Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

8.0

HIGH

CVE-2024-24903

Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotten passwords. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access t...

Affected Products : secure_connect_gateway_policy_manager secure_connect_gateway policy_manager_for_secure_connect_gateway
Published: Mar. 01, 2024

Modified: May. 20, 2025
7.6

HIGH

CVE-2024-24904

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or ...

Affected Products : secure_connect_gateway_policy_manager secure_connect_gateway policy_manager_for_secure_connect_gateway
Published: Mar. 01, 2024

Modified: May. 20, 2025
7.6

HIGH

CVE-2024-24906

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in Policy page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of mal...

Affected Products : secure_connect_gateway_policy_manager secure_connect_gateway policy_manager_for_secure_connect_gateway
Published: Mar. 01, 2024

Modified: May. 20, 2025
7.3

HIGH

CVE-2024-24900

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain an improper authorization vulnerability. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized devices added to policies. E...

Affected Products : secure_connect_gateway_policy_manager secure_connect_gateway policy_manager_for_secure_connect_gateway
Published: Mar. 01, 2024

Modified: May. 20, 2025
7.6

HIGH

CVE-2024-24905

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or ...

Affected Products : secure_connect_gateway_policy_manager secure_connect_gateway policy_manager_for_secure_connect_gateway
Published: Mar. 01, 2024

Modified: May. 20, 2025
7.6

HIGH

CVE-2024-24907

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in the Filters page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage o...

Affected Products : secure_connect_gateway_policy_manager secure_connect_gateway policy_manager_for_secure_connect_gateway
Published: Mar. 01, 2024

Modified: May. 20, 2025
5.4

MEDIUM

CVE-2024-5713

The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

Affected Products : dynamic_content_personalization if-so
Published: Jul. 13, 2024

Modified: May. 20, 2025
7.1

HIGH

CVE-2024-5715

The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Affected Products : wp_emember
Published: Jul. 13, 2024

Modified: May. 20, 2025
5.9

MEDIUM

CVE-2024-6231

The Request a Quote WordPress plugin before 2.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed...

Affected Products : request_a_quote
Published: Jul. 23, 2024

Modified: May. 20, 2025
7.2

HIGH

CVE-2023-4724

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate and sanitise the `wp_query` parameter which allows an attacker to run arbitrary command on the remote server...

Affected Products : export_any_wordpress_data_to_xml\/csv wp_all_export
Published: Dec. 18, 2023

Modified: May. 20, 2025
7.2

HIGH

CVE-2022-41406

An arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file....

Affected Products : church_management_system
Published: Oct. 12, 2022

Modified: May. 20, 2025
7.8

HIGH

CVE-2022-41191

Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be trig...

Affected Products : 3d_visual_enterprise_viewer
Published: Oct. 11, 2022

Modified: May. 20, 2025
6.1

MEDIUM

CVE-2022-40931

dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting (XSS)....

Affected Products : transfer.sh
Published: Sep. 29, 2022

Modified: May. 20, 2025
7.5

HIGH

CVE-2022-39168

IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. IBM X-Force ID: 235422....

Affected Products : robotic_process_automation robotic_process_automation_for_cloud_pak robotic_process_automation_for_services
Published: Sep. 29, 2022

Modified: May. 20, 2025
7.5

HIGH

CVE-2022-38732

SnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which could allow certain types of attacks that otherwise would be prevented....

Affected Products : snapcenter
Published: Sep. 29, 2022

Modified: May. 20, 2025
5.4

MEDIUM

CVE-2019-1105

A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages. An authenticated attacker could exploit the vulnerability by sending a specially crafted email message to a victim. The attacker ...

Affected Products : outlook
Published: Jul. 29, 2019

Modified: May. 20, 2025
6.5

MEDIUM

CVE-2019-1081

An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the...

Affected Products : edge windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 internet_explorer
Published: Jun. 12, 2019

Modified: May. 20, 2025
7.6

HIGH

CVE-2019-1080

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current ...

Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 internet_explorer
Published: Jun. 12, 2019

Modified: May. 20, 2025
7.8

HIGH

CVE-2019-1065

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; ...

Affected Products : windows_10 windows_server_2016 windows_server_2019 windows_server windows_10_1809 windows windows_server_1803 windows_server_1903
Published: Jun. 12, 2019

Modified: May. 20, 2025
7.6

HIGH

CVE-2019-1055

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current ...

Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 internet_explorer
Published: Jun. 12, 2019

Modified: May. 20, 2025

Showing 20 of 292905 Results

1
...
1209
1210
1211
1212
1213
1214
1215
...
14646

Browse by Apps

Latest CVE Feed

8.0

7.6

7.6

7.3

7.6

7.6

5.4

7.1

5.9

7.2

7.2

7.8

6.1

7.5

7.5

5.4

6.5

7.6

7.8

7.6

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable