Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 7.0

    HIGH
    CVE-2018-18466

    An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode and used for RDP connections, the application stores the emergency credentials in cleartext in the logs (present in the DEBUG folder) that can be accessed by anyone. NOTE: T... Read more

    Affected Products : securaccess
    • EPSS Score: %0.06
    • Published: Mar. 21, 2019
    • Modified: May. 30, 2025

  • 5.4

    MEDIUM
    CVE-2018-10213

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is XSS in invitation mail received from a different user, who can modify the HTML in that mail before sending it.... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.21
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.5

    MEDIUM
    CVE-2018-10212

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization leading to creation of folders within another account via a modified device value.... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.15
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2018-10211

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization when listing the history of another user via a modified "vaultize_session_id" value in a cookie.... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.21
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2018-10210

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. Enumeration of users is possible through the password-reset feature.... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.21
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.4

    MEDIUM
    CVE-2018-10209

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS on the file or folder download pop-up via a crafted file or folder name.... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.21
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 6.1

    MEDIUM
    CVE-2018-10208

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is anonymous reflected XSS on the error page via a /share/error?message= URI.... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.24
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2018-10207

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. An attacker can exploit Missing Authorization on the FlexPaperViewer SWF reader, and export files that should have been restricted, via vectors involving page-by-page access to a docume... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.21
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.4

    MEDIUM
    CVE-2018-10206

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS via the optional message field of a file request.... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.21
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 7.8

    HIGH
    CVE-2015-4596

    Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges.... Read more

    Affected Products : mouse_suite
    • EPSS Score: %0.05
    • Published: Jun. 13, 2017
    • Modified: May. 30, 2025

  • 9.1

    CRITICAL
    CVE-2023-45927

    S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().... Read more

    Affected Products : s-lang
    • Published: Mar. 27, 2024
    • Modified: May. 30, 2025

  • 6.1

    MEDIUM
    CVE-2024-3580

    The Popup4Phone WordPress plugin through 1.3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as Editor to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (... Read more

    Affected Products : popup4phone
    • Published: May. 17, 2024
    • Modified: May. 30, 2025

  • 6.1

    MEDIUM
    CVE-2024-3231

    The Popup4Phone WordPress plugin through 1.3.2 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks against admins.... Read more

    Affected Products : popup4phone
    • Published: May. 17, 2024
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2023-7252

    The Tickera WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.... Read more

    Affected Products : tickera
    • Published: Apr. 22, 2024
    • Modified: May. 30, 2025

  • 6.8

    MEDIUM
    CVE-2024-2761

    The Genesis Blocks WordPress plugin before 3.1.3 does not properly escape data input provided to some of its blocks, allowing using with at least contributor privileges to conduct Stored XSS attacks.... Read more

    Affected Products : genesis_blocks
    • Published: Apr. 19, 2024
    • Modified: May. 30, 2025

  • 4.8

    MEDIUM
    CVE-2024-2309

    The WP STAGING WordPress Backup Plugin WordPress plugin before 3.4.0, wp-staging-pro WordPress plugin before 5.4.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Script... Read more

    Affected Products : wp_staging
    • Published: Apr. 17, 2024
    • Modified: May. 30, 2025

  • 6.1

    MEDIUM
    CVE-2024-4924

    The Social Sharing Plugin WordPress plugin before 3.3.63 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is di... Read more

    Affected Products : sassy_social_share
    • Published: Jun. 12, 2024
    • Modified: May. 30, 2025

  • 7.0

    HIGH
    CVE-2023-31728

    Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface.... Read more

    Affected Products : rut240_firmware rut240
    • Published: Feb. 17, 2024
    • Modified: May. 30, 2025

  • 6.5

    MEDIUM
    CVE-2025-48252

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Back Button Widget allows Stored XSS. This issue affects Back Button Widget: from n/a through 1.6.8.... Read more

    Affected Products : back_button_widget
    • Published: May. 19, 2025
    • Modified: May. 30, 2025
    • Vuln Type: Cross-Site Scripting

  • 7.1

    HIGH
    CVE-2025-48144

    Cross-Site Request Forgery (CSRF) vulnerability in sidngr Import Export For WooCommerce allows Stored XSS. This issue affects Import Export For WooCommerce: from n/a through 1.6.2.... Read more

    Affected Products : import_export_for_woocommerce
    • Published: May. 16, 2025
    • Modified: May. 30, 2025
    • Vuln Type: Cross-Site Request Forgery
Showing 20 of 291794 Results