Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

9.8

CRITICAL

CVE-2021-20999

In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the ope...

Affected Products : iot-gw30_firmware iot-gw30-4g-eu_firmware uc20-wl2000-ac_firmware uc20-wl2000-iot_firmware uc20-wl2000-ac uc20-wl2000-iot iot-gw30 iot-gw30-4g-eu
Published: May. 13, 2021

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2021-20998

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users....

Affected Products : 0852-0303_firmware 0852-1305_firmware 0852-1505_firmware 0852-1305\/000-001_firmware 0852-1505\/000-001_firmware 0852-0303 0852-1305 0852-1505 0852-1305\/000-001 0852-1505\/000-001
Published: May. 13, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-20997

In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users....

Affected Products : 0852-0303_firmware 0852-1305_firmware 0852-1505_firmware 0852-1305\/000-001_firmware 0852-1505\/000-001_firmware 0852-0303 0852-1305 0852-1505 0852-1305\/000-001 0852-1505\/000-001
Published: May. 13, 2021

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2021-20996

In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties....

Affected Products : 0852-0303_firmware 0852-1305_firmware 0852-1505_firmware 0852-1305\/000-001_firmware 0852-1505\/000-001_firmware 0852-0303 0852-1305 0852-1505 0852-1305\/000-001 0852-1505\/000-001
Published: May. 13, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-20995

In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials....

Affected Products : 0852-0303_firmware 0852-1305_firmware 0852-1505_firmware 0852-1305\/000-001_firmware 0852-1505\/000-001_firmware 0852-0303 0852-1305 0852-1505 0852-1305\/000-001 0852-1505\/000-001
Published: May. 13, 2021

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-20994

In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management....

Affected Products : 0852-0303_firmware 0852-1305_firmware 0852-1505_firmware 0852-1305\/000-001_firmware 0852-1505\/000-001_firmware 0852-0303 0852-1305 0852-1505 0852-1305\/000-001 0852-1505\/000-001
Published: May. 13, 2021

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2021-20993

In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory....

Affected Products : 0852-0303_firmware 0852-1305_firmware 0852-1505_firmware 0852-1305\/000-001_firmware 0852-1505\/000-001_firmware 0852-0303 0852-1305 0852-1505 0852-1305\/000-001 0852-1505\/000-001
Published: May. 13, 2021

Modified: Nov. 21, 2024
8.1

HIGH

CVE-2021-20992

In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol. Communication between the user and the device can be eavesdropped to hijack sessions, tokens and passwords....

Affected Products : home_center_2_firmware home_center_lite_firmware home_center_2 home_center_lite
Published: Apr. 19, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-20991

In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability....

Affected Products : home_center_2_firmware home_center_lite_firmware home_center_2 home_center_lite
Published: Apr. 19, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-20990

In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recov...

Affected Products : home_center_2_firmware home_center_lite_firmware home_center_2 home_center_lite
Published: Apr. 19, 2021

Modified: Nov. 21, 2024
5.9

MEDIUM

CVE-2021-20989

Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH connections to the Fibaro cloud to provide remote access and remote support capabilities. This connection can be intercepted using DNS spoofing attack and a device in...

Affected Products : home_center_2_firmware home_center_lite_firmware home_center_2 home_center_lite
Published: Apr. 19, 2021

Modified: Nov. 21, 2024
8.6

HIGH

CVE-2021-20988

In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device....

Affected Products : rcx_rtos ice1-16di-g60l-v1d_firmware ice1-16dio-g60l-c1-v1d_firmware ice1-16dio-g60l-v1d_firmware ice1-8di8do-g60l-c1-v1d_firmware ice1-8di8do-g60l-v1d_firmware ice1-8iol-g30l-v1d_firmware ice1-8iol-g60l-v1d_firmware ice1-8iol-s2-g60l-v1d_firmware ice1-16di-g60l-v1d +7 more products
Published: May. 13, 2021

Modified: Nov. 21, 2024
8.6

HIGH

CVE-2021-20987

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery....

Affected Products : wcs_firmware ethernet\/ip_adapter_firmware pxv100-f200-b25-v1d_firmware pxv100i-f200-b25-v1d_firmware pcv100-f200-b25-v1d-6011-6720_firmware pcv50-f200-b25-v1d_firmware pcv80-f200-b25-v1d_firmware pcv100-f200-b25-v1d-6011_firmware ethernet\/ip_adapter wcs3b-ls510 +13 more products
Published: Feb. 16, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-20986

A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication....

Affected Products : profinet_io_device_firmware pgv100-f200a-b17-v1d_firmware pgv150i-f200a-b17-v1d_firmware pgv100-f200-b17-v1d-7477_firmware pxv100-f200-b17-v1d_firmware pxv100-f200-b17-v1d-3636_firmware pcv80-f200-b17-v1d_firmware pcv100-f200-b17-v1d_firmware pcv50-f200-b17-v1d_firmware pcv100-f200-b17-v1d-6011-6997_firmware +63 more products
Published: Feb. 16, 2021

Modified: Nov. 21, 2024
4.8

MEDIUM

CVE-2021-20877

Cross-site scripting vulnerability in Canon laser printers and small office multifunctional printers (LBP162L/LBP162, MF4890dw, MF269dw/MF265dw/MF264dw/MF262dw, MF249dw/MF245dw/MF244dw/MF242dw/MF232w, and MF229dw/MF224dw/MF222dw sold in Japan, imageCLASS ...

Affected Products : 2204f 2204n 2206if lbp113w lbp151dw lbp162 lbp162dw lbp162l mf113w mf212w +24 more products
Published: Feb. 08, 2022

Modified: Nov. 21, 2024
6.8

MEDIUM

CVE-2021-20876

Path traversal vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows an attacker with an administrative privilege to obtain sensitive information store...

Affected Products : groupsession
Published: Dec. 24, 2021

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-20875

Open redirect vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary web sites and cond...

Affected Products : groupsession
Published: Dec. 24, 2021

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2021-20874

Incorrect permission assignment for critical resource vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to access...

Affected Products : groupsession
Published: Dec. 24, 2021

Modified: Nov. 21, 2024
8.1

HIGH

CVE-2021-20873

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorizat...

Affected Products : yappli
Published: Dec. 28, 2021

Modified: Nov. 21, 2024
6.8

MEDIUM

CVE-2021-20872

Protection mechanism failure vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier, bizhub 750i/650i/550i/450i G00-37 and earlier, bizhub 36...

Affected Products : bizhub_c759_firmware bizhub_c659_firmware bizhub_c658_firmware bizhub_c558_firmware bizhub_c458_firmware bizhub_958_firmware bizhub_808_firmware bizhub_758_firmware bizhub_658e_firmware bizhub_558e_firmware +94 more products
Published: Jan. 04, 2022

Modified: Nov. 21, 2024

Showing 20 of 293614 Results

Browse by Apps

Latest CVE Feed

9.8

10.0

7.5

5.3

7.5

8.8

5.3

8.1

9.8

7.8

5.9

8.6

8.6

7.5

4.8

6.8

6.1

7.5

8.1

6.8

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable