Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.5

HIGH

CVE-2024-39949

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +102 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
7.5

HIGH

CVE-2024-39948

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +102 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
6.5

MEDIUM

CVE-2024-39947

A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device to crash....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +102 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
7.8

HIGH

CVE-2024-39389

InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th...

Affected Products : macos windows indesign
Published: Aug. 14, 2024

Modified: Aug. 19, 2024
7.2

HIGH

CVE-2024-39946

A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing device initialization....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +102 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
6.9

MEDIUM

CVE-2024-7912

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/assets/. The manipulation leads to exposure of information through directory list...

Affected Products : online_railway_reservation_system
Published: Aug. 18, 2024

Modified: Aug. 19, 2024
9.8

CRITICAL

CVE-2024-39950

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +106 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
9.8

CRITICAL

CVE-2024-7913

A vulnerability was found in itsourcecode Billing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addclient1.php. The manipulation of the argument lname/fname/mi/address/contact/meterReader leads to sql i...

Affected Products : billing_system
Published: Aug. 18, 2024

Modified: Aug. 19, 2024
5.4

MEDIUM

CVE-2024-7914

A vulnerability classified as problematic has been found in SourceCodester Yoga Class Registration System 1.0. Affected is an unknown function of the file /php-ycrs/classes/SystemSettings.php. The manipulation of the argument address leads to cross site s...

Affected Products : yoga_class_registration_system yoga_class_registration_system
Published: Aug. 18, 2024

Modified: Aug. 19, 2024
7.5

HIGH

CVE-2024-39944

A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +106 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
9.0

HIGH

CVE-2024-7832

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 ...

Affected Products : dns-320_firmware dnr-322l_firmware dns-320l_firmware dns-320l dns-120_firmware dns-120 dnr-202l_firmware dnr-202l dns-315l_firmware dns-315l +30 more products
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
9.8

CRITICAL

CVE-2024-7833

A vulnerability was found in D-Link DI-8100 16.07. It has been classified as critical. This affects the function upgrade_filter_asp of the file upgrade_filter.asp. The manipulation of the argument path leads to command injection. It is possible to initiat...

Affected Products : di-8100_firmware di-8100
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
8.5

HIGH

CVE-2024-6456

AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST Interface user who had been socially engineered by a miscreant into opening a specially crafted ...

Affected Products : historian
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
7.8

HIGH

CVE-2024-2175

An insecure permissions vulnerability was reported in Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display Manager (LADM) that could allow a local attacker to escalate privileges....

Affected Products :
Published: Aug. 16, 2024

Modified: Aug. 19, 2024
5.3

MEDIUM

CVE-2023-4730

The LadiApp plugn for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the init_endpoint() function hooked via 'init' in versions up to, and including, 4.3. This makes it possible for unauthenticated attack...

Affected Products : ladipage
Published: Aug. 17, 2024

Modified: Aug. 19, 2024
6.1

MEDIUM

CVE-2023-4604

The Slideshow, Image Slider by 2J plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘post’ parameter in versions up to, and including, 1.3.54 due to insufficient input sanitization and output escaping. This makes it possible for...

Affected Products : 2j_slideshow
Published: Aug. 17, 2024

Modified: Aug. 19, 2024
6.1

MEDIUM

CVE-2023-4507

The Admission AppManager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'q' parameter in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthentica...

Affected Products :
Published: Aug. 17, 2024

Modified: Aug. 19, 2024
4.7

MEDIUM

CVE-2023-1604

The Short URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.8. This is due to missing or incorrect nonce validation on the configuration_page function. This makes it possible for unauthenticated att...

Affected Products : short_url
Published: Aug. 17, 2024

Modified: Aug. 19, 2024
6.5

MEDIUM

CVE-2022-4532

The LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging ...

Affected Products :
Published: Aug. 17, 2024

Modified: Aug. 19, 2024
7.2

HIGH

CVE-2022-1751

The Skitter Slideshow plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.2 via the /image.php file. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations o...

Affected Products :
Published: Aug. 17, 2024

Modified: Aug. 19, 2024

Showing 20 of 291389 Results

Latest CVE Feed

7.5

7.5

6.5

7.8

7.2

6.9

9.8

9.8

5.4

7.5

9.0

9.8

8.5

7.8

5.3

6.1

6.1

4.7

6.5

7.2

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable