Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.5

HIGH

CVE-2018-4942

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity Processing vulnerability. Successful exploitation could lead to information disclosure....

Affected Products : coldfusion
EPSS Score: %0.90

Published: May. 19, 2018

Modified: May. 06, 2025
7.8

HIGH

CVE-2018-4938

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Insecure Library Loading vulnerability. Successful exploitation could lead to local privilege escalation....

Affected Products : coldfusion
EPSS Score: %0.20

Published: May. 19, 2018

Modified: May. 06, 2025
8.3

HIGH

CVE-2018-2826

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to com...

Affected Products : ubuntu_linux cloud_backup oncommand_insight oncommand_unified_manager oncommand_workflow_automation jdk jre e-series_santricity_os_controller e-series_santricity_storage_manager e-series_santricity_web_services +8 more products
EPSS Score: %2.92

Published: Apr. 19, 2018

Modified: May. 06, 2025
8.3

HIGH

CVE-2018-2825

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to com...

Affected Products : ubuntu_linux cloud_backup oncommand_insight oncommand_unified_manager oncommand_workflow_automation jdk jre e-series_santricity_os_controller e-series_santricity_storage_manager e-series_santricity_web_services +8 more products
EPSS Score: %1.13

Published: Apr. 19, 2018

Modified: May. 06, 2025
5.3

MEDIUM

CVE-2018-2815

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable...

Affected Products : ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus jdk jre +3 more products
EPSS Score: %0.52

Published: Apr. 19, 2018

Modified: May. 06, 2025
5.3

MEDIUM

CVE-2018-2798

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerabi...

Affected Products : ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus jdk jre +4 more products
EPSS Score: %0.22

Published: Apr. 19, 2018

Modified: May. 06, 2025
5.3

MEDIUM

CVE-2018-2796

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerab...

Affected Products : ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus jdk jre +4 more products
EPSS Score: %0.52

Published: Apr. 19, 2018

Modified: May. 06, 2025
3.1

LOW

CVE-2018-2790

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthent...

Affected Products : ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus jdk jre +3 more products
EPSS Score: %0.27

Published: Apr. 19, 2018

Modified: May. 06, 2025
7.5

HIGH

CVE-2018-2627

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...

Affected Products : active_iq_unified_manager cloud_backup oncommand_insight oncommand_unified_manager oncommand_workflow_automation jdk jre e-series_santricity_management_plug-ins e-series_santricity_os_controller e-series_santricity_storage_manager +10 more products
EPSS Score: %0.37

Published: Jan. 18, 2018

Modified: May. 06, 2025
7.5

HIGH

CVE-2018-18066

snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service....

Affected Products : cloud_backup data_ontap storagegrid_webscale net-snmp hyper_converged_infrastructure e-series_santricity_os_controller solidfire_element_os
EPSS Score: %0.59

Published: Oct. 08, 2018

Modified: May. 06, 2025
10.0

HIGH

CVE-2018-15965

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution....

Affected Products : coldfusion
EPSS Score: %40.11

Published: Sep. 25, 2018

Modified: May. 06, 2025
7.5

HIGH

CVE-2018-15964

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a use of a component with a known vulnerability vulnerability. Successful exploitation could lead to information disclosure....

Affected Products : coldfusion
EPSS Score: %10.65

Published: Sep. 25, 2018

Modified: May. 06, 2025
5.3

MEDIUM

CVE-2018-15963

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary folder creation....

Affected Products : coldfusion
EPSS Score: %6.20

Published: Sep. 25, 2018

Modified: May. 06, 2025
5.3

MEDIUM

CVE-2018-15962

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a directory listing vulnerability. Successful exploitation could lead to information disclosure....

Affected Products : coldfusion
EPSS Score: %2.30

Published: Sep. 25, 2018

Modified: May. 06, 2025
10.0

HIGH

CVE-2018-15959

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution....

Affected Products : coldfusion
EPSS Score: %40.11

Published: Sep. 25, 2018

Modified: May. 06, 2025
10.0

HIGH

CVE-2018-15958

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution....

Affected Products : coldfusion
EPSS Score: %40.11

Published: Sep. 25, 2018

Modified: May. 06, 2025
10.0

HIGH

CVE-2018-15957

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution....

Affected Products : coldfusion
EPSS Score: %60.60

Published: Sep. 25, 2018

Modified: May. 06, 2025
5.5

MEDIUM

CVE-2018-1002205

DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'....

Affected Products : dotnetzip.semverd
EPSS Score: %0.52

Published: Jul. 25, 2018

Modified: May. 06, 2025
6.1

MEDIUM

CVE-2018-1000874

PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in all distributed parsers allowing a malicious crafted script to be executed that can result in the lose of user data and sensitive user information. T...

Affected Products : markdown
EPSS Score: %0.22

Published: Dec. 20, 2018

Modified: May. 06, 2025
8.8

HIGH

CVE-2017-9633

An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced between 2009-2010, Ford a limited number of P-HEV vehicles, Infiniti ...

Affected Products : s-gold_2_pmb_8876
EPSS Score: %0.64

Published: Aug. 07, 2017

Modified: May. 06, 2025

Showing 20 of 291647 Results

1
...
1326
1327
1328
1329
1330
1331
1332
...
14583

Latest CVE Feed

7.5

7.8

8.3

8.3

5.3

5.3

5.3

3.1

7.5

7.5

10.0

7.5

5.3

5.3

10.0

10.0

10.0

5.5

6.1

8.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable