Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 4.3

    MEDIUM
    CVE-2020-15594

    An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a scan in order to discover open ports on a machine as well as available machines on the network se... Read more

    • EPSS Score: %0.50
    • Published: Sep. 30, 2020
    • Modified: May. 30, 2025

  • 9.1

    CRITICAL
    CVE-2019-7162

    An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.6 Build 5607. An exposed service allows an unauthenticated person to retrieve internal information from the system and modify the product installation.... Read more

    Affected Products : manageengine_adselfservice_plus
    • EPSS Score: %7.78
    • Published: Dec. 31, 2019
    • Modified: May. 30, 2025

  • 7.5

    HIGH
    CVE-2019-7161

    An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.... Read more

    Affected Products : manageengine_adselfservice_plus
    • EPSS Score: %2.24
    • Published: Mar. 21, 2019
    • Modified: May. 30, 2025

  • 7.5

    HIGH
    CVE-2019-6970

    Moodle 3.5.x before 3.5.4 allows SSRF.... Read more

    Affected Products : moodle
    • EPSS Score: %0.37
    • Published: Mar. 21, 2019
    • Modified: May. 30, 2025

  • 5.8

    MEDIUM
    CVE-2019-6516

    An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to force the application to perform requests to the internal workstation (port-scanning) and to perform requests to adjacent workstations (network-scanning), aka SSRF.... Read more

    Affected Products : dashboard_server
    • EPSS Score: %0.26
    • Published: May. 14, 2019
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2019-6515

    An issue was discovered in WSO2 API Manager 2.6.0. Uploaded documents for API documentation are available to an unauthenticated user.... Read more

    Affected Products : api_manager
    • EPSS Score: %0.72
    • Published: May. 14, 2019
    • Modified: May. 30, 2025

  • 4.8

    MEDIUM
    CVE-2019-6514

    An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to inject a JavaScript payload that will be stored in the database and then displayed and executed on the same page, aka XSS.... Read more

    Affected Products : dashboard_server
    • EPSS Score: %0.39
    • Published: May. 14, 2019
    • Modified: May. 30, 2025

  • 5.5

    MEDIUM
    CVE-2019-6513

    An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by changing the extension to an allowed one.... Read more

    Affected Products : api_manager
    • EPSS Score: %0.31
    • Published: May. 21, 2019
    • Modified: May. 30, 2025

  • 4.1

    MEDIUM
    CVE-2019-6512

    An issue was discovered in WSO2 API Manager 2.6.0. It is possible to force the application to perform requests to the internal workstation (SSRF port-scanning), other adjacent workstations (SSRF network scanning), or to enumerate files because of the exis... Read more

    Affected Products : api_manager
    • EPSS Score: %0.22
    • Published: May. 14, 2019
    • Modified: May. 30, 2025

  • 10.0

    CRITICAL
    CVE-2019-3905

    Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF.... Read more

    Affected Products : manageengine_adselfservice_plus
    • EPSS Score: %1.22
    • Published: Jan. 03, 2019
    • Modified: May. 30, 2025

  • 7.0

    HIGH
    CVE-2018-18466

    An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode and used for RDP connections, the application stores the emergency credentials in cleartext in the logs (present in the DEBUG folder) that can be accessed by anyone. NOTE: T... Read more

    Affected Products : securaccess
    • EPSS Score: %0.06
    • Published: Mar. 21, 2019
    • Modified: May. 30, 2025

  • 5.4

    MEDIUM
    CVE-2018-10213

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is XSS in invitation mail received from a different user, who can modify the HTML in that mail before sending it.... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.21
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.5

    MEDIUM
    CVE-2018-10212

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization leading to creation of folders within another account via a modified device value.... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.15
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2018-10211

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization when listing the history of another user via a modified "vaultize_session_id" value in a cookie.... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.21
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2018-10210

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. Enumeration of users is possible through the password-reset feature.... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.21
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.4

    MEDIUM
    CVE-2018-10209

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS on the file or folder download pop-up via a crafted file or folder name.... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.21
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 6.1

    MEDIUM
    CVE-2018-10208

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is anonymous reflected XSS on the error page via a /share/error?message= URI.... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.24
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2018-10207

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. An attacker can exploit Missing Authorization on the FlexPaperViewer SWF reader, and export files that should have been restricted, via vectors involving page-by-page access to a docume... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.21
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.4

    MEDIUM
    CVE-2018-10206

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS via the optional message field of a file request.... Read more

    Affected Products : enterprise_file_sharing
    • EPSS Score: %0.21
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 7.8

    HIGH
    CVE-2015-4596

    Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges.... Read more

    Affected Products : mouse_suite
    • EPSS Score: %0.05
    • Published: Jun. 13, 2017
    • Modified: May. 30, 2025
Showing 20 of 291878 Results