Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 5.9

    MEDIUM
    CVE-2021-31525

    net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.... Read more

    Affected Products : fedora go
    • EPSS Score: %0.01
    • Published: May. 27, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-31523

    The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has cap_net_raw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics l... Read more

    Affected Products : xscreensaver
    • EPSS Score: %0.04
    • Published: Apr. 21, 2021
    • Modified: Nov. 21, 2024
  • 9.8

    CRITICAL
    CVE-2021-31522

    Kylin can receive user input and load any class through Class.forName(...). This issue affects Apache Kylin 2 version 2.6.6 and prior versions; Apache Kylin 3 version 3.1.2 and prior versions; Apache Kylin 4 version 4.0.0 and prior versions.... Read more

    Affected Products : kylin
    • EPSS Score: %5.80
    • Published: Jan. 06, 2022
    • Modified: Nov. 21, 2024
  • 5.4

    MEDIUM
    CVE-2021-31521

    Trend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected cross-site scripting (XSS) vulnerability in the product's Captive Portal.... Read more

    • EPSS Score: %0.40
    • Published: Jun. 17, 2021
    • Modified: Nov. 21, 2024
  • 8.1

    HIGH
    CVE-2021-31520

    A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management int... Read more

    Affected Products : im_security
    • EPSS Score: %1.50
    • Published: May. 10, 2021
    • Modified: Nov. 21, 2024
  • 7.3

    HIGH
    CVE-2021-31519

    An incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code... Read more

    Affected Products : windows housecall_for_home_networks
    • EPSS Score: %0.09
    • Published: May. 12, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-31518

    Trend Micro Home Network Security 6.5.599 and earlier is vulnerable to a file-parsing vulnerability which could allow an attacker to exploit the vulnerability and cause a denial-of-service to the device. This vulnerability is similar, but not identical to... Read more

    Affected Products : home_network_security
    • EPSS Score: %0.69
    • Published: May. 05, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-31517

    Trend Micro Home Network Security 6.5.599 and earlier is vulnerable to a file-parsing vulnerability which could allow an attacker to exploit the vulnerability and cause a denial-of-service to the device. This vulnerability is similar, but not identical to... Read more

    Affected Products : home_network_security
    • EPSS Score: %0.69
    • Published: May. 05, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-31516

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 (Build ID 88f343c3). User interaction is required to exploit this vulnerability in that the target must visit a malicious pag... Read more

    Affected Products : binary_ninja
    • EPSS Score: %1.32
    • Published: Jun. 29, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-31515

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vector 35 Binary Ninja 2.3.2660 (Build ID 88f343c3). User interaction is required to exploit this vulnerability in that the target must visit a malicious pag... Read more

    Affected Products : binary_ninja
    • EPSS Score: %1.32
    • Published: Jun. 29, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-31514

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a ... Read more

    Affected Products : brava\!_desktop
    • EPSS Score: %0.48
    • Published: Jun. 29, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-31513

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a ... Read more

    Affected Products : brava\!_desktop
    • EPSS Score: %0.48
    • Published: Jun. 29, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-31512

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a ... Read more

    Affected Products : brava\!_desktop
    • EPSS Score: %0.48
    • Published: Jun. 29, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-31511

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a ... Read more

    Affected Products : brava\!_desktop
    • EPSS Score: %0.48
    • Published: Jun. 29, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-31510

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a ... Read more

    Affected Products : brava\!_desktop
    • EPSS Score: %0.48
    • Published: Jun. 29, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-31509

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malici... Read more

    Affected Products : brava\!_desktop
    • EPSS Score: %0.48
    • Published: Jun. 29, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-31508

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malici... Read more

    Affected Products : brava\!_desktop
    • EPSS Score: %0.48
    • Published: Jun. 29, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-31507

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malici... Read more

    Affected Products : brava\!_desktop
    • EPSS Score: %0.48
    • Published: Jun. 29, 2021
    • Modified: Nov. 21, 2024
  • 4.3

    MEDIUM
    CVE-2021-31506

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or... Read more

    Affected Products : brava\!_desktop
    • EPSS Score: %0.23
    • Published: Jun. 29, 2021
    • Modified: Nov. 21, 2024
  • 7.2

    HIGH
    CVE-2021-31505

    This vulnerability allows attackers with physical access to escalate privileges on affected installations of Arlo Q Plus 1.9.0.3_278. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSH service. The device... Read more

    Affected Products : q_plus_firmware q_plus
    • EPSS Score: %0.15
    • Published: Jun. 29, 2021
    • Modified: Nov. 21, 2024
Showing 20 of 292508 Results