Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.5

HIGH

CVE-2024-39949

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +102 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
7.5

HIGH

CVE-2024-39948

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +102 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
6.5

MEDIUM

CVE-2024-39947

A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device to crash....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +102 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
7.8

HIGH

CVE-2024-39389

InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th...

Affected Products : macos windows indesign
Published: Aug. 14, 2024

Modified: Aug. 19, 2024
7.2

HIGH

CVE-2024-39946

A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing device initialization....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +102 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
6.9

MEDIUM

CVE-2024-7912

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/assets/. The manipulation leads to exposure of information through directory list...

Affected Products : online_railway_reservation_system
Published: Aug. 18, 2024

Modified: Aug. 19, 2024
9.8

CRITICAL

CVE-2024-39950

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +106 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
9.8

CRITICAL

CVE-2024-7913

A vulnerability was found in itsourcecode Billing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /addclient1.php. The manipulation of the argument lname/fname/mi/address/contact/meterReader leads to sql i...

Affected Products : billing_system
Published: Aug. 18, 2024

Modified: Aug. 19, 2024
5.4

MEDIUM

CVE-2024-7914

A vulnerability classified as problematic has been found in SourceCodester Yoga Class Registration System 1.0. Affected is an unknown function of the file /php-ycrs/classes/SystemSettings.php. The manipulation of the argument address leads to cross site s...

Affected Products : yoga_class_registration_system yoga_class_registration_system
Published: Aug. 18, 2024

Modified: Aug. 19, 2024
7.5

HIGH

CVE-2024-39944

A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash....

Affected Products : nvr4416-16p-4ks2\/i_firmware nvr4416-4ks2\/i_firmware nvr4432-16p-4ks2\/i_firmware nvr4432-4ks2\/i_firmware nvr4816-16p-4ks2\/i_firmware nvr4816-4ks2\/i_firmware nvr4832-16p-4ks2\/i_firmware nvr4832-4ks2\/i_firmware nvr4104-4ks2\/l_firmware nvr4104-4ks2\/l +106 more products
Published: Jul. 31, 2024

Modified: Aug. 19, 2024
9.0

HIGH

CVE-2024-7832

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 ...

Affected Products : dns-320_firmware dnr-322l_firmware dns-320l_firmware dns-320l dns-120_firmware dns-120 dnr-202l_firmware dnr-202l dns-315l_firmware dns-315l +30 more products
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
9.8

CRITICAL

CVE-2024-7833

A vulnerability was found in D-Link DI-8100 16.07. It has been classified as critical. This affects the function upgrade_filter_asp of the file upgrade_filter.asp. The manipulation of the argument path leads to command injection. It is possible to initiat...

Affected Products : di-8100_firmware di-8100
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
8.6

HIGH

CVE-2024-43357

ECMA-262 is the language specification for the scripting language ECMAScript. A problem in the ECMAScript (JavaScript) specification of async generators, introduced by a May 2021 spec refactor, may lead to mis-implementation in a way that could present as...

Affected Products :
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
9.8

CRITICAL

CVE-2024-23168

Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resulting in the arbitrary code execution....

Affected Products :
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
7.2

HIGH

CVE-2024-43369

Ibexa RichText Field Type is a Field Type for supporting rich formatted text stored in a structured XML format. In versions on the 4.6 branch prior to 4.6.10, the validator for the RichText fieldtype blocklists `javascript:` and `vbscript:` in links to pr...

Affected Products :
Published: Aug. 16, 2024

Modified: Aug. 19, 2024
6.5

MEDIUM

CVE-2024-42476

In the OAuth library for nim prior to version 0.11, the Authorization Code grant and Implicit grant both rely on the `state` parameter to prevent cross-site request forgery (CSRF) attacks where a resource owner might have their session associated with pro...

Affected Products :
Published: Aug. 15, 2024

Modified: Aug. 19, 2024
6.1

MEDIUM

CVE-2023-4507

The Admission AppManager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'q' parameter in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthentica...

Affected Products :
Published: Aug. 17, 2024

Modified: Aug. 19, 2024
6.1

MEDIUM

CVE-2023-4604

The Slideshow, Image Slider by 2J plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘post’ parameter in versions up to, and including, 1.3.54 due to insufficient input sanitization and output escaping. This makes it possible for...

Affected Products : 2j_slideshow
Published: Aug. 17, 2024

Modified: Aug. 19, 2024
5.3

MEDIUM

CVE-2023-4730

The LadiApp plugn for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the init_endpoint() function hooked via 'init' in versions up to, and including, 4.3. This makes it possible for unauthenticated attack...

Affected Products : ladipage
Published: Aug. 17, 2024

Modified: Aug. 19, 2024
8.5

HIGH

CVE-2024-6456

AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST Interface user who had been socially engineered by a miscreant into opening a specially crafted ...

Affected Products : historian
Published: Aug. 15, 2024

Modified: Aug. 19, 2024

Showing 20 of 293507 Results

Browse by Apps

Latest CVE Feed

7.5

7.5

6.5

7.8

7.2

6.9

9.8

9.8

5.4

7.5

9.0

9.8

8.6

9.8

7.2

6.5

6.1

6.1

5.3

8.5

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable