Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 5.4

    MEDIUM
    CVE-2018-19906

    Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter.... Read more

    Affected Products : razorcms
    • EPSS Score: %0.19
    • Published: Dec. 31, 2018
    • Modified: May. 06, 2025
  • 5.4

    MEDIUM
    CVE-2018-19905

    HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter.... Read more

    Affected Products : razorcms
    • EPSS Score: %0.21
    • Published: Dec. 31, 2018
    • Modified: May. 06, 2025
  • 8.1

    HIGH
    CVE-2018-18601

    The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmware 0.5.1.4 has a Buffer Overflow.... Read more

    Affected Products : gz621w_firmware gz621w
    • EPSS Score: %0.46
    • Published: Dec. 31, 2018
    • Modified: May. 06, 2025
  • 9.3

    HIGH
    CVE-2018-18600

    The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter.... Read more

    • EPSS Score: %1.67
    • Published: Dec. 31, 2018
    • Modified: May. 06, 2025
  • 8.8

    HIGH
    CVE-2024-23534

    An Unrestricted File-upload vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. ... Read more

    Affected Products : avalanche
    • Published: Apr. 19, 2024
    • Modified: May. 06, 2025
  • 7.5

    HIGH
    CVE-2024-23530

    An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory. ... Read more

    Affected Products : avalanche
    • Published: Apr. 19, 2024
    • Modified: May. 06, 2025
  • 7.5

    HIGH
    CVE-2024-23529

    An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory. ... Read more

    Affected Products : avalanche
    • Published: Apr. 19, 2024
    • Modified: May. 06, 2025
  • 3.5

    LOW
    CVE-2024-12683

    The Smart Maintenance Mode WordPress plugin before 1.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is dis... Read more

    Affected Products : smart_maintenance_mode
    • Published: Mar. 26, 2025
    • Modified: May. 06, 2025
    • Vuln Type: Cross-Site Scripting
  • 7.2

    HIGH
    CVE-2025-2855

    A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is the function checkFile of the file /api/deploy/upload. The manipulation of the argument servers leads to deserialization. The attac... Read more

    Affected Products : eladmin
    • Published: Mar. 27, 2025
    • Modified: May. 06, 2025
    • Vuln Type: Authentication
  • 7.5

    HIGH
    CVE-2024-23528

    An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory. ... Read more

    Affected Products : avalanche
    • Published: Apr. 19, 2024
    • Modified: May. 06, 2025
  • 7.5

    HIGH
    CVE-2025-28220

    Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attackers to cause web server crash via parameter funcpara1 passed to the binary through a POST request.... Read more

    Affected Products : w6-s_firmware w6-s
    • Published: Mar. 28, 2025
    • Modified: May. 06, 2025
    • Vuln Type: Denial of Service
  • 8.1

    HIGH
    CVE-2024-1557

    Memory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 123.... Read more

    Affected Products : firefox
    • Published: Feb. 20, 2024
    • Modified: May. 06, 2025
  • 5.9

    MEDIUM
    CVE-2024-34535

    In Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request header.... Read more

    Affected Products : mastodon
    • Published: Oct. 03, 2024
    • Modified: May. 06, 2025
  • 7.5

    HIGH
    CVE-2024-23526

    An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory. ... Read more

    Affected Products : avalanche
    • Published: Apr. 19, 2024
    • Modified: May. 06, 2025
  • 8.8

    HIGH
    CVE-2024-24994

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. ... Read more

    Affected Products : avalanche
    • Published: Apr. 19, 2024
    • Modified: May. 06, 2025
  • 8.8

    HIGH
    CVE-2024-24992

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.... Read more

    Affected Products : avalanche
    • Published: Apr. 19, 2024
    • Modified: May. 06, 2025
  • 8.8

    HIGH
    CVE-2024-23535

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. ... Read more

    Affected Products : avalanche
    • Published: Apr. 19, 2024
    • Modified: May. 06, 2025
  • 6.5

    MEDIUM
    CVE-2024-24991

    A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service attacks. ... Read more

    Affected Products : avalanche
    • Published: Apr. 19, 2024
    • Modified: May. 06, 2025
  • 5.9

    MEDIUM
    CVE-2024-44046

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themify Themify – WooCommerce Product Filter allows Stored XSS.This issue affects Themify – WooCommerce Product Filter: from n/a through 1.5.1.... Read more

    Affected Products : woocommerce_product_filter
    • Published: Oct. 06, 2024
    • Modified: May. 06, 2025
  • 8.8

    HIGH
    CVE-2024-24843

    Cross-Site Request Forgery (CSRF) vulnerability in PowerPack Addons for Elementor PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a before 2.10.8. ... Read more

    • Published: Feb. 21, 2024
    • Modified: May. 06, 2025
Showing 20 of 291520 Results