Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

5.3

MEDIUM

CVE-2021-37175

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All ve...

Affected Products : ruggedcom_rox_mx5000_firmware ruggedcom_rox_rx1400_firmware ruggedcom_rox_rx1500_firmware ruggedcom_rox_rx1501_firmware ruggedcom_rox_rx1510_firmware ruggedcom_rox_rx1511_firmware ruggedcom_rox_rx1512_firmware ruggedcom_rox_rx1524_firmware ruggedcom_rox_rx1536_firmware ruggedcom_rox_rx5000_firmware +10 more products
EPSS Score: %0.24

Published: Sep. 14, 2021

Modified: Nov. 21, 2024
9.0

HIGH

CVE-2021-37174

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All ve...

Affected Products : ruggedcom_rox_mx5000_firmware ruggedcom_rox_rx1400_firmware ruggedcom_rox_rx1500_firmware ruggedcom_rox_rx1501_firmware ruggedcom_rox_rx1510_firmware ruggedcom_rox_rx1511_firmware ruggedcom_rox_rx1512_firmware ruggedcom_rox_rx1524_firmware ruggedcom_rox_rx1536_firmware ruggedcom_rox_rx5000_firmware +10 more products
EPSS Score: %0.56

Published: Sep. 14, 2021

Modified: Nov. 21, 2024
9.0

HIGH

CVE-2021-37173

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All ve...

Affected Products : ruggedcom_rox_mx5000_firmware ruggedcom_rox_rx1400_firmware ruggedcom_rox_rx1500_firmware ruggedcom_rox_rx1501_firmware ruggedcom_rox_rx1510_firmware ruggedcom_rox_rx1511_firmware ruggedcom_rox_rx1512_firmware ruggedcom_rox_rx1524_firmware ruggedcom_rox_rx1536_firmware ruggedcom_rox_rx5000_firmware +10 more products
EPSS Score: %1.55

Published: Sep. 14, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-37172

A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13...

Affected Products : simatic_s7-1200_cpu_firmware simatic_step_7_$tia_portal$ simatic_s7-1200_firmware cpu_1211c cpu_1212c cpu_1212fc cpu_1214c cpu_1214fc cpu_1215c cpu_1215fc +1 more products
EPSS Score: %0.19

Published: Aug. 10, 2021

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2021-37167

An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. A user logged in using the default credentials can gain root access to the devic...

Affected Products : hmi-3_control_panel_firmware hmi-3_control_panel
EPSS Score: %0.58

Published: Aug. 02, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-37166

A buffer overflow issue leading to denial of service was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When HMI3 starts up, it binds a local service to a TCP po...

Affected Products : hmi-3_control_panel_firmware hmi-3_control_panel
EPSS Score: %0.87

Published: Aug. 02, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-37165

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When a message is sent to the HMI TCP socket, it is forwarded to the hmiProcessMsg fun...

Affected Products : hmi-3_control_panel_firmware hmi-3_control_panel
EPSS Score: %5.00

Published: Aug. 02, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-37164

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. In the tcpTxThread function, the received data is copied to a stack buffer. An off-by-...

Affected Products : hmi-3_control_panel_firmware hmi-3_control_panel
EPSS Score: %0.80

Published: Aug. 02, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-37163

An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus operated by released versions of software before Nexus Software 7.2.5.7. The device has two user accounts with passwords that are hardcoded....

Affected Products : hmi-3_control_panel_firmware hmi-3_control_panel
EPSS Score: %0.58

Published: Aug. 02, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-37162

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. If an attacker sends a malformed UDP message, a buffer underflow occurs, leading to an...

Affected Products : hmi-3_control_panel_firmware hmi-3_control_panel
EPSS Score: %7.56

Published: Aug. 02, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-37161

A buffer overflow issue was discovered in the HMI3 Control Panel contained within the Swisslog Healthcare Nexus Panel, operated by released versions of software before Nexus Software 7.2.5.7. A buffer overflow allows an attacker to overwrite an internal q...

Affected Products : hmi-3_control_panel_firmware hmi-3_control_panel
EPSS Score: %7.56

Published: Aug. 02, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-37160

A firmware validation issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. There is no firmware validation (e.g., cryptographic signature validation) during ...

Affected Products : hmi-3_control_panel_firmware hmi-3_control_panel
EPSS Score: %2.03

Published: Aug. 02, 2021

Modified: Nov. 21, 2024
6.4

MEDIUM

CVE-2021-37159

hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free....

Affected Products : linux_kernel debian_linux communications_cloud_native_core_policy communications_cloud_native_core_binding_support_function communications_cloud_native_core_network_exposure_function
EPSS Score: %0.03

Published: Jul. 21, 2021

Modified: Nov. 21, 2024
9.0

HIGH

CVE-2021-37158

An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. An authenticated attacker could inject OS commands by starting a Counter-Strike server and using the map field to enter a Bash command....

Affected Products : opengamepanel
EPSS Score: %0.42

Published: Nov. 10, 2021

Modified: Nov. 21, 2024
9.0

HIGH

CVE-2021-37157

An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. $HOME/OGP/Cfg/Config.pm has the root password in cleartext....

Affected Products : opengamepanel
EPSS Score: %0.26

Published: Nov. 10, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-37156

Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated....

Affected Products : redmine
EPSS Score: %0.25

Published: Aug. 05, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-37155

wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request differs from the serial number in the OCSP response....

Affected Products : wolfssl
EPSS Score: %0.51

Published: Jul. 21, 2021

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2021-37154

In ForgeRock Access Management (AM) before 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a fraudulent SAML 2.0 assertion....

Affected Products : access_management
EPSS Score: %0.53

Published: Aug. 25, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-37153

ForgeRock Access Management (AM) before 7.0.2, when configured with Active Directory as the Identity Store, has an authentication-bypass issue....

Affected Products : access_management
EPSS Score: %0.63

Published: Aug. 25, 2021

Modified: Nov. 21, 2024
5.4

MEDIUM

CVE-2021-37152

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications....

Affected Products : nexus_repository_manager
EPSS Score: %3.22

Published: Aug. 10, 2021

Modified: Nov. 21, 2024

Showing 20 of 291739 Results

Latest CVE Feed

5.3

9.0

9.0

7.5

10.0

7.8

9.8

9.8

9.8

9.8

9.8

9.8

6.4

9.0

9.0

7.5

9.8

10.0

9.8

5.4

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable