Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

5.3

MEDIUM

CVE-2021-27463

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the session cookie attribute is not properly invalidated, allowing an attacker to intercept the coo...

Affected Products : x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware x-stream_enhanced_xegp x-stream_enhanced_xegk x-stream_enhanced_xefd x-stream_enhanced_xexf
EPSS Score: %0.16

Published: May. 20, 2021

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2021-27462

A deserialization vulnerability exists in how the AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier verifies serialized data. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary comma...

Affected Products : factorytalk_assetcentre
EPSS Score: %0.11

Published: Mar. 23, 2022

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-27461

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using specially crafted URLs....

Affected Products : x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware x-stream_enhanced_xegp x-stream_enhanced_xegk x-stream_enhanced_xefd x-stream_enhanced_xexf
EPSS Score: %0.33

Published: May. 20, 2021

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2021-27460

Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier components contain .NET remoting endpoints that deserialize untrusted data without sufficiently verifying that the resulting data will be valid. This vulnerability may allow a remote, unauthen...

Affected Products : factorytalk_assetcentre
EPSS Score: %0.29

Published: Mar. 23, 2022

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-27459

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The webserver of the affected products allows unvalidated files to be uploaded, which an attacker could utilize to execute arbitrary code....

Affected Products : x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware x-stream_enhanced_xegp x-stream_enhanced_xegk x-stream_enhanced_xefd x-stream_enhanced_xexf
EPSS Score: %0.70

Published: May. 20, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-27458

If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCC-6464: All versions, PC10P TCC-6372: All versions, PC10P-DP TCC-6726: All versions, PC10P-DP-IO TCC-6752: All vers...

Affected Products : pc10g-cpu_tcc-6353_firmware pc10ge_tcc-6464_firmware pc10p_tcc-6372_firmware pc10p-dp_tcc-6726_firmware pc10p-dp-io_tcc-6752_firmware pc10b-p_tcc-6373_firmware pc10b_tcc-1021_firmware pc10b-e\/c_tcu-6521_firmware pc10e_tcc-4737_firmware plus_cpu_tcc-6740_firmware +26 more products
EPSS Score: %0.26

Published: Apr. 19, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-27457

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used fo...

Affected Products : x-stream_enhanced_xegp_firmware x-stream_enhanced_xegk_firmware x-stream_enhanced_xefd_firmware x-stream_enhanced_xexf_firmware x-stream_enhanced_xegp x-stream_enhanced_xegk x-stream_enhanced_xefd x-stream_enhanced_xexf
EPSS Score: %0.06

Published: May. 20, 2021

Modified: Nov. 21, 2024
2.4

LOW

CVE-2021-27456

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control....

Affected Products : gemini_882300_firmware gemini_882160_firmware gemini_882400_firmware gemini_882390_firmware gemini_882410_firmware gemini_882412_firmware gemini_882473_firmware gemini_882470_firmware gemini_882471_firmware gemini_882476_firmware +12 more products
EPSS Score: %0.08

Published: Mar. 23, 2022

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-27455

Delta Electronics DOPSoft Versions 4.0.10.17 and prior are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to disclose information....

Affected Products : dopsoft
EPSS Score: %0.15

Published: Jul. 02, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-27454

The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 (all firmware versions prior to 02A04.1)....

Affected Products : reason_dr60_firmware reason_dr60
EPSS Score: %0.05

Published: Mar. 25, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-27453

Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access....

Affected Products : amegaview
EPSS Score: %0.22

Published: Dec. 21, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-27452

The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials on the MU320E (all firmware versions prior to v04A00.1)....

Affected Products : mu320e_firmware mu320e
EPSS Score: %0.04

Published: Mar. 25, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-27451

Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device....

Affected Products : amegaview
EPSS Score: %0.21

Published: Dec. 21, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-27450

SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which could lead to additional misconfiguration or be leveraged as part of a larger attack on the MU320E (all firmware versi...

Affected Products : mu320e_firmware mu320e
EPSS Score: %0.03

Published: Mar. 25, 2021

Modified: Nov. 21, 2024
9.9

CRITICAL

CVE-2021-27449

Mesa Labs AmegaView Versions 3.0 and prior has a command injection vulnerability that can be exploited to execute commands in the web server....

Affected Products : amegaview
EPSS Score: %1.08

Published: Dec. 21, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-27448

A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E (all firmware versions prior to v04A00.1)....

Affected Products : mu320e_firmware mu320e
EPSS Score: %0.05

Published: Mar. 25, 2021

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2021-27447

Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code....

Affected Products : amegaview
EPSS Score: %1.46

Published: Dec. 21, 2021

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2021-27446

The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system....

Affected Products : cmt-svr-100_firmware cmt-svr-102_firmware cmt-svr-200_firmware cmt-svr-202_firmware cmt-g01_firmware cmt-g02_firmware cmt-g03_firmware cmt-g04_firmware cmt3071_firmware cmt3072_firmware +22 more products
EPSS Score: %0.28

Published: May. 16, 2022

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-27445

Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device....

Affected Products : amegaview
EPSS Score: %0.03

Published: Dec. 21, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-27444

The Weintek cMT product line is vulnerable to various improper access controls, which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator....

Affected Products : cmt-svr-100_firmware cmt-svr-102_firmware cmt-svr-200_firmware cmt-svr-202_firmware cmt-g01_firmware cmt-g02_firmware cmt-g03_firmware cmt-g04_firmware cmt3071_firmware cmt3072_firmware +22 more products
EPSS Score: %0.30

Published: May. 16, 2022

Modified: Nov. 21, 2024

Showing 20 of 291647 Results

Latest CVE Feed

5.3

10.0

7.5

10.0

9.8

7.5

7.5

2.4

5.5

7.8

9.8

7.8

9.8

7.8

9.9

7.8

10.0

10.0

7.8

9.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable