Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

5.3

MEDIUM

CVE-2024-45612

Contao is an Open Source CMS. In affected versions an untrusted user can inject insert tags into the canonical tag, which are then replaced on the web page (front end). Users are advised to update to Contao 4.13.49, 5.3.15 or 5.4.3. Users unable to upgrad...

Affected Products : contao
Published: Sep. 17, 2024

Modified: Sep. 23, 2024
6.1

MEDIUM

CVE-2024-8951

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file manage_fee.php. The manipulation of the argument toview leads to cross site scripti...

Affected Products : resort_reservation_system resort_reservation_system
Published: Sep. 17, 2024

Modified: Sep. 23, 2024
7.5

HIGH

CVE-2024-8948

A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exp...

Affected Products : micropython
Published: Sep. 17, 2024

Modified: Sep. 23, 2024
8.8

HIGH

CVE-2024-8949

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cart_id/id leads to impro...

Affected Products : online_eyewear_shop
Published: Sep. 17, 2024

Modified: Sep. 23, 2024
6.1

MEDIUM

CVE-2024-8653

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific paths on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ ht...

Affected Products : netcat_content_management_system
Published: Sep. 19, 2024

Modified: Sep. 23, 2024
6.1

MEDIUM

CVE-2024-8652

A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibly others. Apply patch from vendor https://netcat.ru/ htt...

Affected Products : netcat_content_management_system
Published: Sep. 19, 2024

Modified: Sep. 23, 2024
6.9

MEDIUM

CVE-2024-8651

A vulnerability in NetCat CMS allows an attacker to send a specially crafted http request that can be used to check whether a user exists in the system, which could be a basis for further attacks. This issue affects NetCat CMS v. 6.4.0.24126.2 and possibl...

Affected Products : netcat_content_management_system
Published: Sep. 19, 2024

Modified: Sep. 23, 2024
8.8

HIGH

CVE-2024-37339

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

Affected Products : sql_server sql_server sql_server_2016 sql_server_2017 sql_server_2019 sql_server_2022 sql_2016_azure_connect_feature_pack
Published: Sep. 10, 2024

Modified: Sep. 23, 2024
4.3

MEDIUM

CVE-2024-38221

Microsoft Edge (Chromium-based) Spoofing Vulnerability...

Affected Products : edge_chromium
Published: Sep. 19, 2024

Modified: Sep. 23, 2024
8.8

HIGH

CVE-2024-43489

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability...

Affected Products : edge_chromium
Published: Sep. 19, 2024

Modified: Sep. 23, 2024
8.8

HIGH

CVE-2024-43496

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability...

Affected Products : edge_chromium
Published: Sep. 19, 2024

Modified: Sep. 23, 2024
9.8

CRITICAL

CVE-2024-9004

A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912. Affected is an unknown function of the file /view/DBManage/Backup_Server_commit.php. The manipulation of the argument host leads to os command injection. It is possib...

Affected Products : dar-7000_firmware dar-7000
Published: Sep. 19, 2024

Modified: Sep. 23, 2024
8.8

HIGH

CVE-2024-37340

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

Affected Products : sql_server sql_server sql_server_2016 sql_server_2017 sql_server_2019 sql_server_2022 sql_2016_azure_connect_feature_pack
Published: Sep. 10, 2024

Modified: Sep. 23, 2024
8.8

HIGH

CVE-2024-37338

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

Affected Products : sql_server sql_server sql_server_2016 sql_server_2017 sql_server_2019 sql_server_2022 sql_2016_azure_connect_feature_pack
Published: Sep. 10, 2024

Modified: Sep. 23, 2024
7.1

HIGH

CVE-2024-37337

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability...

Affected Products : sql_server sql_server sql_server_2016 sql_server_2017 sql_server_2019 sql_server_2022 sql_2016_azure_connect_feature_pack
Published: Sep. 10, 2024

Modified: Sep. 23, 2024
8.8

HIGH

CVE-2024-37335

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

Affected Products : sql_server sql_server sql_server_2016 sql_server_2017 sql_server_2019 sql_server_2022 sql_2016_azure_connect_feature_pack
Published: Sep. 10, 2024

Modified: Sep. 23, 2024
9.8

CRITICAL

CVE-2024-8944

A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affects an unknown part of the file check_availability.php. The manipulation of the argument email leads to sql injection. It is possible to...

Affected Products : hospital_management_system hospital_management_system
Published: Sep. 17, 2024

Modified: Sep. 23, 2024
5.5

MEDIUM

CVE-2024-46773

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check denominator pbn_div before used [WHAT & HOW] A denominator cannot be 0, and is checked before used. This fixes 1 DIVIDE_BY_ZERO issue reported by Coverity....

Affected Products : linux_kernel
Published: Sep. 18, 2024

Modified: Sep. 23, 2024
8.8

HIGH

CVE-2024-26191

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

Affected Products : sql_server sql_server sql_server_2016 sql_server_2017 sql_server_2019 sql_server_2022 sql_2016_azure_connect_feature_pack
Published: Sep. 10, 2024

Modified: Sep. 23, 2024
8.8

HIGH

CVE-2024-26186

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability...

Affected Products : sql_server sql_server sql_server_2016 sql_server_2017 sql_server_2019 sql_server_2022 sql_2016_azure_connect_feature_pack
Published: Sep. 10, 2024

Modified: Sep. 23, 2024

Showing 20 of 291209 Results

Latest CVE Feed

5.3

6.1

7.5

8.8

6.1

6.1

6.9

8.8

4.3

8.8

8.8

9.8

8.8

8.8

7.1

8.8

9.8

5.5

8.8

8.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable