Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

8.9

HIGH

CVE-2024-39809

The Central Manager user session refresh token does not expire when a user logs out. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated...

Affected Products : big-ip_next_central_manager
Published: Aug. 14, 2024

Modified: Aug. 19, 2024
7.5

HIGH

CVE-2024-39949

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +102 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
7.5

HIGH

CVE-2024-39948

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +102 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
6.5

MEDIUM

CVE-2024-39947

A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device to crash....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +102 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
7.8

HIGH

CVE-2024-39389

InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th...

Affected Products : macos windows indesign
Published: Aug. 14, 2024

Modified: Aug. 19, 2024
7.2

HIGH

CVE-2024-39946

A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing device initialization....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +102 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
6.9

MEDIUM

CVE-2024-7912

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/assets/. The manipulation leads to exposure of information through directory list...

Affected Products : online_railway_reservation_system
Published: Aug. 18, 2024

Modified: Aug. 19, 2024
9.8

CRITICAL

CVE-2024-39950

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +106 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
9.8

CRITICAL

CVE-2024-7913

A vulnerability was found in itsourcecode Billing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addclient1.php. The manipulation of the argument lname/fname/mi/address/contact/meterReader leads to sql i...

Affected Products : billing_system
Published: Aug. 18, 2024

Modified: Aug. 19, 2024
5.4

MEDIUM

CVE-2024-7914

A vulnerability classified as problematic has been found in SourceCodester Yoga Class Registration System 1.0. Affected is an unknown function of the file /php-ycrs/classes/SystemSettings.php. The manipulation of the argument address leads to cross site s...

Affected Products : yoga_class_registration_system yoga_class_registration_system
Published: Aug. 18, 2024

Modified: Aug. 19, 2024
7.5

HIGH

CVE-2024-39944

A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +106 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
9.0

HIGH

CVE-2024-7832

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 ...

Affected Products : dns-320_firmware dnr-322l_firmware dns-320l_firmware dns-320l dns-120_firmware dns-120 dnr-202l_firmware dnr-202l dns-315l_firmware dns-315l +30 more products
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
9.8

CRITICAL

CVE-2024-7833

A vulnerability was found in D-Link DI-8100 16.07. It has been classified as critical. This affects the function upgrade_filter_asp of the file upgrade_filter.asp. The manipulation of the argument path leads to command injection. It is possible to initiat...

Affected Products : di-8100_firmware di-8100
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
6.5

MEDIUM

CVE-2024-42476

In the OAuth library for nim prior to version 0.11, the Authorization Code grant and Implicit grant both rely on the `state` parameter to prevent cross-site request forgery (CSRF) attacks where a resource owner might have their session associated with pro...

Affected Products :
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
8.8

HIGH

CVE-2024-22218

XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows authenticated users to submit malicious XML via unspecified features which could lead to various actions such as accessing the underly...

Affected Products :
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
9.8

CRITICAL

CVE-2024-23168

Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resulting in the arbitrary code execution....

Affected Products :
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
6.5

MEDIUM

CVE-2024-42475

In the OAuth library for nim prior to version 0.11, the `state` values generated by the `generateState` function do not have sufficient entropy. These can be successfully guessed by an attacker allowing them to perform a CSRF vs a user, associating the us...

Affected Products :
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
8.6

HIGH

CVE-2024-43357

ECMA-262 is the language specification for the scripting language ECMAScript. A problem in the ECMAScript (JavaScript) specification of async generators, introduced by a May 2021 spec refactor, may lead to mis-implementation in a way that could present as...

Affected Products :
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
7.5

HIGH

CVE-2024-43367

Boa is an embeddable and experimental Javascript engine written in Rust. Starting in version 0.16 and prior to version 0.19.0, a wrong assumption made when handling ECMAScript's `AsyncGenerator` operations can cause an uncaught exception on certain script...

Affected Products :
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
8.5

HIGH

CVE-2024-6456

AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST Interface user who had been socially engineered by a miscreant into opening a specially crafted ...

Affected Products : historian
Published: Aug. 15, 2024

Modified: Aug. 19, 2024

Showing 20 of 291890 Results

Latest CVE Feed

8.9

7.5

7.5

6.5

7.8

7.2

6.9

9.8

9.8

5.4

7.5

9.0

9.8

6.5

8.8

9.8

6.5

8.6

7.5

8.5

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable