Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

10.0

HIGH

CVE-2022-30310

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper acc...

Affected Products : controller_cecc-x-m1_firmware controller_cecc-x-m1-mv_firmware controller_cecc-x-m1-mv-s1_firmware controller_cecc-x-m1-ys-l1_firmware controller_cecc-x-m1-ys-l2_firmware controller_cecc-x-m1-y-yjkp_firmware servo_press_kit_yjkp_firmware servo_press_kit_yjkp-_firmware controller_cecc-x-m1 controller_cecc-x-m1-mv +6 more products
EPSS Score: %1.09

Published: Jun. 13, 2022

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2022-30309

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to impro...

Affected Products : controller_cecc-x-m1_firmware controller_cecc-x-m1-mv_firmware controller_cecc-x-m1-mv-s1_firmware controller_cecc-x-m1-ys-l1_firmware controller_cecc-x-m1-ys-l2_firmware controller_cecc-x-m1-y-yjkp_firmware servo_press_kit_yjkp_firmware servo_press_kit_yjkp-_firmware controller_cecc-x-m1 controller_cecc-x-m1-mv +6 more products
EPSS Score: %0.65

Published: Jun. 13, 2022

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2022-27626

A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to execute arbitrary comma...

Affected Products : diskstation_manager diskstation_manager ds3622xs\+ fs3410 hd6500
EPSS Score: %2.38

Published: Oct. 20, 2022

Modified: Jan. 14, 2025
10.0

HIGH

CVE-2022-25163

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of serial number "24061" or prior, Mitsubishi Electric MELSEC-L series LJ71E71-100 first 5 digits of serial number "24061" or prior and Mitsubishi El...

Affected Products : melsec_iq-r_rd81mes96n_firmware melsec_qj71e71-100_firmware melsec_lj71e71-100_firmware melsec_iq-r_rd81mes96n melsec_qj71e71-100 melsec_lj71e71-100
EPSS Score: %0.73

Published: Jun. 02, 2022

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2022-20705

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization...

Affected Products : rv340_firmware rv340w_firmware rv345_firmware rv345p_firmware rv160_firmware rv160w_firmware rv260_firmware rv260p_firmware rv260w_firmware small_business_rv_series_router_firmware +9 more products
EPSS Score: %81.48

Published: Feb. 10, 2022

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2021-37535

SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges....

Affected Products : netweaver_application_server_java netweaver_java_application_server
EPSS Score: %0.34

Published: Sep. 14, 2021

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2021-35211

Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarW...

Affected Products : serv-u
Actively Exploited

EPSS Score: %94.00

Published: Jul. 14, 2021

Modified: Mar. 12, 2025
10.0

HIGH

CVE-2021-31755

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request....

Affected Products : ac11_firmware ac11
Actively Exploited

EPSS Score: %94.23

Published: May. 07, 2021

Modified: Apr. 03, 2025
10.0

HIGH

CVE-2021-26895

Windows DNS Server Remote Code Execution Vulnerability...

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server_20h2 windows_server_1909 windows_server_2004 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2
EPSS Score: %9.94

Published: Mar. 11, 2021

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2021-21538

Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the virtual console....

Affected Products : idrac9_firmware emc_idrac9_firmware
EPSS Score: %1.55

Published: Jul. 29, 2021

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2021-1497

Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the...

Affected Products : hyperflex_hx_data_platform hyperflex_hx220c_af_m5 hyperflex_hx220c_all_nvme_m5 hyperflex_hx220c_edge_m5 hyperflex_hx220c_m5 hyperflex_hx240c hyperflex_hx240c_af_m5 hyperflex_hx240c_m5
Actively Exploited

EPSS Score: %94.36

Published: May. 06, 2021

Modified: Feb. 24, 2025
10.0

HIGH

CVE-2020-8794

OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTPD, it is possible to attack a server because the server ...

Affected Products : ubuntu_linux fedora debian_linux opensmtpd opensmtpd
EPSS Score: %86.79

Published: Feb. 25, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2020-8432

In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced ...

Affected Products : leap u-boot
EPSS Score: %1.20

Published: Jan. 29, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2020-3745

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution ....

Affected Products : acrobat_dc acrobat_reader_dc macos windows
EPSS Score: %4.38

Published: Feb. 13, 2020

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2020-35632

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker ca...

Affected Products : debian_linux computational_geometry_algorithms_library
EPSS Score: %0.22

Published: Apr. 18, 2022

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2020-35458

An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_from_cookie cookie. The user logout routine could be used by unauthenticated remote attackers to...

Affected Products : hawk
EPSS Score: %12.99

Published: Jan. 12, 2021

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2020-3161

A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is du...

Affected Products : ip_phone_8821_firmware ip_phone_8821-ex_firmware ip_phone_7811_firmware ip_phone_7821_firmware ip_phone_7841_firmware ip_phone_7861_firmware ip_phone_8811_firmware ip_phone_8841_firmware ip_phone_8845_firmware ip_phone_8851_firmware +16 more products
Actively Exploited

EPSS Score: %80.82

Published: Apr. 15, 2020

Modified: Feb. 24, 2025
10.0

CRITICAL

CVE-2020-28635

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker ca...

Affected Products : debian_linux computational_geometry_algorithms_library
EPSS Score: %0.43

Published: Apr. 18, 2022

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2020-28606

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker ca...

Affected Products : debian_linux computational_geometry_algorithms_library
EPSS Score: %0.38

Published: Apr. 18, 2022

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2020-13753

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl. CLONE_NEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TI...

Affected Products : ubuntu_linux fedora debian_linux leap webkitgtk wpe_webkit
EPSS Score: %1.33

Published: Jul. 14, 2020

Modified: Nov. 21, 2024

Showing 20 of 291312 Results

1
...
294
295
296
297
298
299
300
...
14566

Latest CVE Feed

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable