Latest Published Vulnerabilities CVE

Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

8.0

HIGH

CVE-2021-22944

A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role and network access to gain the same privileges as the owner of the UniFi Protect application. This vulnerability is fixed in UniFi Protec...

Affected Products : unifi_protect
EPSS Score: %0.15

Published: Aug. 31, 2021

Modified: Nov. 21, 2024
9.6

CRITICAL

CVE-2021-22943

A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequently control the Protect camera(s) assigned to said network. This vulnerability is fixed in UniFi Protec...

Affected Products : unifi_protect
EPSS Score: %0.12

Published: Aug. 31, 2021

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-22942

A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website....

Affected Products : rails actionpack
EPSS Score: %0.54

Published: Oct. 18, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-22940

Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior....

Affected Products : debian_linux peoplesoft_enterprise_peopletools jd_edwards_enterpriseone_tools sinec_infrastructure_network_services node.js graalvm nextgen_api
EPSS Score: %0.35

Published: Aug. 16, 2021

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2021-22939

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted....

Affected Products : debian_linux peoplesoft_enterprise_peopletools jd_edwards_enterpriseone_tools sinec_infrastructure_network_services node.js graalvm mysql_cluster nextgen_api
EPSS Score: %0.14

Published: Aug. 16, 2021

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2021-22938

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter in the administrator web console....

Affected Products : pulse_connect_secure connect_secure
EPSS Score: %5.41

Published: Aug. 16, 2021

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2021-22937

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write via a maliciously crafted archive uploaded in the administrator web interface....

Affected Products : pulse_connect_secure connect_secure
EPSS Score: %7.48

Published: Aug. 16, 2021

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-22936

A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack against an authenticated administrator via an unsanitized web parameter....

Affected Products : pulse_connect_secure connect_secure
EPSS Score: %0.25

Published: Aug. 16, 2021

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2021-22935

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter....

Affected Products : pulse_connect_secure connect_secure
EPSS Score: %5.41

Published: Aug. 16, 2021

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2021-22934

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Connect Secure device in a load-balanced configuration to perform a buffer overflow via a malicious crafted web request....

Affected Products : pulse_connect_secure connect_secure
EPSS Score: %4.38

Published: Aug. 16, 2021

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2021-22933

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform an arbitrary file delete via a maliciously crafted web request....

Affected Products : pulse_connect_secure connect_secure
EPSS Score: %6.31

Published: Aug. 16, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-22932

An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes the ShareFile file encryption option to become disabled if it had previously been enabled. Customers are only affected by this issue i...

Affected Products : sharefile_storagezones_controller
EPSS Score: %0.08

Published: Aug. 16, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-22931

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (...

Affected Products : active_iq_unified_manager peoplesoft_enterprise_peopletools oncommand_insight oncommand_workflow_automation snapcenter sinec_infrastructure_network_services node.js graalvm mysql_cluster nextgen_api
EPSS Score: %0.74

Published: Aug. 16, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-22930

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior....

Affected Products : debian_linux sinec_infrastructure_network_services node.js nextgen_api
EPSS Score: %0.36

Published: Oct. 07, 2021

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-22929

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log....

Affected Products : brave
EPSS Score: %0.05

Published: Aug. 31, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-22928

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level o...

Affected Products : virtual_apps_and_desktops xenapp xendesktop
EPSS Score: %0.05

Published: Aug. 05, 2021

Modified: Nov. 21, 2024
8.1

HIGH

CVE-2021-22927

A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session....

Affected Products : gateway netscaler_gateway application_delivery_controller_firmware application_delivery_controller mpx\/sdx_14030_fips mpx\/sdx_14060_fips mpx\/sdx_14080_fips mpx_15030-50g_fips mpx_15040-50g_fips mpx_15060-50g_fips +6 more products
EPSS Score: %0.30

Published: Aug. 05, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-22926

libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with the command line tool).When libcurl is built to use the macOS native TLS library Secure Transport,...

Affected Products : curl active_iq_unified_manager hci_management_node solidfire peoplesoft_enterprise_peopletools oncommand_insight oncommand_workflow_automation snapcenter h300s_firmware h500s_firmware +16 more products
EPSS Score: %0.77

Published: Aug. 05, 2021

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2021-22925

curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending `NEW_ENV` variables, libcurlcould be made ...

Affected Products : fedora curl cloud_backup hci_management_node solidfire peoplesoft_enterprise_peopletools macos h300s_firmware h500s_firmware h700s_firmware +17 more products
EPSS Score: %0.41

Published: Aug. 05, 2021

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2021-22923

When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will download or try ...

Affected Products : fedora curl cloud_backup hci_management_node solidfire h300s_firmware h500s_firmware h700s_firmware h410s_firmware clustered_data_ontap +13 more products
EPSS Score: %0.09

Published: Aug. 05, 2021

Modified: Nov. 21, 2024

Showing 20 of 290943 Results

Latest CVE Feed

8.0

9.6

6.1

7.5

5.3

7.2

7.2

6.1

7.2

7.2

6.5

7.5

9.8

9.8

6.1

7.8

8.1

7.5

5.3

5.3

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable