Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.1

HIGH

CVE-2025-62721

LinkAce is a self-hosted archive to collect website links. In versions 2.3.1 and below, authenticated RSS feed endpoints in the FeedController class fail to implement proper authorization checks, allowing any authenticated user to access all links, lists,...

Affected Products : linkace
Published: Nov. 04, 2025

Modified: Nov. 10, 2025

Vuln Type: Authorization
7.1

HIGH

CVE-2025-62036

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4....

Affected Products :
Published: Nov. 06, 2025

Modified: Nov. 06, 2025

Vuln Type: Cross-Site Scripting
7.1

HIGH

CVE-2025-54722

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ex-Themes WooTour woo-tour allows Reflected XSS.This issue affects WooTour: from n/a through <= 3.6.3....

Affected Products :
Published: Nov. 06, 2025

Modified: Nov. 06, 2025

Vuln Type: Cross-Site Scripting
7.1

HIGH

CVE-2025-64442

HumHub is an Open Source Enterprise Social Network. Versions below 1.17.4 have a XSS vulnerability in the Meta-Search feature which allows malicious input to be executed in search previews. This issue is fixed in version 1.17.4....

Affected Products : humhub
Published: Nov. 07, 2025

Modified: Nov. 07, 2025

Vuln Type: Cross-Site Scripting
7.1

HIGH

CVE-2025-59235

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally....

Affected Products : office access sharepoint_server 365_apps excel office_online_server office_long_term_servicing_channel office_macos_2024 office_macos_2021 sharepoint_server_2016 +6 more products
Published: Oct. 14, 2025

Modified: Oct. 16, 2025
7.1

HIGH

CVE-2025-54721

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress Resca resca allows Reflected XSS.This issue affects Resca: from n/a through <= 3.0.2....

Affected Products :
Published: Nov. 06, 2025

Modified: Nov. 06, 2025

Vuln Type: Cross-Site Scripting
7.1

HIGH

CVE-2025-62076

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ido Kobelkowsky Simple Payment simple-payment.This issue affects Simple Payment: from n/a through <= 2.4.6....

Affected Products :
Published: Nov. 06, 2025

Modified: Nov. 06, 2025

Vuln Type: Cross-Site Scripting
7.1

HIGH

CVE-2025-62795

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.21-lts and v4.10.12-lts, a low-privileged authenticated user can invoke LDAP configuration tests and start LDAP synchronization by sending cra...

Affected Products : jumpserver
Published: Oct. 30, 2025

Modified: Nov. 04, 2025

Vuln Type: Authentication
7.1

HIGH

CVE-2025-64224

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Reflected XSS.This issue affects Grand Conference Theme Custom Post...

Affected Products :
Published: Nov. 06, 2025

Modified: Nov. 06, 2025

Vuln Type: Cross-Site Scripting
7.1

HIGH

CVE-2025-57107

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries b...

Affected Products : vtk
Published: Oct. 31, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
7.0

HIGH

CVE-2025-59282

Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute code locally....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products
Published: Oct. 14, 2025

Modified: Oct. 27, 2025
7.0

HIGH

CVE-2025-55340

Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally....

Affected Products : windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 +1 more products
Published: Oct. 14, 2025

Modified: Oct. 24, 2025
7.0

HIGH

CVE-2025-7330

A cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CSRF checks on the impacted form. This allows for unintended configuration modification if an attacker can convince a logged in admi...

Affected Products : 1783-natr_firmware 1783-natr
Published: Oct. 14, 2025

Modified: Oct. 30, 2025

Vuln Type: Cross-Site Request Forgery
7.0

HIGH

CVE-2025-58731

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally....

Affected Products : windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_2h2
Published: Oct. 14, 2025

Modified: Oct. 16, 2025
7.0

HIGH

CVE-2025-55690

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally....

Affected Products : windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_2h2
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.0

HIGH

CVE-2025-55685

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally....

Affected Products : windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 +1 more products
Published: Oct. 14, 2025

Modified: Oct. 27, 2025
7.0

HIGH

CVE-2025-53717

Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally....

Affected Products : windows_11_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_2h2
Published: Oct. 14, 2025

Modified: Oct. 20, 2025
7.0

HIGH

CVE-2025-55691

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally....

Affected Products : windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_2h2
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.0

HIGH

CVE-2025-55686

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally....

Affected Products : windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 +1 more products
Published: Oct. 14, 2025

Modified: Oct. 27, 2025
7.0

HIGH

CVE-2025-47989

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally....

Affected Products : azure_connected_machine_agent arc_enabled_servers_azure_connected_machine_agent
Published: Oct. 14, 2025

Modified: Oct. 20, 2025

Showing 20 of 3806 Results

Browse by Apps

Latest CVE Feed

7.1

7.1

7.1

7.1

7.1

7.1

7.1

7.1

7.1

7.1

7.0

7.0

7.0

7.0

7.0

7.0

7.0

7.0

7.0

7.0

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable