Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 7.5

    HIGH
    CVE-2021-27405

    A ReDoS (regular expression denial of service) flaw was found in the @progfay/scrapbox-parser package before 6.0.3 for Node.js.... Read more

    Affected Products : scrapbox-parser
    • EPSS Score: %0.56
    • Published: Feb. 19, 2021
    • Modified: Nov. 21, 2024
  • 6.1

    MEDIUM
    CVE-2021-27404

    Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow injection of a Host HTTP header.... Read more

    • EPSS Score: %0.16
    • Published: Feb. 19, 2021
    • Modified: Nov. 21, 2024
  • 6.1

    MEDIUM
    CVE-2021-27403

    Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow cgi-bin/te_acceso_router.cgi curWebPage XSS.... Read more

    • EPSS Score: %0.94
    • Published: Feb. 19, 2021
    • Modified: Nov. 21, 2024
  • 6.5

    MEDIUM
    CVE-2021-27402

    The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access (view and modify) user data by injecting arbitrary directory paths due to improper URL validation, aka Directory Traversal.... Read more

    Affected Products : micollab
    • EPSS Score: %0.30
    • Published: Aug. 13, 2021
    • Modified: Nov. 21, 2024
  • 6.1

    MEDIUM
    CVE-2021-27401

    The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access (view and modify) user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting (XSS).... Read more

    Affected Products : micollab
    • EPSS Score: %0.28
    • Published: Aug. 13, 2021
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-27400

    HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1... Read more

    Affected Products : vault
    • EPSS Score: %0.19
    • Published: Apr. 22, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-27399

    A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could r... Read more

    Affected Products : simcenter_femap
    • EPSS Score: %0.40
    • Published: Jun. 08, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-27398

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different... Read more

    Affected Products : tecnomatix_plant_simulation
    • EPSS Score: %0.94
    • Published: May. 12, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-27397

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a memory corruption condition. An attacker... Read more

    Affected Products : tecnomatix_plant_simulation
    • EPSS Score: %0.38
    • Published: May. 12, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-27396

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different... Read more

    Affected Products : tecnomatix_plant_simulation
    • EPSS Score: %0.94
    • Published: May. 12, 2021
    • Modified: Nov. 21, 2024
  • 8.1

    HIGH
    CVE-2021-27395

    A vulnerability has been identified in SIMATIC Process Historian 2013 and earlier (All versions), SIMATIC Process Historian 2014 (All versions < SP3 Update 6), SIMATIC Process Historian 2019 (All versions), SIMATIC Process Historian 2020 (All versions). A... Read more

    • EPSS Score: %0.25
    • Published: Oct. 12, 2021
    • Modified: Nov. 21, 2024
  • 8.8

    HIGH
    CVE-2021-27394

    A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (All versions < V8.17.0), Mendix Applications using Mendix 8 (V8.12) (All versions < V8.12.5), Mendix Applications usin... Read more

    Affected Products : mendix
    • EPSS Score: %0.34
    • Published: Apr. 16, 2021
    • Modified: Nov. 21, 2024
  • 5.3

    MEDIUM
    CVE-2021-27393

    A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests.... Read more

    • EPSS Score: %0.22
    • Published: Apr. 22, 2021
    • Modified: Nov. 21, 2024
  • 8.8

    HIGH
    CVE-2021-27392

    A vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3), Siveillance Video Open Network Bridge (2020 R2), Siveillance Video Open Network Bridge (2020 R1), Siveillance Video Open Network Bridge (2019 R3), Siveillance Video Op... Read more

    • EPSS Score: %0.24
    • Published: Apr. 22, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-27390

    A vulnerability has been identified in JT2Go (All versions < V13.1.0.3), Teamcenter Visualization (All versions < V13.1.0.3). The TIFF_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This ... Read more

    Affected Products : jt2go teamcenter_visualization
    • EPSS Score: %0.37
    • Published: Jun. 08, 2021
    • Modified: Nov. 21, 2024
  • 9.8

    CRITICAL
    CVE-2021-27389

    A vulnerability has been identified in Opcenter Quality (All versions < V12.2), QMS Automotive (All versions < V12.30). A private sign key is shipped with the product without adequate protection.... Read more

    Affected Products : qms_automotive opcenter_quality
    • EPSS Score: %0.41
    • Published: Apr. 22, 2021
    • Modified: Nov. 21, 2024
  • 9.8

    CRITICAL
    CVE-2021-27388

    SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or execution of limited configuration modific... Read more

    • EPSS Score: %1.72
    • Published: Jun. 15, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-27387

    A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could r... Read more

    Affected Products : simcenter_femap
    • EPSS Score: %0.40
    • Published: Jun. 08, 2021
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-27386

    A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMA... Read more

    • EPSS Score: %0.44
    • Published: May. 12, 2021
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-27385

    A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMA... Read more

    • EPSS Score: %0.25
    • Published: May. 12, 2021
    • Modified: Nov. 21, 2024
Showing 20 of 291634 Results