Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.2

HIGH

CVE-2021-30066

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be loaded because firmware signature verification (for a USB stick) can be bypassed...

Affected Products : tofino_xenon_security_appliance_firmware tofino_argon_fa-tsa-220-tx\/mm_firmware tofino_argon_fa-tsa-220-tx\/tx_firmware tofino_argon_fa-tsa-220-mm\/tx_firmware tofino_argon_fa-tsa-220-mm\/mm_firmware tofino_argon_fa-tsa-100-tx\/tx_firmware eagle_20_tofino_943_987-505-mm\/mm_firmware eagle_20_tofino_943_987-504-mm\/tx_firmware eagle_20_tofino_943_987-502_-tx\/mm_firmware eagle_20_tofino_943_987-501-tx\/tx_firmware +16 more products
EPSS Score: %0.00

Published: Apr. 03, 2022

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-30065

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: this issue exists because of an incomplete fix of CVE-...

Affected Products : tofino_xenon_security_appliance_firmware tofino_argon_fa-tsa-220-tx\/mm_firmware tofino_argon_fa-tsa-220-tx\/tx_firmware tofino_argon_fa-tsa-220-mm\/tx_firmware tofino_argon_fa-tsa-220-mm\/mm_firmware tofino_argon_fa-tsa-100-tx\/tx_firmware eagle_20_tofino_943_987-505-mm\/mm_firmware eagle_20_tofino_943_987-504-mm\/tx_firmware eagle_20_tofino_943_987-502_-tx\/mm_firmware eagle_20_tofino_943_987-501-tx\/tx_firmware +16 more products
EPSS Score: %0.03

Published: Apr. 03, 2022

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-30064

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an SSH login can succeed with hardcoded default credentials (if the device is in the uncommissioned state)....

Affected Products : tofino_xenon_security_appliance_firmware tofino_argon_fa-tsa-220-tx\/mm_firmware tofino_argon_fa-tsa-220-tx\/tx_firmware tofino_argon_fa-tsa-220-mm\/tx_firmware tofino_argon_fa-tsa-220-mm\/mm_firmware tofino_argon_fa-tsa-100-tx\/tx_firmware eagle_20_tofino_943_987-505-mm\/mm_firmware eagle_20_tofino_943_987-504-mm\/tx_firmware eagle_20_tofino_943_987-502_-tx\/mm_firmware eagle_20_tofino_943_987-501-tx\/tx_firmware +16 more products
EPSS Score: %0.06

Published: Apr. 03, 2022

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-30063

On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can cause an OPC enforcer denial of service....

Affected Products : tofino_xenon_security_appliance_firmware tofino_argon_fa-tsa-220-tx\/mm_firmware tofino_argon_fa-tsa-220-tx\/tx_firmware tofino_argon_fa-tsa-220-mm\/tx_firmware tofino_argon_fa-tsa-220-mm\/mm_firmware tofino_argon_fa-tsa-100-tx\/tx_firmware eagle_20_tofino_943_987-505-mm\/mm_firmware eagle_20_tofino_943_987-504-mm\/tx_firmware eagle_20_tofino_943_987-502_-tx\/mm_firmware eagle_20_tofino_943_987-501-tx\/tx_firmware +12 more products
EPSS Score: %0.07

Published: Apr. 03, 2022

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-30062

On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can bypass the OPC enforcer....

Affected Products : tofino_xenon_security_appliance_firmware tofino_argon_fa-tsa-220-tx\/mm_firmware tofino_argon_fa-tsa-220-tx\/tx_firmware tofino_argon_fa-tsa-220-mm\/tx_firmware tofino_argon_fa-tsa-220-mm\/mm_firmware tofino_argon_fa-tsa-100-tx\/tx_firmware eagle_20_tofino_943_987-505-mm\/mm_firmware eagle_20_tofino_943_987-504-mm\/tx_firmware eagle_20_tofino_943_987-502_-tx\/mm_firmware eagle_20_tofino_943_987-501-tx\/tx_firmware +12 more products
EPSS Score: %0.04

Published: Apr. 03, 2022

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2021-30061

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, physically proximate attackers can execute code via a crafted file on a USB stick....

Affected Products : tofino_xenon_security_appliance_firmware tofino_argon_fa-tsa-220-tx\/mm_firmware tofino_argon_fa-tsa-220-tx\/tx_firmware tofino_argon_fa-tsa-220-mm\/tx_firmware tofino_argon_fa-tsa-220-mm\/mm_firmware tofino_argon_fa-tsa-100-tx\/tx_firmware eagle_20_tofino_943_987-505-mm\/mm_firmware eagle_20_tofino_943_987-504-mm\/tx_firmware eagle_20_tofino_943_987-502_-tx\/mm_firmware eagle_20_tofino_943_987-501-tx\/tx_firmware +16 more products
EPSS Score: %0.01

Published: Apr. 03, 2022

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-30058

Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS). An attacker can inject arbitrary external script in '/knowagecockpitengine/api/1.0/pages/execute' via the 'SBI_HOST' parameter....

Affected Products : knowage
EPSS Score: %0.29

Published: Apr. 05, 2021

Modified: Nov. 21, 2024
4.8

MEDIUM

CVE-2021-30057

A stored HTML injection vulnerability exists in Knowage Suite version 7.1. An attacker can inject arbitrary HTML in "/restful-services/2.0/analyticalDrivers" via the 'LABEL' and 'NAME' parameters....

Affected Products : knowage
EPSS Score: %0.32

Published: Apr. 05, 2021

Modified: Nov. 21, 2024
5.4

MEDIUM

CVE-2021-30056

Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in /restful-services/publish via the 'EXEC_FROM' parameter that can lead to data leakage....

Affected Products : knowage
EPSS Score: %0.21

Published: Apr. 05, 2021

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-30055

A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'par_year' parameter when running a report....

Affected Products : knowage
EPSS Score: %0.57

Published: Apr. 05, 2021

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-30049

SysAid 20.3.64 b14 is affected by Cross Site Scripting (XSS) via a /KeepAlive.jsp?stamp= URI....

Affected Products : sysaid
EPSS Score: %10.57

Published: Jul. 22, 2021

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2021-30048

Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus (小说精品屋-plus) 3.5.1 allows attackers to read arbitrary files via the filePath parameter....

Affected Products : novel_boutique_house-plus
EPSS Score: %1.08

Published: Apr. 29, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-30047

VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed....

Affected Products : vsftpd
EPSS Score: %0.31

Published: Aug. 22, 2023

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2021-30046

VIGRA Computer Vision Library Version-1-11-1 contains a segmentation fault vulnerability in the impex.hxx read_image_band() function, in which a crafted file can cause a denial of service....

Affected Products : vigra_computer_vision_library
EPSS Score: %0.28

Published: Apr. 06, 2021

Modified: Nov. 21, 2024
9.1

CRITICAL

CVE-2021-30045

SerenityOS 2021-03-27 contains a buffer overflow vulnerability in the EndOfCentralDirectory::read() function....

Affected Products : serenityos serenity
EPSS Score: %0.58

Published: Apr. 06, 2021

Modified: Nov. 21, 2024
5.4

MEDIUM

CVE-2021-30044

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php....

Affected Products : remote_clinic
EPSS Score: %0.11

Published: Apr. 13, 2021

Modified: Nov. 21, 2024
5.4

MEDIUM

CVE-2021-30042

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php...

Affected Products : remote_clinic
EPSS Score: %0.15

Published: Apr. 13, 2021

Modified: Nov. 21, 2024
5.4

MEDIUM

CVE-2021-30039

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the patients/register-report.php....

Affected Products : remote_clinic
EPSS Score: %0.15

Published: Apr. 13, 2021

Modified: Nov. 21, 2024
5.4

MEDIUM

CVE-2021-30034

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Symptons field on patients/register-report.php....

Affected Products : remote_clinic
EPSS Score: %0.15

Published: Apr. 13, 2021

Modified: Nov. 21, 2024
5.4

MEDIUM

CVE-2021-30030

Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Full Name field on register-patient.php....

Affected Products : remote_clinic
EPSS Score: %0.18

Published: Apr. 13, 2021

Modified: Nov. 21, 2024

Showing 20 of 291520 Results

Latest CVE Feed

7.2

7.5

9.8

7.5

7.5

7.2

6.1

4.8

5.4

8.8

6.1

5.3

7.5

6.5

9.1

5.4

5.4

5.4

5.4

5.4

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable