Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

6.1

MEDIUM

CVE-2018-10686

An issue was discovered in Vesta Control Panel 0.9.8-20. There is Reflected XSS via $_REQUEST['path'] to the view/file/index.php URI, which can lead to remote PHP code execution via vectors involving a file_put_contents call in web/upload/UploadHandler.ph...

Affected Products : control_panel
Published: May. 06, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2018-10685

In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the lzma_decompress_buf function of stream.c, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact....

Affected Products : long_range_zip
Published: May. 02, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2018-10683

An issue was discovered in WildFly 10.1.2.Final. In the case of a default installation without a security realm reference, an attacker can successfully access the server without authentication. NOTE: the Security Realms documentation in the product's Admi...

Affected Products : wildfly
Published: May. 09, 2018

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2018-10682

An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on TCP port 9990 without any authentication using "anonymous" access that is automatically created. Once logged in, a misconfiguration prese...

Affected Products : wildfly
Published: May. 09, 2018

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2018-10680

Z-BlogPHP 1.5.2 has a stored Cross Site Scripting Vulnerability exploitable by an administrator who navigates to "Web site settings --> Basic setting --> Website title" and enters an XSS payload via the zb_system/cmd.php ZC_BLOG_NAME parameter. NOTE: the ...

Affected Products : z-blogphp
Published: May. 02, 2018

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2018-10678

MyBB 1.8.15, when accessed with Microsoft Edge, mishandles 'target="_blank" rel="noopener"' in A elements, which makes it easier for remote attackers to conduct redirection attacks....

Affected Products : mybb
Published: May. 13, 2018

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2018-10677

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial of service (WritePixels heap-based buffer overflow and application crash) or possibly have unspec...

Affected Products : ngiflib
Published: May. 02, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2018-10676

CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI....

Affected Products : tbk-dvr4216_firmware tbk-dvr4104_firmware tbk-dvr4216 tbk-dvr4104
Published: May. 02, 2018

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2018-10675

The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls....

Affected Products : linux_kernel ubuntu_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus virtualization_host
Published: May. 02, 2018

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2018-10666

The Owned smart contract implementation for Aurora IDEX Membership (IDXM), an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. A new owner can subsequently modify variables....

Affected Products : idex_membership
Published: May. 03, 2018

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2018-10665

ILIAS 5.3.4 has XSS through unsanitized output of PHP_SELF, related to shib_logout.php and third-party demo files....

Affected Products : ilias
Published: May. 02, 2018

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2018-10664

An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption....

Affected Products : p1204_firmware a1001_firmware a8004-v_firmware a8105-e_firmware a9161_firmware a9188_firmware a9188-v_firmware c1004-e_firmware c2005_firmware c3003-e_firmware +770 more products
Published: Jun. 26, 2018

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2018-10663

An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation....

Affected Products : p1204_firmware a1001_firmware a8004-v_firmware a8105-e_firmware a9161_firmware a9188_firmware a9188-v_firmware c1004-e_firmware c2005_firmware c3003-e_firmware +770 more products
Published: Jun. 26, 2018

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2018-10662

An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface....

Affected Products : p1204_firmware a1001_firmware a8004-v_firmware a8105-e_firmware a9161_firmware a9188_firmware a9188-v_firmware c1004-e_firmware c2005_firmware c3003-e_firmware +770 more products
Published: Jun. 26, 2018

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2018-10661

An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control....

Affected Products : p1204_firmware a1001_firmware a8004-v_firmware a8105-e_firmware a9161_firmware a9188_firmware a9188-v_firmware c1004-e_firmware c2005_firmware c3003-e_firmware +770 more products
Published: Jun. 26, 2018

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2018-10660

An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection....

Affected Products : p1204_firmware a1001_firmware a8004-v_firmware a8105-e_firmware a9161_firmware a9188_firmware a9188-v_firmware c1004-e_firmware c2005_firmware c3003-e_firmware +770 more products
Published: Jun. 26, 2018

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2018-10659

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash) by sending a crafted command which will result in a code path that calls the UND undefined ARM instruct...

Affected Products : p1204_firmware a1001_firmware a8004-v_firmware a8105-e_firmware a9161_firmware a9188_firmware a9188-v_firmware c1004-e_firmware c2005_firmware c3003-e_firmware +770 more products
Published: Jun. 26, 2018

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2018-10658

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from code inside libdbus-send.so shared object or similar....

Affected Products : p1204_firmware a1001_firmware a8004-v_firmware a8105-e_firmware a9161_firmware a9188_firmware a9188-v_firmware c1004-e_firmware c2005_firmware c3003-e_firmware +770 more products
Published: Jun. 26, 2018

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2018-10657

Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to federation/federation_base.py and handlers/message.py, as exploited in the wild in April 2018....

Affected Products : synapse
Published: May. 02, 2018

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2018-10655

DLPnpAuditor.exe in DeviceLock Plug and Play Auditor (freeware) 5.72 has a Unicode Buffer Overflow (SEH)....

Affected Products : plug_and_play_auditor
Published: May. 10, 2018

Modified: Nov. 21, 2024

Showing 20 of 293934 Results

Browse by Apps

Latest CVE Feed

6.1

9.8

9.8

10.0

6.1

6.1

8.8

9.8

7.8

7.5

6.1

7.5

7.5

10.0

10.0

10.0

7.5

7.5

7.5

7.8

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable