Latest Published Vulnerabilities CVE

Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

10.0

HIGH

CVE-2019-16734

Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user....

Affected Products : petalk_ai_firmware pf-103_firmware petalk_ai pf-103
EPSS Score: %3.51

Published: Dec. 13, 2019

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2019-16735

A stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrary code as the root user....

Affected Products : petalk_ai_firmware pf-103_firmware petalk_ai pf-103
EPSS Score: %2.82

Published: Dec. 13, 2019

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2019-17364

The processCommandUploadLog() function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user....

Affected Products : petalk_ai_firmware pf-103_firmware petalk_ai pf-103
EPSS Score: %3.27

Published: Dec. 13, 2019

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2019-18830

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'dongle_bridge' program used to expose the functionalities of the ClickShare Button to a USB host, is vulnerable to OS command injection vulnerabilities. The...

Affected Products : clickshare_cse-200_firmware clickshare_cs-100_firmware clickshare_cse-200\+_firmware clickshare_cse-800_firmware clickshare_cse-200 clickshare_cs-100 clickshare_cse-200\+ clickshare_cse-800
EPSS Score: %3.35

Published: Dec. 16, 2019

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2019-10516

Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT detach in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,...

Affected Products : sdx55_firmware sdm660_firmware sm8150_firmware msm8996au_firmware apq8096au_firmware mdm9150_firmware qcs605_firmware sdx24_firmware apq8009_firmware mdm9650_firmware +94 more products
EPSS Score: %0.33

Published: Dec. 18, 2019

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2019-10525

Buffer overflow during SIB read when network configures complete sib list along with first and last segment of other SIB in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdra...

Affected Products : sdx55_firmware sdm660_firmware sm8150_firmware msm8996au_firmware apq8096au_firmware mdm9150_firmware qcs605_firmware sdx24_firmware apq8009_firmware mdm9650_firmware +94 more products
EPSS Score: %0.36

Published: Dec. 18, 2019

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2019-11399

An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS command injection occurs through the get_set.ccp lanHostCfg_HostName_1.1.1.0.0 parameter....

Affected Products : tew-651br_firmware tew-652brp_firmware tew-652bru_firmware tew-652brp tew-651br tew-652bru
EPSS Score: %4.96

Published: Dec. 18, 2019

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2019-4716

IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094....

Affected Products : planning_analytics
Actively Exploited

EPSS Score: %79.70

Published: Dec. 18, 2019

Modified: Feb. 07, 2025
10.0

HIGH

CVE-2019-10774

php-shellcommand versions before 1.6.1 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution....

Affected Products : php-shellcommand
EPSS Score: %1.11

Published: Dec. 30, 2019

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2012-5878

Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or (2) CSAttack.pl in frameworkgui/ or the (3) appURLPath p...

Affected Products : smartphone_pentest_framework
EPSS Score: %10.61

Published: Jan. 03, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2013-5122

Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access...

Affected Products : linksys_e4200_firmware linksys_ea2700_firmware linksys_ea3500_firmware linksys_ea4500_firmware linksys_ea2700 linksys_ea3500 linksys_e4200 linksys_ea4500
EPSS Score: %4.10

Published: Jan. 07, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2019-19495

The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the mo...

Affected Products : tc7230_steb_firmware tc7230_steb
EPSS Score: %6.99

Published: Jan. 08, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2014-1598

centurystar 7.12 ActiveX Control has a Stack Buffer Overflow...

Affected Products : centurystar
EPSS Score: %0.38

Published: Jan. 08, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2014-2650

Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface...

Affected Products : openstage_80_firmware openstage_80_g_firmware openstage_60_g_firmware openstage_60_firmware openstage_40_firmware openstage_40_g_firmware openstage_20_e_firmware openstage_20_firmware openstage_20_g_firmware openstage_15_firmware +20 more products
EPSS Score: %5.27

Published: Jan. 09, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2014-2651

Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface...

Affected Products : openstage_80_firmware openstage_80_g_firmware openstage_60_g_firmware openstage_60_firmware openstage_40_firmware openstage_40_g_firmware openstage_20_e_firmware openstage_20_firmware openstage_20_g_firmware openstage_15_firmware +18 more products
EPSS Score: %0.40

Published: Jan. 09, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2015-7874

Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nickname....

Affected Products : kitty_portable
EPSS Score: %8.44

Published: Jan. 15, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2015-5952

Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary files via the item parameter....

Affected Products : fatca
EPSS Score: %2.15

Published: Jan. 15, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2009-1120

EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -exposed via the rep_srv.exe process- where the vulnerability is caused by an error when the rep_sr...

Affected Products : emc_replistor
EPSS Score: %6.10

Published: Jan. 15, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2019-10532

Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice...

Affected Products : sdm660_firmware sm8150_firmware sm8250_firmware sxr2130_firmware apq8096au_firmware qcs605_firmware apq8009_firmware msm8909w_firmware sdm429w_firmware sdx20_firmware +72 more products
EPSS Score: %0.33

Published: Jan. 21, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2019-10611

Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snap...

Affected Products : sa6155p_firmware sdm660_firmware sm8150_firmware sm8250_firmware sxr2130_firmware apq8096au_firmware qcs605_firmware apq8009_firmware msm8909w_firmware sdm429w_firmware +70 more products
EPSS Score: %0.43

Published: Jan. 21, 2020

Modified: Nov. 21, 2024

Showing 20 of 290955 Results

1
...
40
41
42
43
44
45
46
...
14548

Latest CVE Feed

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable