Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 6.1

    MEDIUM
    CVE-2018-10208

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is anonymous reflected XSS on the error page via a /share/error?message= URI.... Read more

    Affected Products : enterprise_file_sharing
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2018-10207

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. An attacker can exploit Missing Authorization on the FlexPaperViewer SWF reader, and export files that should have been restricted, via vectors involving page-by-page access to a docume... Read more

    Affected Products : enterprise_file_sharing
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 5.4

    MEDIUM
    CVE-2018-10206

    An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS via the optional message field of a file request.... Read more

    Affected Products : enterprise_file_sharing
    • Published: Apr. 25, 2018
    • Modified: May. 30, 2025

  • 7.8

    HIGH
    CVE-2015-4596

    Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges.... Read more

    Affected Products : mouse_suite
    • Published: Jun. 13, 2017
    • Modified: May. 30, 2025

  • 9.1

    CRITICAL
    CVE-2023-45927

    S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().... Read more

    Affected Products : s-lang
    • Published: Mar. 27, 2024
    • Modified: May. 30, 2025

  • 6.1

    MEDIUM
    CVE-2024-3580

    The Popup4Phone WordPress plugin through 1.3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as Editor to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (... Read more

    Affected Products : popup4phone
    • Published: May. 17, 2024
    • Modified: May. 30, 2025

  • 6.1

    MEDIUM
    CVE-2024-3231

    The Popup4Phone WordPress plugin through 1.3.2 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks against admins.... Read more

    Affected Products : popup4phone
    • Published: May. 17, 2024
    • Modified: May. 30, 2025

  • 5.3

    MEDIUM
    CVE-2023-7252

    The Tickera WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.... Read more

    Affected Products : tickera
    • Published: Apr. 22, 2024
    • Modified: May. 30, 2025

  • 6.8

    MEDIUM
    CVE-2024-2761

    The Genesis Blocks WordPress plugin before 3.1.3 does not properly escape data input provided to some of its blocks, allowing using with at least contributor privileges to conduct Stored XSS attacks.... Read more

    Affected Products : genesis_blocks
    • Published: Apr. 19, 2024
    • Modified: May. 30, 2025

  • 4.8

    MEDIUM
    CVE-2024-2309

    The WP STAGING WordPress Backup Plugin WordPress plugin before 3.4.0, wp-staging-pro WordPress plugin before 5.4.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Script... Read more

    Affected Products : wp_staging
    • Published: Apr. 17, 2024
    • Modified: May. 30, 2025

  • 6.1

    MEDIUM
    CVE-2024-4924

    The Social Sharing Plugin WordPress plugin before 3.3.63 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is di... Read more

    Affected Products : sassy_social_share
    • Published: Jun. 12, 2024
    • Modified: May. 30, 2025

  • 7.0

    HIGH
    CVE-2023-31728

    Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface.... Read more

    Affected Products : rut240_firmware rut240
    • Published: Feb. 17, 2024
    • Modified: May. 30, 2025

  • 6.5

    MEDIUM
    CVE-2025-48252

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Back Button Widget allows Stored XSS. This issue affects Back Button Widget: from n/a through 1.6.8.... Read more

    Affected Products : back_button_widget
    • Published: May. 19, 2025
    • Modified: May. 30, 2025
    • Vuln Type: Cross-Site Scripting

  • 7.1

    HIGH
    CVE-2025-48144

    Cross-Site Request Forgery (CSRF) vulnerability in sidngr Import Export For WooCommerce allows Stored XSS. This issue affects Import Export For WooCommerce: from n/a through 1.6.2.... Read more

    Affected Products : import_export_for_woocommerce
    • Published: May. 16, 2025
    • Modified: May. 30, 2025
    • Vuln Type: Cross-Site Request Forgery

  • 8.8

    HIGH
    CVE-2025-48138

    Missing Authorization vulnerability in berthaai BERTHA AI allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects BERTHA AI: from n/a through 1.12.11.... Read more

    Affected Products : bertha_ai
    • Published: May. 16, 2025
    • Modified: May. 30, 2025
    • Vuln Type: Authorization

  • 7.5

    HIGH
    CVE-2024-23985

    EzServer 6.4.017 allows a denial of service (daemon crash) via a long string, such as one for the RNTO command.... Read more

    Affected Products : ezserver
    • Published: Jan. 25, 2024
    • Modified: May. 30, 2025

  • 4.3

    MEDIUM
    CVE-2024-23902

    A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier allows attackers to connect to an attacker-specified URL.... Read more

    Affected Products : github_branch_source
    • Published: Jan. 24, 2024
    • Modified: May. 30, 2025

  • 6.5

    MEDIUM
    CVE-2024-23901

    Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to configure and share a project, resulting in a crafted Pipeline being built by Jen... Read more

    Affected Products : github_branch_source
    • Published: Jan. 24, 2024
    • Modified: May. 30, 2025

  • 5.5

    MEDIUM
    CVE-2024-23849

    In rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDS_MSG_RX_DGRAM_TRACE_MAX comparison, resulting in out-of-bounds access.... Read more

    Affected Products : linux_kernel
    • Published: Jan. 23, 2024
    • Modified: May. 30, 2025

  • 5.5

    MEDIUM
    CVE-2024-23848

    In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.... Read more

    Affected Products : linux_kernel
    • Published: Jan. 23, 2024
    • Modified: May. 30, 2025
Showing 20 of 293289 Results