Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

9.8

CRITICAL

CVE-2025-27135

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. Versions 0.15.1 and prior are vulnerable to SQL injection. The ExeSQL component extracts the SQL statement from the input and sends it directly to the database query. As of time of pub...

Affected Products : ragflow
Published: Feb. 25, 2025

Modified: Apr. 22, 2025

Vuln Type: Injection
5.5

MEDIUM

CVE-2025-2953

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit h...

Affected Products : pytorch
Published: Mar. 30, 2025

Modified: Apr. 22, 2025

Vuln Type: Denial of Service
6.5

MEDIUM

CVE-2025-32176

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GalleryCreator Gallery Blocks with Lightbox allows Stored XSS.This issue affects Gallery Blocks with Lightbox: from n/a through 3.2.5....

Affected Products : simply_gallery_blocks_with_lightbox
Published: Apr. 04, 2025

Modified: Apr. 22, 2025

Vuln Type: Cross-Site Scripting
7.5

HIGH

CVE-2022-45685

A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data....

Affected Products : debian_linux jettison
Published: Dec. 13, 2022

Modified: Apr. 22, 2025
6.1

MEDIUM

CVE-2022-45028

A cross-site scripting (XSS) vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha....

Affected Products : nvg443b_firmware nvg443b
Published: Dec. 13, 2022

Modified: Apr. 22, 2025
9.8

CRITICAL

CVE-2022-45005

IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the cmd_get_ping_output function....

Affected Products : ew9_firmware ew9
Published: Dec. 13, 2022

Modified: Apr. 22, 2025
5.5

MEDIUM

CVE-2022-44874

wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component op_CallIndirect at /m3_exec.h....

Affected Products : wasm3
Published: Dec. 13, 2022

Modified: Apr. 22, 2025
4.6

MEDIUM

CVE-2022-44636

The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2...

Affected Products : t-oscpakuc_firmware t-oscpdeuc_firmware t-oscpuabc_firmware t-nkm2akuc_firmware t-nkm2deuc_firmware t-nkm2uabc_firmware t-nklakuc_firmware t-nkldeuc_firmware t-nkluabc_firmware t-ksu2eakuc_firmware +20 more products
Published: Dec. 13, 2022

Modified: Apr. 22, 2025
6.1

MEDIUM

CVE-2022-44575

A vulnerability has been identified in PLM Help Server V4.2 (All versions). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected application that could allow an attacker to execute malicious javascript code by t...

Affected Products : plm_help_server
Published: Dec. 13, 2022

Modified: Apr. 22, 2025
5.3

MEDIUM

CVE-2022-31698

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafte...

Affected Products : vcenter_server cloud_foundation cloud_foundation
Published: Dec. 13, 2022

Modified: Apr. 22, 2025
9.8

CRITICAL

CVE-2022-46364

A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. ...

Affected Products : cxf
Published: Dec. 13, 2022

Modified: Apr. 22, 2025
7.5

HIGH

CVE-2022-46363

A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration. The vulnerability only applies when the CXFServlet is configured with both the static-resources-list and redirect...

Affected Products : cxf
Published: Dec. 13, 2022

Modified: Apr. 22, 2025
9.8

CRITICAL

CVE-2022-46353

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA...

Affected Products : 6gk5204-0ba00-2mb2_firmware 6gk5204-0ba00-2kb2_firmware 6gk5204-0bs00-2na3_firmware 6gk5204-0bs00-3la3_firmware 6gk5204-0bs00-3pa3_firmware 6gk5204-0ba00-2mb2 6gk5204-0ba00-2kb2 6gk5204-0bs00-2na3 6gk5204-0bs00-3la3 6gk5204-0bs00-3pa3
Published: Dec. 13, 2022

Modified: Apr. 22, 2025
7.5

HIGH

CVE-2022-46352

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA...

Affected Products : 6gk5204-0ba00-2mb2_firmware 6gk5204-0ba00-2kb2_firmware 6gk5204-0bs00-2na3_firmware 6gk5204-0bs00-3la3_firmware 6gk5204-0bs00-3pa3_firmware 6gk5204-0ba00-2mb2 6gk5204-0ba00-2kb2 6gk5204-0bs00-2na3 6gk5204-0bs00-3la3 6gk5204-0bs00-3pa3
Published: Dec. 13, 2022

Modified: Apr. 22, 2025
5.5

MEDIUM

CVE-2022-46351

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA...

Affected Products : 6gk5204-0ba00-2mb2_firmware 6gk5204-0ba00-2kb2_firmware 6gk5204-0bs00-2na3_firmware 6gk5204-0bs00-3la3_firmware 6gk5204-0bs00-3pa3_firmware 6gk5204-0ba00-2mb2 6gk5204-0ba00-2kb2 6gk5204-0bs00-2na3 6gk5204-0bs00-3la3 6gk5204-0bs00-3pa3
Published: Dec. 13, 2022

Modified: Apr. 22, 2025
6.1

MEDIUM

CVE-2022-46350

A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA...

Affected Products : 6gk5204-0ba00-2mb2_firmware 6gk5204-0ba00-2kb2_firmware 6gk5204-0bs00-2na3_firmware 6gk5204-0bs00-3la3_firmware 6gk5204-0bs00-3pa3_firmware 6gk5204-0ba00-2mb2 6gk5204-0ba00-2kb2 6gk5204-0bs00-2na3 6gk5204-0bs00-3la3 6gk5204-0bs00-3pa3
Published: Dec. 13, 2022

Modified: Apr. 22, 2025
7.2

HIGH

CVE-2022-46117

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=view_product&id=....

Affected Products : helmet_store_showroom_site
Published: Dec. 14, 2022

Modified: Apr. 22, 2025
8.8

HIGH

CVE-2022-46074

Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missing CSRF protection....

Affected Products : helmet_store_showroom
Published: Dec. 14, 2022

Modified: Apr. 22, 2025
6.1

MEDIUM

CVE-2022-46073

Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS)....

Affected Products : helmet_store_showroom
Published: Dec. 14, 2022

Modified: Apr. 22, 2025
9.8

CRITICAL

CVE-2022-46072

Helmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection....

Affected Products : helmet_store_showroom
Published: Dec. 14, 2022

Modified: Apr. 22, 2025

Showing 20 of 293350 Results

1
...
1664
1665
1666
1667
1668
1669
1670
...
14668

Browse by Apps

Latest CVE Feed

9.8

5.5

6.5

7.5

6.1

9.8

5.5

4.6

6.1

5.3

9.8

7.5

9.8

7.5

5.5

6.1

7.2

8.8

6.1

9.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable