Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.8

HIGH

CVE-2022-34707

Windows Kernel Elevation of Privilege Vulnerability...

Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +12 more products
EPSS Score: %0.28

Published: Aug. 09, 2022

Modified: Jun. 04, 2025
7.8

HIGH

CVE-2022-34706

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability...

Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +12 more products
EPSS Score: %2.27

Published: Aug. 09, 2022

Modified: Jun. 04, 2025
7.8

HIGH

CVE-2022-34705

Windows Defender Credential Guard Elevation of Privilege Vulnerability...

Affected Products : windows_10 windows_server_2016 windows_server_2019 windows_10_1809 windows_10_20h2 windows_10_21h2 windows_server_2022 windows_11_21h2 windows_11 windows +2 more products
EPSS Score: %0.85

Published: Aug. 09, 2022

Modified: Jun. 04, 2025
7.8

HIGH

CVE-2022-34703

Windows Partition Management Driver Elevation of Privilege Vulnerability...

Affected Products : windows_10 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_20h2 windows_10_21h2 windows_server_2022 windows_11_21h2 windows_11 +4 more products
EPSS Score: %2.27

Published: Aug. 09, 2022

Modified: Jun. 04, 2025
8.1

HIGH

CVE-2022-34702

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability...

Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +12 more products
EPSS Score: %0.75

Published: Aug. 09, 2022

Modified: Jun. 04, 2025
7.5

HIGH

CVE-2022-34701

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability...

Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +12 more products
EPSS Score: %13.82

Published: Aug. 09, 2022

Modified: Jun. 04, 2025
7.5

HIGH

CVE-2014-1745

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFa...

Affected Products : chrome
EPSS Score: %0.80

Published: May. 21, 2014

Modified: Jun. 04, 2025
9.3

HIGH

CVE-2011-2016

Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current w...

Affected Products : windows_7 windows_server_2008 windows_vista
EPSS Score: %15.61

Published: Nov. 08, 2011

Modified: Jun. 04, 2025
7.5

HIGH

CVE-2024-13254

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1....

Affected Products : rest_views
Published: Jan. 09, 2025

Modified: Jun. 04, 2025

Vuln Type: Information Disclosure
5.4

MEDIUM

CVE-2024-13252

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal TacJS allows Cross-Site Scripting (XSS).This issue affects TacJS: from 0.0.0 before 6.5.0....

Affected Products : tacjs
Published: Jan. 09, 2025

Modified: Jun. 04, 2025

Vuln Type: Cross-Site Scripting
8.8

HIGH

CVE-2025-4887

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Student Clearance System 1.0. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launc...

Affected Products : online_student_clearance_system
Published: May. 18, 2025

Modified: Jun. 04, 2025

Vuln Type: Cross-Site Request Forgery
9.8

CRITICAL

CVE-2025-4886

A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/product_update.php. The manipulation of the argument serial leads to sql injecti...

Affected Products : sales_and_inventory_system
Published: May. 18, 2025

Modified: Jun. 04, 2025

Vuln Type: Injection
9.8

CRITICAL

CVE-2025-4813

A vulnerability, which was classified as critical, was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected is an unknown function of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql ...

Affected Products : human_metapneumovirus_\(hmpv\)_-_testing_management_system human_metapneumovirus_testing_management_system
Published: May. 16, 2025

Modified: Jun. 04, 2025

Vuln Type: Injection
9.8

CRITICAL

CVE-2025-4812

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument mobilenumber leads t...

Affected Products : human_metapneumovirus human_metapneumovirus_\(hmpv\)_-_testing_management_system human_metapneumovirus_testing_management_system
Published: May. 16, 2025

Modified: Jun. 04, 2025

Vuln Type: Injection
9.8

CRITICAL

CVE-2025-4811

A vulnerability was found in CodeAstro Pharmacy Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php of the component Login. The manipulation of the argument Username leads to sq...

Affected Products : pharmacy_management_system
Published: May. 16, 2025

Modified: Jun. 04, 2025

Vuln Type: Injection
9.1

CRITICAL

CVE-2024-13253

Incorrect Authorization vulnerability in Drupal Advanced PWA inc Push Notifications allows Forceful Browsing.This issue affects Advanced PWA inc Push Notifications: from 0.0.0 before 1.5.0....

Affected Products : advanced_pwa_inc_push_notifications
Published: Jan. 09, 2025

Modified: Jun. 04, 2025

Vuln Type: Authorization
8.8

HIGH

CVE-2024-13251

Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1....

Affected Products : registration_role
Published: Jan. 09, 2025

Modified: Jun. 04, 2025

Vuln Type: Authorization
9.8

CRITICAL

CVE-2025-2676

A vulnerability, which was classified as critical, was found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file /add-subadmin.php. The manipulation of the argument sadminusername leads to sql injection. It is possibl...

Affected Products : bank_locker_management_system bank_locker_management_system
Published: Mar. 24, 2025

Modified: Jun. 04, 2025

Vuln Type: Injection
9.8

CRITICAL

CVE-2025-2677

A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /changeidproof.php. The manipulation of the argument editid leads to sql injection. The attack c...

Affected Products : bank_locker_management_system bank_locker_management_system
Published: Mar. 24, 2025

Modified: Jun. 04, 2025

Vuln Type: Injection
5.4

MEDIUM

CVE-2024-13249

Improper Ownership Management vulnerability in Drupal Node Access Rebuild Progressive allows Target Influence via Framing.This issue affects Node Access Rebuild Progressive: from 7.X-1.0 before 7.X-1.2....

Affected Products : node_access_rebuild_progressive
Published: Jan. 09, 2025

Modified: Jun. 04, 2025

Vuln Type: Misconfiguration

Showing 20 of 292720 Results

1
...
1016
1017
1018
1019
1020
1021
1022
...
14636

Browse by Apps

Latest CVE Feed

7.8

7.8

7.8

7.8

8.1

7.5

7.5

9.3

7.5

5.4

8.8

9.8

9.8

9.8

9.8

9.1

8.8

9.8

9.8

5.4

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable