Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

8.6

HIGH

CVE-2021-40118

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulner...

Affected Products : adaptive_security_appliance_software firepower_threat_defense asa_5585-x_firmware asa_5512-x_firmware asa_5515-x_firmware asa_5505_firmware asa_5525-x_firmware asa_5545-x_firmware asa_5555-x_firmware asa_5580_firmware +9 more products
Published: Oct. 27, 2021

Modified: Nov. 21, 2024
8.6

HIGH

CVE-2021-40117

A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected d...

Affected Products : adaptive_security_appliance_software firepower_threat_defense asa_5585-x_firmware asa_5512-x_firmware asa_5515-x_firmware asa_5505_firmware asa_5525-x_firmware asa_5545-x_firmware asa_5555-x_firmware asa_5580_firmware +9 more products
Published: Oct. 27, 2021

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-40115

A vulnerability in Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the we...

Affected Products : collaboration_meeting_rooms webex_video_mesh
Published: Nov. 04, 2021

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2021-40113

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions: Log in with...

Affected Products : catalyst_pon_switch_cgp-ont-1p_firmware catalyst_pon_switch_cgp-ont-4p_firmware catalyst_pon_switch_cgp-ont-4pvc_firmware catalyst_pon_switch_cgp-ont-4tvcw_firmware catalyst_pon_switch_cgp-ont-4pv_firmware catalyst_pon_switch_cgp-ont-1p catalyst_pon_switch_cgp-ont-4p catalyst_pon_switch_cgp-ont-4pvc catalyst_pon_switch_cgp-ont-4tvcw catalyst_pon_switch_cgp-ont-4pv
Published: Nov. 04, 2021

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2021-40112

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions: Log in with...

Affected Products : catalyst_pon_switch_cgp-ont-1p_firmware catalyst_pon_switch_cgp-ont-4p_firmware catalyst_pon_switch_cgp-ont-4pvc_firmware catalyst_pon_switch_cgp-ont-4tvcw_firmware catalyst_pon_switch_cgp-ont-4pv_firmware catalyst_pon_switch_cgp-ont-1p catalyst_pon_switch_cgp-ont-4p catalyst_pon_switch_cgp-ont-4pvc catalyst_pon_switch_cgp-ont-4tvcw catalyst_pon_switch_cgp-ont-4pv
Published: Nov. 04, 2021

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2021-40111

In Apache James, while fuzzing with Jazzer the IMAP parsing stack, we discover that crafted APPEND and STATUS IMAP command could be used to trigger infinite loops resulting in expensive CPU computations and OutOfMemory exceptions. This can be used for a D...

Affected Products : james
Published: Jan. 04, 2022

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-40110

In Apache James, using Jazzer fuzzer, we identified that an IMAP user can craft IMAP LIST commands to orchestrate a Denial Of Service using a vulnerable Regular expression. This affected Apache James prior to 3.6.1 We recommend upgrading to Apache James 3...

Affected Products : james
Published: Jan. 04, 2022

Modified: Nov. 21, 2024
6.4

MEDIUM

CVE-2021-40109

A SSRF issue was discovered in Concrete CMS through 8.5.5. Users can access forbidden files on their local network. A user with permissions to upload files from external sites can upload a URL that redirects to an internal resource of any file type. The r...

Affected Products : concrete_cms
Published: Sep. 27, 2021

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-40108

An issue was discovered in Concrete CMS through 8.5.5. The Calendar is vulnerable to CSRF. ccm_token is not verified on the ccm/calendar/dialogs/event/add/save endpoint....

Affected Products : concrete_cms
Published: Sep. 27, 2021

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-40106

An issue was discovered in Concrete CMS through 8.5.5. There is unauthenticated stored XSS in blog comments via the website field....

Affected Products : concrete_cms
Published: Sep. 27, 2021

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-40105

An issue was discovered in Concrete CMS through 8.5.5. There is XSS via Markdown Comments....

Affected Products : concrete_cms
Published: Sep. 27, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-40104

An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass....

Affected Products : concrete_cms
Published: Sep. 27, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-40103

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal can lead to Arbitrary File Reading and SSRF....

Affected Products : concrete_cms
Published: Sep. 27, 2021

Modified: Nov. 21, 2024
9.1

CRITICAL

CVE-2021-40102

An issue was discovered in Concrete CMS through 8.5.5. Arbitrary File deletion can occur via PHAR deserialization in is_dir (PHP Object Injection associated with the __wakeup magic method)....

Affected Products : concrete_cms
Published: Sep. 24, 2021

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2021-40101

An issue was discovered in Concrete CMS before 8.5.7. The Dashboard allows a user's password to be changed without a prompt for the current password....

Affected Products : concrete_cms
Published: Nov. 30, 2021

Modified: Nov. 21, 2024
5.4

MEDIUM

CVE-2021-40100

An issue was discovered in Concrete CMS through 8.5.5. Stored XSS can occur in Conversations when the Active Conversation Editor is set to Rich Text....

Affected Products : concrete_cms
Published: Sep. 24, 2021

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2021-40099

An issue was discovered in Concrete CMS through 8.5.5. Fetching the update json scheme over HTTP leads to remote code execution....

Affected Products : concrete_cms
Published: Sep. 24, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-40098

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regular expression....

Affected Products : concrete_cms
Published: Sep. 27, 2021

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-40097

An issue was discovered in Concrete CMS through 8.5.5. Authenticated path traversal leads to to remote code execution via uploaded PHP code, related to the bFilename parameter....

Affected Products : concrete_cms
Published: Sep. 27, 2021

Modified: Nov. 21, 2024
5.4

MEDIUM

CVE-2021-40096

A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via modification of the authorisationUrl in some integration configurations....

Affected Products : squaredup
Published: Dec. 07, 2021

Modified: Nov. 21, 2024

Showing 20 of 293330 Results

Browse by Apps

Latest CVE Feed

8.6

8.6

6.1

10.0

10.0

6.5

7.5

6.4

8.8

6.1

6.1

7.5

7.5

9.1

7.2

5.4

7.2

9.8

8.8

5.4

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable