Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

8.8

HIGH

CVE-2022-23092

The implementation of lib9p's handling of RWALK messages was missing a bounds check needed when unpacking the message contents. The missing check means that the receipt of a specially crafted message will cause lib9p to overwrite unrelated memory. The b...

Affected Products : freebsd
Published: Feb. 15, 2024

Modified: Jun. 04, 2025
4.0

MEDIUM

CVE-2022-23091

A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, but with a different root cause. An unprivileged local user process can maintain a mapping of a page after it is freed, allowing that pr...

Affected Products : freebsd
Published: Feb. 15, 2024

Modified: Jun. 04, 2025
7.7

HIGH

CVE-2022-23090

The aio_aqueue function, used by the lio_listio system call, fails to release a reference to a credential in an error case. An attacker may cause the reference count to overflow, leading to a use after free (UAF)....

Affected Products : freebsd
Published: Feb. 15, 2024

Modified: Jun. 04, 2025
3.3

LOW

CVE-2024-25941

The jail(2) system call has not limited a visiblity of allocated TTYs (the kern.ttys sysctl). This gives rise to an information leak about processes outside the current jail. Attacker can get information about TTYs allocated on the host or in other jail...

Affected Products : freebsd
Published: Feb. 15, 2024

Modified: Jun. 04, 2025
6.3

MEDIUM

CVE-2024-25940

`bhyveload -h <host-path>` may be used to grant loader access to the <host-path> directory tree on the host. Affected versions of bhyveload(8) do not make any attempt to restrict loader's access to <host-path>, allowing the loader to read any file the ho...

Affected Products : freebsd
Published: Feb. 15, 2024

Modified: Jun. 04, 2025
6.5

MEDIUM

CVE-2025-4353

A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the file /paraframework/queryTsDictionaryType.htm. The manipulation of the argument dictCn1 leads to...

Affected Products :
Published: May. 06, 2025

Modified: Jun. 04, 2025

Vuln Type: Injection
6.5

MEDIUM

CVE-2025-4352

A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424. This issue affects some unknown processing of the file /reprotframework/tcEntrFlowSelect.htm. The manipulation of the argument cus...

Affected Products :
Published: May. 06, 2025

Modified: Jun. 04, 2025

Vuln Type: Injection
9.3

CRITICAL

CVE-2025-48951

Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. Versions 8.0.0-BETA3 prior to 8.3.1 contain a vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, ...

Affected Products : auth0
Published: Jun. 03, 2025

Modified: Jun. 04, 2025

Vuln Type: Authentication
8.3

HIGH

CVE-2025-48881

Valtimo is a platform for Business Process Automation. In versions starting from 11.0.0.RELEASE to 11.3.3.RELEASE and 12.0.0.RELEASE to 12.12.0.RELEASE, all objects for which an object-management configuration exists can be listed, viewed, edited, created...

Affected Products :
Published: May. 30, 2025

Modified: Jun. 04, 2025

Vuln Type: Authorization
8.8

HIGH

CVE-2024-22899

Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the syncNtpTime function....

Affected Products : vinchin_backup_and_recovery
Published: Feb. 02, 2024

Modified: Jun. 04, 2025
5.3

MEDIUM

CVE-2024-22646

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system....

Affected Products : seo_panel
Published: Jan. 30, 2024

Modified: Jun. 04, 2025
7.2

HIGH

CVE-2024-22626

Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_retailer.php?id=....

Affected Products : supplier_management_system
Published: Jan. 16, 2024

Modified: Jun. 04, 2025
5.8

MEDIUM

CVE-2024-20513

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition for targeted users of the AnyConnect service on an affected...

Affected Products : meraki_mx64_firmware meraki_mx64w_firmware meraki_mx67_firmware meraki_mx67c_firmware meraki_mx67w_firmware meraki_mx68_firmware meraki_mx68cw_firmware meraki_mx68w_firmware meraki_mx100_firmware meraki_mx84_firmware +40 more products
Published: Oct. 02, 2024

Modified: Jun. 04, 2025
5.9

MEDIUM

CVE-2024-20509

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to hijack an AnyConnect VPN session or cause a denial of service (DoS) condition for...

Affected Products : meraki_mx64_firmware meraki_mx64w_firmware meraki_mx67_firmware meraki_mx67c_firmware meraki_mx67w_firmware meraki_mx68_firmware meraki_mx68cw_firmware meraki_mx68w_firmware meraki_mx100_firmware meraki_mx84_firmware +40 more products
Published: Oct. 02, 2024

Modified: Jun. 04, 2025
7.5

HIGH

CVE-2024-20502

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to insu...

Affected Products : meraki_mx64_firmware meraki_mx64w_firmware meraki_mx67_firmware meraki_mx67c_firmware meraki_mx67w_firmware meraki_mx68_firmware meraki_mx68cw_firmware meraki_mx68w_firmware meraki_mx100_firmware meraki_mx84_firmware +40 more products
Published: Oct. 02, 2024

Modified: Jun. 04, 2025
8.6

HIGH

CVE-2024-20501

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. ...

Affected Products : meraki_mx64_firmware meraki_mx64w_firmware meraki_mx67_firmware meraki_mx67c_firmware meraki_mx67w_firmware meraki_mx68_firmware meraki_mx68cw_firmware meraki_mx68w_firmware meraki_mx100_firmware meraki_mx84_firmware +40 more products
Published: Oct. 02, 2024

Modified: Jun. 04, 2025
7.5

HIGH

CVE-2024-20500

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. This vu...

Affected Products : meraki_mx64_firmware meraki_mx64w_firmware meraki_mx67_firmware meraki_mx67c_firmware meraki_mx67w_firmware meraki_mx68_firmware meraki_mx68cw_firmware meraki_mx68w_firmware meraki_mx100_firmware meraki_mx84_firmware +40 more products
Published: Oct. 02, 2024

Modified: Jun. 04, 2025
8.6

HIGH

CVE-2024-20499

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. ...

Affected Products : meraki_mx64_firmware meraki_mx64w_firmware meraki_mx67_firmware meraki_mx67c_firmware meraki_mx67w_firmware meraki_mx68_firmware meraki_mx68cw_firmware meraki_mx68w_firmware meraki_mx100_firmware meraki_mx84_firmware +40 more products
Published: Oct. 02, 2024

Modified: Jun. 04, 2025
8.6

HIGH

CVE-2024-20498

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. ...

Affected Products : meraki_mx64_firmware meraki_mx64w_firmware meraki_mx67_firmware meraki_mx67c_firmware meraki_mx67w_firmware meraki_mx68_firmware meraki_mx68cw_firmware meraki_mx68w_firmware meraki_mx100_firmware meraki_mx84_firmware +40 more products
Published: Oct. 02, 2024

Modified: Jun. 04, 2025
4.7

MEDIUM

CVE-2022-23089

When dumping core and saving process information, proc_getargv() might return an sbuf which have a sbuf_len() of 0 or -1, which is not properly handled. An out-of-bound read can happen when user constructs a specially crafted ps_string, which in turn can...

Affected Products : freebsd
Published: Feb. 15, 2024

Modified: Jun. 04, 2025

Showing 20 of 292772 Results

1
...
1009
1010
1011
1012
1013
1014
1015
...
14639

Browse by Apps

Latest CVE Feed

8.8

4.0

7.7

3.3

6.3

6.5

6.5

9.3

8.3

8.8

5.3

7.2

5.8

5.9

7.5

8.6

7.5

8.6

8.6

4.7

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable