Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 10.0

    CRITICAL
    CVE-2020-12389

    The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerability affects Firefox ESR < 68.8 and Firefox < 76.... Read more

    Affected Products : firefox firefox_esr windows
    • EPSS Score: %0.56
    • Published: May. 26, 2020
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2020-10987

    The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.... Read more

    Affected Products : ac15_firmware ac15
    • Actively Exploited
    • EPSS Score: %93.27
    • Published: Jul. 13, 2020
    • Modified: Mar. 14, 2025
  • 10.0

    HIGH
    CVE-2020-0646

    A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.... Read more

    • Actively Exploited
    • EPSS Score: %93.12
    • Published: Jan. 14, 2020
    • Modified: Apr. 04, 2025
  • 10.0

    HIGH
    CVE-2019-7096

    Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.... Read more

    • EPSS Score: %6.77
    • Published: May. 23, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-7082

    Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code executi... Read more

    • EPSS Score: %17.20
    • Published: May. 24, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-7060

    Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code ex... Read more

    • EPSS Score: %2.74
    • Published: May. 24, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-5081

    An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets c... Read more

    • EPSS Score: %1.86
    • Published: Dec. 18, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-3707

    Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted input data to the... Read more

    Affected Products : idrac9_firmware
    • EPSS Score: %1.79
    • Published: Apr. 26, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-3689

    The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory conta... Read more

    Affected Products : linux_enterprise_server nfs-utils
    • EPSS Score: %0.15
    • Published: Sep. 19, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-7105

    Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.... Read more

    Affected Products : mac_os_x xd
    • EPSS Score: %27.65
    • Published: May. 23, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-15292

    An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalk_proc_exit, related to net/appletalk/atalk_proc.c, net/appletalk/ddp.c, and net/appletalk/sysctl_net_atalk.c.... Read more

    Affected Products : linux_kernel ubuntu_linux debian_linux
    • EPSS Score: %0.95
    • Published: Aug. 21, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-14901

    A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. T... Read more

    • EPSS Score: %6.10
    • Published: Nov. 29, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2019-12002

    A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(... Read more

    • EPSS Score: %0.20
    • Published: Apr. 17, 2020
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2018-7445

    A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before... Read more

    Affected Products : routeros
    • Actively Exploited
    • EPSS Score: %87.80
    • Published: Mar. 19, 2018
    • Modified: Aug. 15, 2025
  • 10.0

    HIGH
    CVE-2018-6809

    NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to gain privilege on a target system.... Read more

    • EPSS Score: %3.58
    • Published: Mar. 06, 2018
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2018-5409

    The PrinterLogic Print Management software, versions up to and including 18.3.1.96, updates and executes the code without sufficiently verifying the origin and integrity of the code. An attacker can execute malicious code by compromising the host server, ... Read more

    Affected Products : print_management
    • EPSS Score: %0.19
    • Published: May. 08, 2019
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2018-5070

    Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the curren... Read more

    • EPSS Score: %23.88
    • Published: Jul. 20, 2018
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2018-4977

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user... Read more

    • EPSS Score: %1.80
    • Published: Jul. 09, 2018
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2018-4959

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user... Read more

    • EPSS Score: %1.80
    • Published: Jul. 09, 2018
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2018-4169

    In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, an out-of-bounds read was addressed with improved input validation.... Read more

    Affected Products : mac_os_x mac_os_x
    • EPSS Score: %0.44
    • Published: Jan. 11, 2019
    • Modified: Nov. 21, 2024
Showing 20 of 291275 Results