Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.8

HIGH

CVE-2021-22733

Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder....

Affected Products : homelynk_firmware spacelynk_firmware homelynk spacelynk
EPSS Score: %0.05

Published: May. 26, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-22732

Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a code execution issue when an attacker loads unauthorized code on the web server....

Affected Products : homelynk_firmware spacelynk_firmware homelynk spacelynk
EPSS Score: %0.05

Published: May. 26, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-22731

Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior which could cause an unauthorized password change through HTTP / HTTPS when basic user information is known by a rem...

Affected Products : mcsesp083f23g0_firmware mcsesp083f23g0t_firmware mcsesm043f23f0_firmware mcsesm053f1cu0_firmware mcsesm063f2cu0_firmware mcsesm053f1cs0_firmware mcsesm063f2cs0_firmware mcsesm083f23f0_firmware mcsesm103f2cu0_firmware mcsesm083f23f0h_firmware +22 more products
EPSS Score: %2.01

Published: May. 26, 2021

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2021-22730

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prio...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_parking_ev.2_firmware evlink_smart_wallbox_evb1a_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.35

Published: Jul. 21, 2021

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2021-22729

A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior t...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_parking_ev.2_firmware evlink_smart_wallbox_evb1a_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.35

Published: Jul. 21, 2021

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2021-22728

A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_parking_ev.2_firmware evlink_smart_wallbox_evb1a_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.33

Published: Jul. 21, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-22727

A CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_parking_ev.2_firmware evlink_smart_wallbox_evb1a_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.60

Published: Jul. 21, 2021

Modified: Nov. 21, 2024
8.1

HIGH

CVE-2021-22726

A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_parking_ev.2_firmware evlink_smart_wallbox_evb1a_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.19

Published: Jul. 21, 2021

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-22725

A CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to impersonate the user or carry out actions on their behalf when crafted malicious parameters are submitted in POST requests sent to the charging station web se...

Affected Products : evc1s22p4_firmware evc1s7p4_firmware evw2_firmware evf2_firmware evp2pe_firmware evb1a_firmware evc1s22p4 evc1s7p4 evw2 evf2 +2 more products
EPSS Score: %0.18

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-22724

A CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to impersonate the user or carry out actions on their behalf when crafted malicious parameters are submitted in POST requests sent to the charging station web se...

Affected Products : evc1s22p4_firmware evc1s7p4_firmware evw2_firmware evf2_firmware evp2pe_firmware evb1a_firmware evc1s22p4 evc1s7p4 evw2 evf2 +2 more products
EPSS Score: %0.18

Published: Jan. 28, 2022

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-22723

A CWE-79: Improper Neutralization of Input During Web Page Generation (Cross-siteScripting) through Cross-Site Request Forgery (CSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_parking_ev.2_firmware evlink_smart_wallbox_evb1a_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.32

Published: Jul. 21, 2021

Modified: Nov. 21, 2024
5.4

MEDIUM

CVE-2021-22722

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Stored Cross-site Scripting') vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_parking_ev.2_firmware evlink_smart_wallbox_evb1a_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.30

Published: Jul. 21, 2021

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2021-22721

A CWE-200: Information Exposure vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V...

Affected Products : evlink_city_evc1s22p4_firmware evlink_city_evc1s7p4_firmware evlink_parking_evw2_firmware evlink_parking_evf2_firmware evlink_parking_ev.2_firmware evlink_smart_wallbox_evb1a_firmware evlink_city_evc1s22p4 evlink_city_evc1s7p4 evlink_parking_evw2 evlink_parking_evf2 +2 more products
EPSS Score: %0.24

Published: Jul. 21, 2021

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2021-22720

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when restoring a project....

Affected Products : c-bus_toolkit
EPSS Score: %12.00

Published: Apr. 13, 2021

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-22719

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when a file is uploaded....

Affected Products : c-bus_toolkit
EPSS Score: %15.63

Published: Apr. 13, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-22718

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when restoring project files....

Affected Products : c-bus_toolkit
EPSS Score: %3.76

Published: Apr. 13, 2021

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-22717

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when processing config files....

Affected Products : c-bus_toolkit
EPSS Score: %17.68

Published: Apr. 13, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-22716

A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivileged user modifies a file. Affected Product: C-Bus Toolkit (V1.15.9 and prior)...

Affected Products : c-bus_toolkit
EPSS Score: %0.19

Published: Apr. 13, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-22714

A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION7400, PM8000 and ION9000 (All versions prior to V3.0.0), which could cause the meter to reboot or allow for remote code execution....

Affected Products : powerlogic_ion7400_firmware powerlogic_ion9000_firmware powerlogic_pm8000_firmware powerlogic_ion7400 powerlogic_ion9000 powerlogic_pm8000
EPSS Score: %2.27

Published: Mar. 11, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-22713

A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions), which could cause th...

Affected Products : powerlogic_ion7650_firmware powerlogic_ion8600_firmware powerlogic_ion8650_firmware powerlogic_ion8800_firmware powerlogic_ion8300_firmware powerlogic_ion8400_firmware powerlogic_ion8500_firmware powerlogic_ion7700_firmware powerlogic_ion7300_firmware powerlogic_ion7550_firmware +11 more products
EPSS Score: %0.92

Published: Mar. 11, 2021

Modified: Nov. 21, 2024

Showing 20 of 291784 Results

Latest CVE Feed

7.8

7.8

9.8

10.0

10.0

6.5

9.8

8.1

8.8

8.8

6.1

5.4

5.3

7.2

8.8

7.8

8.8

7.8

9.8

7.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable