Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 8.9

    HIGH
    CVE-2024-49380

    Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote ... Read more

    Affected Products : plenti
    • Published: Oct. 25, 2024
    • Modified: May. 06, 2025

  • 7.1

    HIGH
    CVE-2024-20325

    A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to ... Read more

    Affected Products : unified_intelligence_center
    • Published: Feb. 21, 2024
    • Modified: May. 06, 2025

  • 8.4

    HIGH
    CVE-2023-50975

    The TD Bank TD Advanced Dashboard client through 3.0.3 for macOS allows arbitrary code execution because of the lack of electron::fuses::IsRunAsNodeEnabled (i.e., ELECTRON_RUN_AS_NODE can be used in production). This makes it easier for a compromised proc... Read more

    Affected Products : advanced_dashboard
    • Published: Feb. 21, 2024
    • Modified: May. 06, 2025

  • 6.1

    MEDIUM
    CVE-2024-25381

    There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content.... Read more

    Affected Products : emlog_pro emlog
    • Published: Feb. 21, 2024
    • Modified: May. 06, 2025

  • 7.5

    HIGH
    CVE-2024-25461

    Directory Traversal vulnerability in Terrasoft, Creatio Terrasoft CRM v.7.18.4.1532 allows a remote attacker to obtain sensitive information via a crafted request to the terrasoft.axd component.... Read more

    Affected Products : crm_creatio
    • Published: Feb. 21, 2024
    • Modified: May. 06, 2025

  • 7.2

    HIGH
    CVE-2024-27283

    A vulnerability was discovered in Veritas eDiscovery Platform before 10.2.5. The application administrator can upload potentially malicious files to arbitrary locations on the server on which the application is installed.... Read more

    Affected Products : ediscovery_platform
    • Published: Feb. 22, 2024
    • Modified: May. 06, 2025

  • 9.8

    CRITICAL
    CVE-2025-2362

    A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/contact-us.php. The manipulation of the argument mobnum leads to sql injection. The atta... Read more

    Affected Products : pre-school_enrollment_system
    • Published: Mar. 17, 2025
    • Modified: May. 06, 2025
    • Vuln Type: Injection

  • 8.3

    HIGH
    CVE-2024-0220

    B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade and the licensing servers. A network-based attacker could exploit the vulnerability to execute arbitrary code on the products ... Read more

    • Published: Feb. 22, 2024
    • Modified: May. 06, 2025

  • 9.8

    CRITICAL
    CVE-2025-2379

    A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /create-pass.php. The manipulation of the argument visname leads to sql injection. The ... Read more

    • Published: Mar. 17, 2025
    • Modified: May. 06, 2025
    • Vuln Type: Injection

  • 9.8

    CRITICAL
    CVE-2025-2380

    A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injectio... Read more

    • Published: Mar. 17, 2025
    • Modified: May. 06, 2025
    • Vuln Type: Injection

  • 7.5

    HIGH
    CVE-2024-1104

    An unauthenticated remote attacker can bypass the brute force prevention mechanism and disturb the webservice for all users.... Read more

    Affected Products : webserv2
    • Published: Feb. 22, 2024
    • Modified: May. 06, 2025

  • 9.8

    CRITICAL
    CVE-2025-2381

    A vulnerability classified as critical has been found in PHPGurukul Curfew e-Pass Management System 1.0. Affected is an unknown function of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. It is possible... Read more

    Affected Products : curfew_e-pass_management_system
    • Published: Mar. 17, 2025
    • Modified: May. 06, 2025
    • Vuln Type: Injection

  • 7.8

    HIGH
    CVE-2024-37007

    A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.... Read more

    • Published: Jun. 25, 2024
    • Modified: May. 06, 2025

  • 6.1

    MEDIUM
    CVE-2022-40487

    ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Search Users and Search Pages function. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via injection of a crafted pa... Read more

    Affected Products : processwire
    • EPSS Score: %0.78
    • Published: Oct. 31, 2022
    • Modified: May. 06, 2025

  • 7.4

    HIGH
    CVE-2022-3308

    Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)... Read more

    Affected Products : chrome edge_chromium
    • EPSS Score: %0.19
    • Published: Nov. 01, 2022
    • Modified: May. 06, 2025

  • 8.8

    HIGH
    CVE-2022-3307

    Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)... Read more

    Affected Products : chrome edge_chromium
    • EPSS Score: %0.31
    • Published: Nov. 01, 2022
    • Modified: May. 06, 2025

  • 8.8

    HIGH
    CVE-2022-3306

    Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)... Read more

    Affected Products : chrome chrome_os
    • EPSS Score: %0.51
    • Published: Nov. 01, 2022
    • Modified: May. 06, 2025

  • 8.8

    HIGH
    CVE-2022-3305

    Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)... Read more

    Affected Products : chrome chrome_os
    • EPSS Score: %0.58
    • Published: Nov. 01, 2022
    • Modified: May. 06, 2025

  • 10.0

    HIGH
    CVE-2018-6342

    react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the... Read more

    Affected Products : windows react-dev-utils
    • EPSS Score: %0.79
    • Published: Dec. 31, 2018
    • Modified: May. 06, 2025

  • 6.1

    MEDIUM
    CVE-2018-6341

    React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping could lead to a cross-site scripting vulnerability. This issue affected minor releases 16.0.x, 16.... Read more

    Affected Products : react
    • EPSS Score: %18.06
    • Published: Dec. 31, 2018
    • Modified: May. 06, 2025
Showing 20 of 291358 Results