Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

8.8

HIGH

CVE-2022-26730

A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted image may lead to arbitrary code execution....

Affected Products : macos
EPSS Score: %0.64

Published: Nov. 01, 2022

Modified: May. 06, 2025
8.8

HIGH

CVE-2022-26719

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execut...

Affected Products : macos iphone_os tvos watchos safari ipados
EPSS Score: %0.13

Published: Nov. 01, 2022

Modified: May. 06, 2025
8.8

HIGH

CVE-2022-26717

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows. Processing maliciously crafted web content may lea...

Affected Products : macos itunes iphone_os tvos watchos safari ipados
EPSS Score: %0.44

Published: Nov. 01, 2022

Modified: May. 06, 2025
8.8

HIGH

CVE-2022-26716

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execut...

Affected Products : macos iphone_os tvos watchos safari ipados
EPSS Score: %0.14

Published: Nov. 01, 2022

Modified: May. 06, 2025
5.7

MEDIUM

CVE-2022-23738

An improper cache key vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to access private repository files through a public repository. To exploit this, an actor would need to already be authorized on the GitHub E...

Affected Products : enterprise_server
EPSS Score: %0.09

Published: Nov. 01, 2022

Modified: May. 06, 2025
6.5

MEDIUM

CVE-2022-22658

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 16.0.3. Processing a maliciously crafted email message may lead to a denial-of-service....

Affected Products : iphone_os
EPSS Score: %0.15

Published: Nov. 01, 2022

Modified: May. 06, 2025
9.8

CRITICAL

CVE-2018-6333

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be c...

Affected Products : nuclide
EPSS Score: %1.12

Published: Dec. 31, 2018

Modified: May. 06, 2025
7.5

HIGH

CVE-2018-4942

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity Processing vulnerability. Successful exploitation could lead to information disclosure....

Affected Products : coldfusion
EPSS Score: %0.90

Published: May. 19, 2018

Modified: May. 06, 2025
7.8

HIGH

CVE-2018-4938

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Insecure Library Loading vulnerability. Successful exploitation could lead to local privilege escalation....

Affected Products : coldfusion
EPSS Score: %0.20

Published: May. 19, 2018

Modified: May. 06, 2025
8.3

HIGH

CVE-2018-2826

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to com...

Affected Products : ubuntu_linux cloud_backup oncommand_insight oncommand_unified_manager oncommand_workflow_automation jdk jre e-series_santricity_os_controller e-series_santricity_storage_manager e-series_santricity_web_services +8 more products
EPSS Score: %3.00

Published: Apr. 19, 2018

Modified: May. 06, 2025
8.3

HIGH

CVE-2018-2825

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to com...

Affected Products : ubuntu_linux cloud_backup oncommand_insight oncommand_unified_manager oncommand_workflow_automation jdk jre e-series_santricity_os_controller e-series_santricity_storage_manager e-series_santricity_web_services +8 more products
EPSS Score: %1.13

Published: Apr. 19, 2018

Modified: May. 06, 2025
5.3

MEDIUM

CVE-2018-2815

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable...

Affected Products : ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus jdk jre +3 more products
EPSS Score: %0.52

Published: Apr. 19, 2018

Modified: May. 06, 2025
5.3

MEDIUM

CVE-2018-2798

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerabi...

Affected Products : ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus jdk jre +4 more products
EPSS Score: %0.22

Published: Apr. 19, 2018

Modified: May. 06, 2025
5.3

MEDIUM

CVE-2018-2796

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerab...

Affected Products : ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus jdk jre +4 more products
EPSS Score: %0.52

Published: Apr. 19, 2018

Modified: May. 06, 2025
3.1

LOW

CVE-2018-2790

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthent...

Affected Products : ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus jdk jre +3 more products
EPSS Score: %0.27

Published: Apr. 19, 2018

Modified: May. 06, 2025
7.5

HIGH

CVE-2018-2627

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...

Affected Products : active_iq_unified_manager cloud_backup oncommand_insight oncommand_unified_manager oncommand_workflow_automation jdk jre e-series_santricity_management_plug-ins e-series_santricity_os_controller e-series_santricity_storage_manager +10 more products
EPSS Score: %0.37

Published: Jan. 18, 2018

Modified: May. 06, 2025
7.5

HIGH

CVE-2018-18066

snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service....

Affected Products : cloud_backup data_ontap storagegrid_webscale net-snmp hyper_converged_infrastructure e-series_santricity_os_controller solidfire_element_os
EPSS Score: %0.59

Published: Oct. 08, 2018

Modified: May. 06, 2025
10.0

HIGH

CVE-2018-15965

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution....

Affected Products : coldfusion
EPSS Score: %40.11

Published: Sep. 25, 2018

Modified: May. 06, 2025
7.5

HIGH

CVE-2018-15964

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a use of a component with a known vulnerability vulnerability. Successful exploitation could lead to information disclosure....

Affected Products : coldfusion
EPSS Score: %10.65

Published: Sep. 25, 2018

Modified: May. 06, 2025
5.3

MEDIUM

CVE-2018-15963

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary folder creation....

Affected Products : coldfusion
EPSS Score: %6.20

Published: Sep. 25, 2018

Modified: May. 06, 2025

Showing 20 of 291275 Results

1
...
1294
1295
1296
1297
1298
1299
1300
...
14564

Latest CVE Feed

8.8

8.8

8.8

8.8

5.7

6.5

9.8

7.5

7.8

8.3

8.3

5.3

5.3

5.3

3.1

7.5

7.5

10.0

7.5

5.3

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable