Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

10.0

HIGH

CVE-2015-7246

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw account, which makes it easier for remote attackers to obtain administrative access....

Affected Products : dvg-n5402sp_firmware dvg-n5402sp
Published: Apr. 24, 2017

Modified: Apr. 20, 2025
10.0

HIGH

CVE-2015-0316

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a differ...

Affected Products : linux_kernel flash_player mac_os_x windows
Published: Feb. 06, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-0324

Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors....

Affected Products : linux_kernel flash_player mac_os_x windows
Published: Feb. 06, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-0346

Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability th...

Affected Products : linux_kernel flash_player mac_os_x opensuse suse_linux_enterprise_desktop windows enterprise_linux_server_supplementary enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary_eus enterprise_linux_workstation_supplementary +1 more products
Published: Apr. 14, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-0235

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 functio...

Affected Products : debian_linux communications_webrtc_session_controller communications_policy_management mac_os_x linux virtualization php vm_virtualbox glibc communications_application_session_controller +11 more products
Published: Jan. 28, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2009-0138

servermgrd (Server Manager) in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify the system configuration....

Affected Products : mac_os_x mac_os_x_server
Published: Feb. 13, 2009

Modified: Apr. 09, 2025
10.0

HIGH

CVE-2015-0335

Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a differ...

Affected Products : linux_kernel flash_player mac_os_x windows
Published: Mar. 13, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-0198

IBM General Parallel File System (GPFS) 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 in certain cipherList configurations allows remote attackers to bypass authentication and execute arbitrary programs as root via unspecified vectors....

Affected Products : general_parallel_file_system
Published: Mar. 24, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2011-0815

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affe...

Affected Products : jre jdk
Published: Jun. 14, 2011

Modified: Apr. 11, 2025
10.0

HIGH

CVE-2011-0873

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, and 5.0 Update 29 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related ...

Affected Products : jre jdk
Published: Jun. 14, 2011

Modified: Apr. 11, 2025
10.0

HIGH

CVE-2015-0349

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability...

Affected Products : linux_kernel flash_player mac_os_x opensuse suse_linux_enterprise_desktop windows enterprise_linux_server_supplementary enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary_eus enterprise_linux_workstation_supplementary +1 more products
Published: Apr. 14, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-0311

Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the...

Affected Products : edge windows_8.1 windows_rt_8.1 windows_server_2012 linux_kernel internet_explorer flash_player mac_os_x linux_enterprise_desktop windows_10_1507 +4 more products
Actively Exploited

Published: Jan. 23, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-0134

Buffer overflow in the SSLv2 implementation in IBM Domino 8.5.x before 8.5.1 FP5 IF3, 8.5.2 before FP4 IF3, 8.5.3 before FP6 IF6, 9.0 before IF7, and 9.0.1 before FP2 IF3 allows remote attackers to execute arbitrary code via unspecified vectors....

Affected Products : lotus_domino domino
Published: Apr. 06, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2020-4213

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Fo...

Affected Products : spectrum_protect_plus spectrum_protect
Published: Feb. 24, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2020-4212

IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Fo...

Affected Products : linux_kernel spectrum_protect_plus spectrum_protect
Published: Feb. 24, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2014-9998

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA937...

Affected Products : qca6574au_firmware ipq8064_firmware qca6584au_firmware qca9886_firmware qca9980_firmware sd_625_firmware sd_820_firmware qca6174a_firmware qca9377_firmware mdm9650_firmware +48 more products
Published: Apr. 18, 2018

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2014-9997

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 450, SD 625, SD 650/52, SD 8...

Affected Products : android sd_450_firmware sd_625_firmware msm8909w_firmware mdm9206_firmware mdm9635m_firmware mdm9625_firmware sd_410_firmware sd_412_firmware sd_210_firmware +33 more products
Published: Apr. 18, 2018

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2014-9977

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM....

Affected Products : android
Published: Aug. 18, 2017

Modified: Apr. 20, 2025
10.0

HIGH

CVE-2014-9990

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 600, SD 615/16/SD 415, SD 625, SD 65...

Affected Products : android sd_450_firmware sd_625_firmware msm8909w_firmware mdm9206_firmware mdm9607_firmware mdm9635m_firmware mdm9615_firmware mdm9625_firmware sd_210_firmware +33 more products
Published: Apr. 18, 2018

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2014-9978

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service....

Affected Products : android
Published: Aug. 18, 2017

Modified: Apr. 20, 2025

Showing 20 of 293258 Results

1
...
257
258
259
260
261
262
263
...
14663

Browse by Apps

Latest CVE Feed

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable