Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 5.3

    MEDIUM
    CVE-2020-28918

    DualShield 5.9.8.0821 allows username enumeration on its login form. A valid username results in prompting for the password, whereas an invalid one will produce an "unknown username" error message.... Read more

    Affected Products : dualshield
    • EPSS Score: %0.30
    • Published: Feb. 16, 2021
    • Modified: May. 30, 2025

  • 6.5

    MEDIUM
    CVE-2020-28406

    An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access details about jobs he should not have access to via the Audit Trail Feature.... Read more

    Affected Products : star_practice_management
    • EPSS Score: %0.34
    • Published: Jan. 29, 2021
    • Modified: May. 30, 2025

  • 8.8

    HIGH
    CVE-2020-28405

    An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to change the privileges of any user of the application. This can be used to grant himself the administrative role or remove a... Read more

    Affected Products : star_practice_management
    • EPSS Score: %0.51
    • Published: Jan. 29, 2021
    • Modified: May. 30, 2025

  • 6.5

    MEDIUM
    CVE-2020-28404

    An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access the Billing page without the appropriate privileges.... Read more

    Affected Products : star_practice_management
    • EPSS Score: %0.34
    • Published: Jan. 29, 2021
    • Modified: May. 30, 2025

  • 8.8

    HIGH
    CVE-2020-28403

    A Cross-Site Request Forgery (CSRF) vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an attacker to change the privileges of any user of the application. This can be used to grant himself administrative role or remove the ... Read more

    Affected Products : star
    • EPSS Score: %0.16
    • Published: Jan. 29, 2021
    • Modified: May. 30, 2025

  • 8.8

    HIGH
    CVE-2020-28402

    An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Launcher Configuration Panel.... Read more

    Affected Products : star_practice_management
    • EPSS Score: %0.35
    • Published: Jan. 29, 2021
    • Modified: May. 30, 2025

  • 6.5

    MEDIUM
    CVE-2020-28401

    An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to.... Read more

    Affected Products : star_practice_management
    • EPSS Score: %0.34
    • Published: Jan. 29, 2021
    • Modified: May. 30, 2025

  • 7.5

    HIGH
    CVE-2020-26546

    An issue was discovered in HelpDeskZ 1.0.2. The feature to auto-login a user, via the RememberMe functionality, is prone to SQL injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.... Read more

    Affected Products : helpdeskz
    • EPSS Score: %0.26
    • Published: Oct. 12, 2020
    • Modified: May. 30, 2025

  • 10.0

    HIGH
    CVE-2020-26167

    In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one.... Read more

    Affected Products : fuel_cms
    • EPSS Score: %2.95
    • Published: Nov. 04, 2020
    • Modified: May. 30, 2025

  • 4.3

    MEDIUM
    CVE-2020-15595

    An issue was discovered in Zoho Application Control Plus before version 10.0.511. The Element Configuration feature (to configure elements included in the scope of elements managed by the product) allows an attacker to retrieve the entire list of the IP r... Read more

    • EPSS Score: %2.18
    • Published: Sep. 30, 2020
    • Modified: May. 30, 2025

  • 4.3

    MEDIUM
    CVE-2020-15594

    An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a scan in order to discover open ports on a machine as well as available machines on the network se... Read more

    • EPSS Score: %0.50
    • Published: Sep. 30, 2020
    • Modified: May. 30, 2025

  • 9.1

    CRITICAL
    CVE-2019-7162

    An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.6 Build 5607. An exposed service allows an unauthenticated person to retrieve internal information from the system and modify the product installation.... Read more

    Affected Products : manageengine_adselfservice_plus
    • EPSS Score: %7.78
    • Published: Dec. 31, 2019
    • Modified: May. 30, 2025

  • 7.5

    HIGH
    CVE-2019-7161

    An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.... Read more

    Affected Products : manageengine_adselfservice_plus
    • EPSS Score: %2.24
    • Published: Mar. 21, 2019
    • Modified: May. 30, 2025

  • 7.5

    HIGH
    CVE-2019-6970

    Moodle 3.5.x before 3.5.4 allows SSRF.... Read more

    Affected Products : moodle
    • EPSS Score: %0.37
    • Published: Mar. 21, 2019
    • Modified: May. 30, 2025

  • 5.8

    MEDIUM
    CVE-2019-6516

    An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to force the application to perform requests to the internal workstation (port-scanning) and to perform requests to adjacent workstations (network-scanning), aka SSRF.... Read more

    Affected Products : dashboard_server
    • EPSS Score: %0.26
    • Published: May. 14, 2019
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2019-6515

    An issue was discovered in WSO2 API Manager 2.6.0. Uploaded documents for API documentation are available to an unauthenticated user.... Read more

    Affected Products : api_manager
    • EPSS Score: %0.72
    • Published: May. 14, 2019
    • Modified: May. 30, 2025

  • 4.8

    MEDIUM
    CVE-2019-6514

    An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to inject a JavaScript payload that will be stored in the database and then displayed and executed on the same page, aka XSS.... Read more

    Affected Products : dashboard_server
    • EPSS Score: %0.39
    • Published: May. 14, 2019
    • Modified: May. 30, 2025

  • 5.5

    MEDIUM
    CVE-2019-6513

    An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by changing the extension to an allowed one.... Read more

    Affected Products : api_manager
    • EPSS Score: %0.31
    • Published: May. 21, 2019
    • Modified: May. 30, 2025

  • 4.1

    MEDIUM
    CVE-2019-6512

    An issue was discovered in WSO2 API Manager 2.6.0. It is possible to force the application to perform requests to the internal workstation (SSRF port-scanning), other adjacent workstations (SSRF network scanning), or to enumerate files because of the exis... Read more

    Affected Products : api_manager
    • EPSS Score: %0.22
    • Published: May. 14, 2019
    • Modified: May. 30, 2025

  • 10.0

    CRITICAL
    CVE-2019-3905

    Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF.... Read more

    Affected Products : manageengine_adselfservice_plus
    • EPSS Score: %1.22
    • Published: Jan. 03, 2019
    • Modified: May. 30, 2025
Showing 20 of 291794 Results