Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

9.0

HIGH

CVE-2014-2723

In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a configuration error, and ...

Affected Products : fortibalancer_400_firmware fortibalancer_1000_firmware fortibalancer_2000_firmware fortibalancer_3000_firmware fortibalancer_400 fortibalancer_1000 fortibalancer_2000 fortibalancer_3000
Published: Mar. 19, 2020

Modified: Nov. 21, 2024
9.0

HIGH

CVE-2014-2722

In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a configuration error, and ...

Affected Products : fortibalancer_400_firmware fortibalancer_1000_firmware fortibalancer_2000_firmware fortibalancer_3000_firmware fortibalancer_400 fortibalancer_1000 fortibalancer_2000 fortibalancer_3000
Published: Mar. 19, 2020

Modified: Nov. 21, 2024
9.0

HIGH

CVE-2014-2721

In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a configuration error, and ...

Affected Products : fortibalancer_400_firmware fortibalancer_1000_firmware fortibalancer_2000_firmware fortibalancer_3000_firmware fortibalancer_400 fortibalancer_1000 fortibalancer_2000 fortibalancer_3000
Published: Mar. 19, 2020

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2014-2686

Ansible prior to 1.5.4 mishandles the evaluation of some strings....

Affected Products : ansible
Published: Jan. 09, 2020

Modified: Nov. 21, 2024
8.1

HIGH

CVE-2014-2680

The update process in Xmind 3.4.1 and earlier allow remote attackers to execute arbitrary code via a man-in-the-middle attack....

Affected Products : xmind
Published: Jan. 21, 2020

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2014-2675

Cross-site request forgery (CSRF) vulnerability in inc/AdminPage.php in the WP HTML Sitemap plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete the sitemap via a request to the wp-html-s...

Affected Products : wp-html-sitemap
Published: Mar. 19, 2018

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2014-2674

Directory traversal vulnerability in the Ajax Pagination (twitter Style) plugin 1.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the loop parameter in an ajax_navigation action to wp-admin/admin-ajax.php....

Affected Products : ajax-pagination
Published: Mar. 19, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2014-2652

SQL injection vulnerability in OpenScape Deployment Service (DLS) before 6.x and 7.x before R1.11.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors....

Affected Products : openscape_deployment_service
Published: Mar. 19, 2018

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2014-2651

Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the Workpoint Interface...

Affected Products : openstage_80_firmware openstage_80_g_firmware openstage_60_g_firmware openstage_60_firmware openstage_40_firmware openstage_40_g_firmware openstage_20_e_firmware openstage_20_firmware openstage_20_g_firmware openstage_15_firmware +18 more products
Published: Jan. 09, 2020

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2014-2650

Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface...

Affected Products : openstage_80_firmware openstage_80_g_firmware openstage_60_g_firmware openstage_60_firmware openstage_40_firmware openstage_40_g_firmware openstage_20_e_firmware openstage_20_firmware openstage_20_g_firmware openstage_15_firmware +20 more products
Published: Jan. 09, 2020

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2014-2595

Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string....

Affected Products : web_application_firewall
Published: Feb. 12, 2020

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2014-2592

Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file with an executable extension....

Affected Products : web_management_portal
Published: Mar. 09, 2018

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2014-2581

Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit....

Affected Products : fedora smb4k
Published: Jan. 28, 2020

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2014-2560

The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue....

Affected Products : phonerlite
Published: Feb. 12, 2020

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2014-2552

Brookins Consulting (BC) Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain access to sensitive data....

Affected Products : collected_information_export
Published: Apr. 27, 2018

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2014-2550

Cross-site request forgery (CSRF) vulnerability in the Disable Comments plugin before 1.0.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that enable comments via a request to the disable_comments_settin...

Affected Products : disable_comments_project
Published: Mar. 19, 2018

Modified: Nov. 21, 2024
4.6

MEDIUM

CVE-2014-2387

Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...

Affected Products : debian_linux opensuse pen
Published: Dec. 13, 2019

Modified: Nov. 21, 2024
5.9

MEDIUM

CVE-2014-2359

OleumTech Wireless Sensor Network devices allow remote attackers to obtain sensitive information about sensor nodes or spoof devices by reading cleartext protocol data....

Affected Products : ft1_firmware ad1_firmware ft1 ad1
Published: Apr. 06, 2018

Modified: Nov. 21, 2024
6.6

MEDIUM

CVE-2014-2312

The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid....

Affected Products : thermald
Published: Mar. 26, 2018

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2014-2304

A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service. This effect is the result of a flaw in OpenFlow protocol processing, where specific malformed...

Affected Products : open_sdn_controller
Published: Oct. 23, 2019

Modified: Nov. 21, 2024

Showing 20 of 292811 Results

Browse by Apps

Latest CVE Feed

9.0

9.0

9.0

7.5

8.1

6.5

7.5

9.8

10.0

10.0

9.8

9.8

7.5

7.5

9.8

8.8

4.6

5.9

6.6

7.5

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable