTP Request Handler. This manipulation of the argument page causes stack-based buffer overflow. It is possible to ini... Read more

    Affected Products : wh450_firmware wh450
    • Published: Dec. 23, 2025
    • Modified: Dec. 30, 2025
    • Vuln Type: Memory Corruption

  • 10.0

    HIGH
    CVE-2025-15046

    A vulnerability has been found in Tenda WH450 1.0.0.18. The impacted element is an unknown function of the file /goform/PPTPClient of the component HTTP Request Handler. Such manipulation of the argument netmsk leads to stack-based buffer overflow. It is ... Read more

    Affected Products : wh450_firmware wh450
    • Published: Dec. 23, 2025
    • Modified: Dec. 30, 2025
    • Vuln Type: Memory Corruption

  • 10.0

    HIGH
    CVE-2025-15044

    A vulnerability was detected in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/NatStaticSetting. The manipulation of the argument page results in stack-based buffer overflow. The attack may be performed from remote. The exploit ... Read more

    Affected Products : wh450_firmware wh450
    • Published: Dec. 23, 2025
    • Modified: Dec. 30, 2025
    • Vuln Type: Memory Corruption

  • 10.0

    HIGH
    CVE-2025-14964

    A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083_B20200521. This affects the function sprintf of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument loginAuthUrl leads to stack-based buffer overflow. The attack may be performed fro... Read more

    Affected Products : t10_firmware t10
    • Published: Dec. 19, 2025
    • Modified: Dec. 30, 2025
    • Vuln Type: Memory Corruption

  • 10.0

    CRITICAL
    CVE-2025-14931

    Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face smolagents. Authentication... Read more

    Affected Products :
    • Published: Dec. 23, 2025
    • Modified: Dec. 29, 2025
    • Vuln Type: Injection

  • 10.0

    CRITICAL
    CVE-2025-67108

    eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.... Read more

    Affected Products : fast_dds
    • Published: Dec. 23, 2025
    • Modified: Jan. 02, 2026
    • Vuln Type: Cryptography

  • 10.0

    HIGH
    CVE-2025-15194

    A vulnerability was found in D-Link DIR-600 up to 2.15WWb02. Affected by this vulnerability is an unknown functionality of the file hedwig.cgi of the component HTTP Header Handler. The manipulation of the argument Cookie results in stack-based buffer over... Read more

    Affected Products : dir-600_firmware
    • Published: Dec. 29, 2025
    • Modified: Dec. 31, 2025
    • Vuln Type: Memory Corruption

  • 10.0

    CRITICAL
    CVE-2025-67288

    An arbitrary file upload vulnerability in Umbraco CMS v16.3.3 allows attackers to execute arbitrary code by uploading a crafted PDF file. NOTE: this is disputed by the Supplier because the responsibility for file validation (as shown in the documentation)... Read more

    Affected Products : umbraco_cms
    • Published: Dec. 22, 2025
    • Modified: Jan. 08, 2026
    • Vuln Type: Misconfiguration

  • 10.0

    HIGH
    CVE-2025-14879

    A weakness has been identified in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/onSSIDChange of the component HTTP Request Handler. This manipulation of the argument ssid_index causes stack-based buffer overflow. It is possible... Read more

    Affected Products : wh450_firmware wh450
    • Published: Dec. 18, 2025
    • Modified: Dec. 24, 2025
    • Vuln Type: Memory Corruption

  • 10.0

    CRITICAL
    CVE-2026-21858

    n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to ... Read more

    Affected Products : n8n
    • Published: Jan. 08, 2026
    • Modified: Jan. 08, 2026
    • Vuln Type: Path Traversal

  • 10.0

    HIGH
    CVE-2025-14708

    A weakness has been identified in Shiguangwu sgwbox N3 2.0.25. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/http_eshell_server of the component WIREDCFGGET Interface. Executing manipulation of the argument params can le... Read more

    Affected Products : n3_nas n3_firmware n3
    • Published: Dec. 15, 2025
    • Modified: Jan. 09, 2026
    • Vuln Type: Memory Corruption

  • 10.0

    CRITICAL
    CVE-2025-65037

    Improper control of generation of code ('code injection') in Azure Container Apps allows an unauthorized attacker to execute code over a network.... Read more

    Affected Products : azure_container_apps
    • Published: Dec. 18, 2025
    • Modified: Dec. 19, 2025

  • 10.0

    HIGH
    CVE-2025-14665

    A security flaw has been discovered in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/DhcpListClient of the component HTTP Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack... Read more

    Affected Products : wh450_firmware wh450
    • Published: Dec. 14, 2025
    • Modified: Dec. 22, 2025
    • Vuln Type: Memory Corruption
Showing 20 of 4406 Results