Latest Published Vulnerabilities CVE

Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

9.8

CRITICAL

CVE-2021-22848

HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL parameter of email pages without privilege....

Affected Products : msr45_isherlock-antispam msr45_isherlock-user ssr45_isherlock-antispam ssr45_isherlock-user
EPSS Score: %0.44

Published: Mar. 18, 2021

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-22847

Hyweb HyCMS-J1's API fail to filter POST request parameters. Remote attackers can inject SQL syntax and execute commands without privilege....

Affected Products : hycms-j1
EPSS Score: %1.17

Published: Jan. 22, 2021

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-22827

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22826. Affected Product: EcoStruxure� Power Monitoring Expert ...

Affected Products : ecostruxure_power_monitoring_expert
EPSS Score: %0.41

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-22826

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22827. Affected Product: EcoStruxure� Power Monitoring Expert ...

Affected Products : ecostruxure_power_monitoring_expert
EPSS Score: %0.69

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
8.0

HIGH

CVE-2021-22825

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could allow an attacker to access the system with elevated privileges when a privileged account clicks on a malicious URL that compromises the security token. ...

Affected Products : rack_power_distribution_unit_with_network_management_card_2_firmware rack_power_distribution_unit_with_network_management_card_3_firmware rack_power_distribution_unit_with_network_management_card_2 rack_power_distribution_unit_with_network_management_card_3
EPSS Score: %0.38

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-22824

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length check on user-supplied data from a constructed message received on the network. Affected Product: Interactive Graphica...

Affected Products : interactive_graphical_scada_system_data_collector
EPSS Score: %0.63

Published: Feb. 11, 2022

Modified: Nov. 21, 2024
9.1

CRITICAL

CVE-2021-22823

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA ...

Affected Products : interactive_graphical_scada_system_data_collector
EPSS Score: %1.75

Published: Feb. 11, 2022

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-22822

A CWE-79 Improper Neutralization of Input During Web Page Generation (�Cross-site Scripting�) vulnerability exists that could allow an attacker to impersonate the user who manages the charging station or carry out actions on their behalf when crafted mali...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_smart_wallbox_evb1a_firmware evlink_parking_evp2pe_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.53

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
8.6

HIGH

CVE-2021-22821

A CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station web server to forward requests to unintended network targets when crafted malicious parameters are submitted to the charging station web server. Affected Produc...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_smart_wallbox_evb1a_firmware evlink_parking_evp2pe_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.20

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-22820

A CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain an unauthorized access over a hijacked session to the charger station web server even after the legitimate user account holder has changed his password...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_smart_wallbox_evb1a_firmware evlink_parking_evp2pe_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.57

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
4.3

MEDIUM

CVE-2021-22819

A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface rendered within iframes. Affected Prod...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_smart_wallbox_evb1a_firmware evlink_parking_evp2pe_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.21

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-22818

A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to the charging station web interface by performing brute force attacks. Affected Products: EVlink City EVC1S...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_smart_wallbox_evb1a_firmware evlink_parking_evp2pe_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.25

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-22817

A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All V...

Affected Products : vijeo_designer hmibmuhi29d2801_firmware hmibmusi29d2801_firmware hmibmuci29d2w01_firmware hmibmu0i29d2001_firmware hmibmu0i29d200a_firmware hmibmuhi29d4801_firmware hmibmusi29d4801_firmware hmibmuci29d4w01_firmware hmibmu0i29d4001_firmware +63 more products
EPSS Score: %0.04

Published: Feb. 09, 2022

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-22816

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: S...

Affected Products : scadapack_312e_firmware scadapack_313e_firmware scadapack_314e_firmware scadapack_330e_firmware scadapack_333e_firmware scadapack_334e_firmware scadapack_337e_firmware scadapack_350e_firmware scadapack_357e_firmware scadapack_312e +8 more products
EPSS Score: %0.37

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2021-22815

A CWE-200: Information Exposure vulnerability exists which could cause the troubleshooting archive to be accessed. Affected Products: 1-Phase Uninterruptible Power Supply (UPS) using NMC2 including Smart-UPS, Symmetra, and Galaxy 3500 with Network Managem...

Affected Products : network_management_card_2_firmware network_management_card_3_firmware galaxy_3500 network_management_card_2 single-phase_symmetra smart-ups ap9922_battery_management_system apc_rack_power_distribution_units galaxy_g7x galaxy_g9kchu +45 more products
EPSS Score: %0.25

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-22814

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists which could cause arbritrary script execution when a malicious file is read and displayed. Affected Products: 1-Phase Uninterruptible Power...

Affected Products : network_management_card_2_firmware network_management_card_3_firmware galaxy_3500 network_management_card_2 single-phase_symmetra smart-ups ap9922_battery_management_system apc_rack_power_distribution_units galaxy_g7x galaxy_g9kchu +45 more products
EPSS Score: %0.82

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-22813

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing ...

Affected Products : network_management_card_2_firmware network_management_card_3_firmware galaxy_3500 network_management_card_2 single-phase_symmetra smart-ups ap9922_battery_management_system apc_rack_power_distribution_units galaxy_g7x galaxy_g9kchu +45 more products
EPSS Score: %0.82

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-22812

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC. Affected...

Affected Products : network_management_card_2_firmware network_management_card_3_firmware galaxy_3500 network_management_card_2 single-phase_symmetra smart-ups ap9922_battery_management_system apc_rack_power_distribution_units galaxy_g7x galaxy_g9kchu +45 more products
EPSS Score: %0.82

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-22811

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause script execution when the request of a privileged account accessing the vulnerable web page is intercepted. Affected Produ...

Affected Products : network_management_card_2_firmware network_management_card_3_firmware galaxy_3500 network_management_card_2 single-phase_symmetra smart-ups ap9922_battery_management_system apc_rack_power_distribution_units galaxy_g7x galaxy_g9kchu +45 more products
EPSS Score: %0.82

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-22810

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing ...

Affected Products : network_management_card_2_firmware network_management_card_3_firmware galaxy_3500 network_management_card_2 single-phase_symmetra smart-ups ap9922_battery_management_system apc_rack_power_distribution_units galaxy_g7x galaxy_g9kchu +45 more products
EPSS Score: %0.82

Published: Jan. 28, 2022

Modified: Nov. 21, 2024

Showing 20 of 290955 Results

Latest CVE Feed

9.8

8.8

8.8

8.8

8.0

7.5

9.1

6.1

8.6

9.8

4.3

7.5

7.8

7.8

5.3

6.1

6.1

6.1

6.1

6.1

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable