Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 5.8

    MEDIUM
    CVE-2019-6516

    An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to force the application to perform requests to the internal workstation (port-scanning) and to perform requests to adjacent workstations (network-scanning), aka SSRF.... Read more

    Affected Products : dashboard_server
    • Published: May. 14, 2019
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2019-6515

    An issue was discovered in WSO2 API Manager 2.6.0. Uploaded documents for API documentation are available to an unauthenticated user.... Read more

    Affected Products : api_manager
    • Published: May. 14, 2019
    • Modified: May. 30, 2025

  • 4.8

    MEDIUM
    CVE-2019-6514

    An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to inject a JavaScript payload that will be stored in the database and then displayed and executed on the same page, aka XSS.... Read more

    Affected Products : dashboard_server
    • Published: May. 14, 2019
    • Modified: May. 30, 2025

  • 5.5

    MEDIUM
    CVE-2019-6513

    An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by changing the extension to an allowed one.... Read more

    Affected Products : api_manager
    • Published: May. 21, 2019
    • Modified: May. 30, 2025

  • 4.1

    MEDIUM
    CVE-2019-6512

    An issue was discovered in WSO2 API Manager 2.6.0. It is possible to force the application to perform requests to the internal workstation (SSRF port-scanning), other adjacent workstations (SSRF network scanning), or to enumerate files because of the exis... Read more

    Affected Products : api_manager
    • Published: May. 14, 2019
    • Modified: May. 30, 2025

  • 10.0

    CRITICAL
    CVE-2019-3905

    Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF.... Read more

    Affected Products : manageengine_adselfservice_plus
    • Published: Jan. 03, 2019
    • Modified: May. 30, 2025

  • 7.0

    HIGH
    CVE-2018-18466

    An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode and used for RDP connections, the application stores the emergency credentials in cleartext in the logs (present in the DEBUG folder) that can be accessed by anyone. NOTE: T... Read more

    Affected Products : securaccess
    • Published: Mar. 21, 2019
    • Modified: May. 30, 2025

  • 5.4

    MEDIUM
    CVE-2018-10213

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is XSS in invitation mail received from a different user, who can modify the HTML in that mail before sending it.... Read more

    Affected Products : enterprise_file_sharing
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.5

    MEDIUM
    CVE-2018-10212

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization leading to creation of folders within another account via a modified device value.... Read more

    Affected Products : enterprise_file_sharing
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2018-10211

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization when listing the history of another user via a modified "vaultize_session_id" value in a cookie.... Read more

    Affected Products : enterprise_file_sharing
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2018-10210

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. Enumeration of users is possible through the password-reset feature.... Read more

    Affected Products : enterprise_file_sharing
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.4

    MEDIUM
    CVE-2018-10209

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS on the file or folder download pop-up via a crafted file or folder name.... Read more

    Affected Products : enterprise_file_sharing
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 6.1

    MEDIUM
    CVE-2018-10208

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is anonymous reflected XSS on the error page via a /share/error?message= URI.... Read more

    Affected Products : enterprise_file_sharing
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2018-10207

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. An attacker can exploit Missing Authorization on the FlexPaperViewer SWF reader, and export files that should have been restricted, via vectors involving page-by-page access to a docume... Read more

    Affected Products : enterprise_file_sharing
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.4

    MEDIUM
    CVE-2018-10206

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS via the optional message field of a file request.... Read more

    Affected Products : enterprise_file_sharing
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 7.8

    HIGH
    CVE-2015-4596

    Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges.... Read more

    Affected Products : mouse_suite
    • Published: Jun. 13, 2017
    • Modified: May. 30, 2025

  • 9.1

    CRITICAL
    CVE-2023-45927

    S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().... Read more

    Affected Products : s-lang
    • Published: Mar. 27, 2024
    • Modified: May. 30, 2025

  • 6.1

    MEDIUM
    CVE-2024-3580

    The Popup4Phone WordPress plugin through 1.3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as Editor to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (... Read more

    Affected Products : popup4phone
    • Published: May. 17, 2024
    • Modified: May. 30, 2025

  • 6.1

    MEDIUM
    CVE-2024-3231

    The Popup4Phone WordPress plugin through 1.3.2 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks against admins.... Read more

    Affected Products : popup4phone
    • Published: May. 17, 2024
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2023-7252

    The Tickera WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.... Read more

    Affected Products : tickera
    • Published: Apr. 22, 2024
    • Modified: May. 30, 2025
Showing 20 of 292766 Results