Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 10.0

    HIGH
    CVE-2013-2465

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and a... Read more

    • Actively Exploited
    • EPSS Score: %93.56
    • Published: Jun. 18, 2013
    • Modified: May. 06, 2025

  • 6.6

    MEDIUM
    CVE-2024-48622

    A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid parameter.... Read more

    Affected Products : domainmod
    • Published: Oct. 15, 2024
    • Modified: May. 06, 2025

  • 8.8

    HIGH
    CVE-2024-25000

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. ... Read more

    Affected Products : avalanche
    • Published: Apr. 19, 2024
    • Modified: May. 06, 2025

  • 5.3

    MEDIUM
    CVE-2024-48623

    In queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS).... Read more

    Affected Products : domainmod
    • Published: Oct. 15, 2024
    • Modified: May. 06, 2025

  • 8.8

    HIGH
    CVE-2024-25904

    Cross-Site Request Forgery (CSRF) vulnerability in David Stockl TinyMCE and TinyMCE Advanced Professsional Formats and Styles.This issue affects TinyMCE and TinyMCE Advanced Professsional Formats and Styles: from n/a through 1.1.2. ... Read more

    • Published: Feb. 21, 2024
    • Modified: May. 06, 2025

  • 8.8

    HIGH
    CVE-2024-24798

    Cross-Site Request Forgery (CSRF) vulnerability in SoniNow Team Debug.This issue affects Debug: from n/a through 1.10. ... Read more

    Affected Products : debug debug
    • Published: Feb. 21, 2024
    • Modified: May. 06, 2025

  • 8.8

    HIGH
    CVE-2024-24802

    Cross-Site Request Forgery (CSRF) vulnerability in John Tendik JTRT Responsive Tables.This issue affects JTRT Responsive Tables: from n/a through 4.1.9. ... Read more

    Affected Products : jtrt_responsive_tables
    • Published: Feb. 21, 2024
    • Modified: May. 06, 2025

  • 8.4

    HIGH
    CVE-2023-7235

    The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary ... Read more

    Affected Products : openvpn openvpn_gui
    • Published: Feb. 21, 2024
    • Modified: May. 06, 2025

  • 5.3

    MEDIUM
    CVE-2024-48624

    In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS) vulnerability.... Read more

    Affected Products : domainmod
    • Published: Oct. 15, 2024
    • Modified: May. 06, 2025

  • 9.8

    CRITICAL
    CVE-2024-49195

    Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair... Read more

    Affected Products : mbed_tls mbedtls
    • Published: Oct. 15, 2024
    • Modified: May. 06, 2025

  • 7.2

    HIGH
    CVE-2024-10297

    A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/changeimage.php of the component Managecard Edit Image Page. The manipulatio... Read more

    • Published: Oct. 23, 2024
    • Modified: May. 06, 2025

  • 8.9

    HIGH
    CVE-2024-49380

    Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote ... Read more

    Affected Products : plenti
    • Published: Oct. 25, 2024
    • Modified: May. 06, 2025

  • 7.1

    HIGH
    CVE-2024-20325

    A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to ... Read more

    Affected Products : unified_intelligence_center
    • Published: Feb. 21, 2024
    • Modified: May. 06, 2025

  • 8.4

    HIGH
    CVE-2023-50975

    The TD Bank TD Advanced Dashboard client through 3.0.3 for macOS allows arbitrary code execution because of the lack of electron::fuses::IsRunAsNodeEnabled (i.e., ELECTRON_RUN_AS_NODE can be used in production). This makes it easier for a compromised proc... Read more

    Affected Products : advanced_dashboard
    • Published: Feb. 21, 2024
    • Modified: May. 06, 2025

  • 6.1

    MEDIUM
    CVE-2024-25381

    There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content.... Read more

    Affected Products : emlog_pro emlog
    • Published: Feb. 21, 2024
    • Modified: May. 06, 2025

  • 7.5

    HIGH
    CVE-2024-25461

    Directory Traversal vulnerability in Terrasoft, Creatio Terrasoft CRM v.7.18.4.1532 allows a remote attacker to obtain sensitive information via a crafted request to the terrasoft.axd component.... Read more

    Affected Products : crm_creatio
    • Published: Feb. 21, 2024
    • Modified: May. 06, 2025

  • 7.2

    HIGH
    CVE-2024-27283

    A vulnerability was discovered in Veritas eDiscovery Platform before 10.2.5. The application administrator can upload potentially malicious files to arbitrary locations on the server on which the application is installed.... Read more

    Affected Products : ediscovery_platform
    • Published: Feb. 22, 2024
    • Modified: May. 06, 2025

  • 9.8

    CRITICAL
    CVE-2025-2362

    A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/contact-us.php. The manipulation of the argument mobnum leads to sql injection. The atta... Read more

    Affected Products : pre-school_enrollment_system
    • Published: Mar. 17, 2025
    • Modified: May. 06, 2025
    • Vuln Type: Injection

  • 8.3

    HIGH
    CVE-2024-0220

    B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade and the licensing servers. A network-based attacker could exploit the vulnerability to execute arbitrary code on the products ... Read more

    • Published: Feb. 22, 2024
    • Modified: May. 06, 2025

  • 9.8

    CRITICAL
    CVE-2025-2379

    A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /create-pass.php. The manipulation of the argument visname leads to sql injection. The ... Read more

    • Published: Mar. 17, 2025
    • Modified: May. 06, 2025
    • Vuln Type: Injection
Showing 20 of 291531 Results