Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

6.1

MEDIUM

CVE-2021-22814

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists which could cause arbritrary script execution when a malicious file is read and displayed. Affected Products: 1-Phase Uninterruptible Power...

Affected Products : network_management_card_2_firmware network_management_card_3_firmware galaxy_3500 network_management_card_2 single-phase_symmetra smart-ups ap9922_battery_management_system apc_rack_power_distribution_units galaxy_g7x galaxy_g9kchu +45 more products
Published: Jan. 28, 2022

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-22813

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing ...

Affected Products : network_management_card_2_firmware network_management_card_3_firmware galaxy_3500 network_management_card_2 single-phase_symmetra smart-ups ap9922_battery_management_system apc_rack_power_distribution_units galaxy_g7x galaxy_g9kchu +45 more products
Published: Jan. 28, 2022

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-22812

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC. Affected...

Affected Products : network_management_card_2_firmware network_management_card_3_firmware galaxy_3500 network_management_card_2 single-phase_symmetra smart-ups ap9922_battery_management_system apc_rack_power_distribution_units galaxy_g7x galaxy_g9kchu +45 more products
Published: Jan. 28, 2022

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-22811

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause script execution when the request of a privileged account accessing the vulnerable web page is intercepted. Affected Produ...

Affected Products : network_management_card_2_firmware network_management_card_3_firmware galaxy_3500 network_management_card_2 single-phase_symmetra smart-ups ap9922_battery_management_system apc_rack_power_distribution_units galaxy_g7x galaxy_g9kchu +45 more products
Published: Jan. 28, 2022

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-22810

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing ...

Affected Products : network_management_card_2_firmware network_management_card_3_firmware galaxy_3500 network_management_card_2 single-phase_symmetra smart-ups ap9922_battery_management_system apc_rack_power_distribution_units galaxy_g7x galaxy_g9kchu +45 more products
Published: Jan. 28, 2022

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-22809

A CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by Schneider Electric GUIcon Version 2.0 (Build 683.003) an...

Affected Products : guicon
Published: Jan. 28, 2022

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-22808

A CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by Schneider Electric GUIcon Version 2.0 (Build 683.003) and pri...

Affected Products : guicon
Published: Jan. 28, 2022

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-22807

A CWE-787: Out-of-bounds Write vulnerability exists that could cause arbitrary code execution when a malicious *.gd1 configuration file is loaded into the GUIcon tool. Affected Product: Eurotherm by Schneider Electric GUIcon Version 2.0 (Build 683.003) an...

Affected Products : guicon
Published: Jan. 28, 2022

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-22806

A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unauthorized access when accessing a malicious website. Affected Product: spaceLYnk (V2.6.1 and prior), Wiser for KNX (V2.6.1 and prior), fe...

Affected Products : spacelynk_firmware wiser_for_knx_firmware fellerlynk_firmware spacelynk wiser_for_knx fellerlynk
Published: Feb. 11, 2022

Modified: Nov. 21, 2024
9.1

CRITICAL

CVE-2021-22805

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA ...

Affected Products : interactive_graphical_scada_system_data_collector
Published: Feb. 11, 2022

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-22804

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure of arbitrary files being read in the context of the user running IGSS, due to missing validation of user supplied data in network messag...

Affected Products : interactive_graphical_scada_system_data_collector
Published: Feb. 11, 2022

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-22803

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution through a number of paths, when an attacker, writes arbitrary files to folders in context of the DC module, by sending constructed mes...

Affected Products : interactive_graphical_scada_system_data_collector
Published: Feb. 11, 2022

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-22802

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length check on user supplied data, when a constructed message is received on the network. Affected Product: Interactive G...

Affected Products : interactive_graphical_scada_system_data_collector
Published: Feb. 11, 2022

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-22801

A CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary command execution when the software is configured with specially crafted event actions. Affected Product: ConneXium Network Manager Software (All Versions)...

Affected Products : connexium_network_manager
Published: Feb. 11, 2022

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-22800

A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is sent to the controller over network port 1105/TCP. Affected Product: Modicon M218 Logic Controller (V5.1.0.6 and prior)...

Affected Products : modicon_m218_firmware modicon_m218
Published: Feb. 11, 2022

Modified: Nov. 21, 2024
3.8

LOW

CVE-2021-22799

A CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from an internal network to an external network when an attacker manages to decrypt the SESU proxy password from the registry. Affected Product: Schneider Electric...

Affected Products : software_update
Published: Jan. 28, 2022

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-22798

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause Sensitive data such as login credentials being exposed when a Network is sniffed. Affected Product: Conext� ComBox (All Versions)...

Affected Products : conext_combox_firmware conext_combox
Published: Feb. 11, 2022

Modified: Nov. 21, 2024
9.3

HIGH

CVE-2021-22797

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious script to be deployed in an unauthorized location and may result in code execution on the engineering workstation when ...

Affected Products : ecostruxure_control_expert ecostruxure_process_expert remoteconnect scadapack_470 scadapack_474 scadapack_570 scadapack_574 scadapack_575
Published: Apr. 13, 2022

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-22796

A CWE-287: Improper Authentication vulnerability exists that could allow remote code execution when a malicious file is uploaded. Affected Product: C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior)...

Affected Products : c-gate_server
Published: Feb. 11, 2022

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-22795

A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when performed over the network. Affected Product: StruxureWare Data Center Expert (V7.8.1 and ...

Affected Products : struxureware_data_center_expert
Published: Apr. 13, 2022

Modified: Nov. 21, 2024

Showing 20 of 292796 Results

Browse by Apps

Latest CVE Feed

6.1

6.1

6.1

6.1

6.1

5.5

7.8

7.8

7.5

9.1

7.5

9.8

9.8

9.8

7.5

3.8

7.5

9.3

7.8

9.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable