Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

6.5

MEDIUM

CVE-2025-4353

A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the file /paraframework/queryTsDictionaryType.htm. The manipulation of the argument dictCn1 leads to...

Affected Products :
Published: May. 06, 2025

Modified: Jun. 04, 2025

Vuln Type: Injection
6.5

MEDIUM

CVE-2025-4352

A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424. This issue affects some unknown processing of the file /reprotframework/tcEntrFlowSelect.htm. The manipulation of the argument cus...

Affected Products :
Published: May. 06, 2025

Modified: Jun. 04, 2025

Vuln Type: Injection
9.3

CRITICAL

CVE-2025-48951

Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. Versions 8.0.0-BETA3 prior to 8.3.1 contain a vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, ...

Affected Products : auth0
Published: Jun. 03, 2025

Modified: Jun. 04, 2025

Vuln Type: Authentication
8.3

HIGH

CVE-2025-48881

Valtimo is a platform for Business Process Automation. In versions starting from 11.0.0.RELEASE to 11.3.3.RELEASE and 12.0.0.RELEASE to 12.12.0.RELEASE, all objects for which an object-management configuration exists can be listed, viewed, edited, created...

Affected Products :
Published: May. 30, 2025

Modified: Jun. 04, 2025

Vuln Type: Authorization
8.8

HIGH

CVE-2024-22899

Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the syncNtpTime function....

Affected Products : vinchin_backup_and_recovery
Published: Feb. 02, 2024

Modified: Jun. 04, 2025
5.3

MEDIUM

CVE-2024-22646

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system....

Affected Products : seo_panel
Published: Jan. 30, 2024

Modified: Jun. 04, 2025
7.2

HIGH

CVE-2024-22626

Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_retailer.php?id=....

Affected Products : supplier_management_system
Published: Jan. 16, 2024

Modified: Jun. 04, 2025
5.8

MEDIUM

CVE-2024-20513

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition for targeted users of the AnyConnect service on an affected...

Affected Products : meraki_mx64_firmware meraki_mx64w_firmware meraki_mx67_firmware meraki_mx67c_firmware meraki_mx67w_firmware meraki_mx68_firmware meraki_mx68cw_firmware meraki_mx68w_firmware meraki_mx100_firmware meraki_mx84_firmware +40 more products
Published: Oct. 02, 2024

Modified: Jun. 04, 2025
5.9

MEDIUM

CVE-2024-20509

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to hijack an AnyConnect VPN session or cause a denial of service (DoS) condition for...

Affected Products : meraki_mx64_firmware meraki_mx64w_firmware meraki_mx67_firmware meraki_mx67c_firmware meraki_mx67w_firmware meraki_mx68_firmware meraki_mx68cw_firmware meraki_mx68w_firmware meraki_mx100_firmware meraki_mx84_firmware +40 more products
Published: Oct. 02, 2024

Modified: Jun. 04, 2025
7.5

HIGH

CVE-2024-20502

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to insu...

Affected Products : meraki_mx64_firmware meraki_mx64w_firmware meraki_mx67_firmware meraki_mx67c_firmware meraki_mx67w_firmware meraki_mx68_firmware meraki_mx68cw_firmware meraki_mx68w_firmware meraki_mx100_firmware meraki_mx84_firmware +40 more products
Published: Oct. 02, 2024

Modified: Jun. 04, 2025
8.6

HIGH

CVE-2024-20501

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. ...

Affected Products : meraki_mx64_firmware meraki_mx64w_firmware meraki_mx67_firmware meraki_mx67c_firmware meraki_mx67w_firmware meraki_mx68_firmware meraki_mx68cw_firmware meraki_mx68w_firmware meraki_mx100_firmware meraki_mx84_firmware +40 more products
Published: Oct. 02, 2024

Modified: Jun. 04, 2025
7.5

HIGH

CVE-2024-20500

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. This vu...

Affected Products : meraki_mx64_firmware meraki_mx64w_firmware meraki_mx67_firmware meraki_mx67c_firmware meraki_mx67w_firmware meraki_mx68_firmware meraki_mx68cw_firmware meraki_mx68w_firmware meraki_mx100_firmware meraki_mx84_firmware +40 more products
Published: Oct. 02, 2024

Modified: Jun. 04, 2025
8.6

HIGH

CVE-2024-20499

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. ...

Affected Products : meraki_mx64_firmware meraki_mx64w_firmware meraki_mx67_firmware meraki_mx67c_firmware meraki_mx67w_firmware meraki_mx68_firmware meraki_mx68cw_firmware meraki_mx68w_firmware meraki_mx100_firmware meraki_mx84_firmware +40 more products
Published: Oct. 02, 2024

Modified: Jun. 04, 2025
8.6

HIGH

CVE-2024-20498

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. ...

Affected Products : meraki_mx64_firmware meraki_mx64w_firmware meraki_mx67_firmware meraki_mx67c_firmware meraki_mx67w_firmware meraki_mx68_firmware meraki_mx68cw_firmware meraki_mx68w_firmware meraki_mx100_firmware meraki_mx84_firmware +40 more products
Published: Oct. 02, 2024

Modified: Jun. 04, 2025
4.7

MEDIUM

CVE-2022-23089

When dumping core and saving process information, proc_getargv() might return an sbuf which have a sbuf_len() of 0 or -1, which is not properly handled. An out-of-bound read can happen when user constructs a specially crafted ps_string, which in turn can...

Affected Products : freebsd
Published: Feb. 15, 2024

Modified: Jun. 04, 2025
6.1

MEDIUM

CVE-2024-21728

An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky (osTicket Bridge) by SmartCalc is a Joomla 3.x extension that provides Joomla fronted integration with osTicket, a popular Support ticket system. The Open Redirect vulnerability all...

Affected Products : osticky
Published: Feb. 15, 2024

Modified: Jun. 04, 2025
6.1

MEDIUM

CVE-2024-27184

Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not.....

Affected Products : joomla\!
Published: Aug. 20, 2024

Modified: Jun. 04, 2025
9.1

CRITICAL

CVE-2024-27185

The pagination class includes arbitrary parameters in links, leading to cache poisoning attack vectors....

Affected Products : joomla\!
Published: Aug. 20, 2024

Modified: Jun. 04, 2025
6.1

MEDIUM

CVE-2024-27186

The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions....

Affected Products : joomla\!
Published: Aug. 20, 2024

Modified: Jun. 04, 2025
7.5

HIGH

CVE-2024-27187

Improper Access Controls allows backend users to overwrite their username when disallowed....

Affected Products : joomla\!
Published: Aug. 20, 2024

Modified: Jun. 04, 2025

Showing 20 of 292767 Results

1
...
1009
1010
1011
1012
1013
1014
1015
...
14639

Browse by Apps

Latest CVE Feed

6.5

6.5

9.3

8.3

8.8

5.3

7.2

5.8

5.9

7.5

8.6

7.5

8.6

8.6

4.7

6.1

6.1

9.1

6.1

7.5

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable