Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

4.8

MEDIUM

CVE-2017-17925

PHP Scripts Mall Professional Service Script has XSS via the admin/general_settingupd.php website_title parameter....

Affected Products : professional_service_script
Published: Dec. 27, 2017

Modified: Apr. 20, 2025
6.1

MEDIUM

CVE-2017-17896

Readymade Job Site Script has XSS via the keyword parameter to the /job URI....

Affected Products : basic_job_site_script
Published: Dec. 27, 2017

Modified: Apr. 20, 2025
9.8

CRITICAL

CVE-2017-17892

Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter....

Affected Products : readymade_video_sharing_script
Published: Dec. 27, 2017

Modified: Apr. 20, 2025
8.8

HIGH

CVE-2017-17891

Readymade Video Sharing Script has CSRF via user-profile-edit.php....

Affected Products : readymade_video_sharing_script
Published: Dec. 27, 2017

Modified: Apr. 20, 2025
7.8

HIGH

CVE-2017-17010

Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory....

Affected Products : content_manager_assistant
Published: Dec. 27, 2017

Modified: Apr. 20, 2025
9.3

HIGH

CVE-2017-16897

A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5. This vulnerability allows an attacker to impersonate another user and potentially elevate their privileges if the SAML identity provider does not sig...

Affected Products : passport-wsfed-saml2
Published: Dec. 27, 2017

Modified: Apr. 20, 2025
5.4

MEDIUM

CVE-2017-1365

IBM Team Concert (RTC including IBM Rational Collaborative Lifecycle Management 4.0, 5.0., and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended function...

Affected Products : rational_doors_next_generation rational_collaborative_lifecycle_management rational_engineering_lifecycle_manager rational_quality_manager rational_rhapsody_design_manager rational_software_architect_design_manager rational_team_concert
Published: Dec. 27, 2017

Modified: Apr. 20, 2025
7.8

HIGH

CVE-2017-15320

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to...

Affected Products : te60_firmware rp200_firmware te30_firmware te40_firmware te50_firmware te30 te40 te50 te60 rp200
Published: Dec. 22, 2017

Modified: Apr. 20, 2025
8.8

HIGH

CVE-2017-5261

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to all authenticated users....

Affected Products : cnpilot_r190v_firmware cnpilot_e410_firmware cnpilot_r190n_firmware cnpilot_e400_firmware cnpilot_e600_firmware cnpilot_r190v cnpilot_e410 cnpilot_r190n cnpilot_e400 cnpilot_e600
Published: Dec. 20, 2017

Modified: Apr. 20, 2025
2.3

LOW

CVE-2017-15307

Huawei Honor 8 smartphone with software versions earlier than FRD-L04C567B389 and earlier than FRD-L14C567B389 have a permission control vulnerability due to improper authorization configuration on specific device information....

Affected Products : honor_8_firmware honor_8
Published: Dec. 22, 2017

Modified: Apr. 20, 2025
7.5

HIGH

CVE-2017-17692

Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property....

Affected Products : internet_browser
Published: Dec. 21, 2017

Modified: Apr. 20, 2025
9.3

HIGH

CVE-2017-17410

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mal...

Affected Products : internet_security_2018
Published: Dec. 21, 2017

Modified: Apr. 20, 2025
9.3

HIGH

CVE-2017-17409

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mal...

Affected Products : internet_security_2018
Published: Dec. 21, 2017

Modified: Apr. 20, 2025
4.8

MEDIUM

CVE-2017-17828

Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter....

Affected Products : busbooking-script
Published: Dec. 21, 2017

Modified: Apr. 20, 2025
4.8

MEDIUM

CVE-2017-17825

The Batch Manager component of Piwigo 2.9.2 is vulnerable to Persistent Cross Site Scripting via tags-* array parameters in an admin.php?page=batch_manager&mode=unit request. An attacker can exploit this to hijack a client's browser along with the data st...

Affected Products : piwigo
Published: Dec. 21, 2017

Modified: Apr. 20, 2025
4.9

MEDIUM

CVE-2017-17824

The Batch Manager component of Piwigo 2.9.2 is vulnerable to SQL Injection via the admin/batch_manager_unit.php element_ids parameter in unit mode. An attacker can exploit this to gain access to the data in a connected MySQL database....

Affected Products : piwigo
Published: Dec. 21, 2017

Modified: Apr. 20, 2025
4.9

MEDIUM

CVE-2017-17822

The List Users API of Piwigo 2.9.2 is vulnerable to SQL Injection via the /admin/user_list_backend.php sSortDir_0 parameter. An attacker can exploit this to gain access to the data in a connected MySQL database....

Affected Products : piwigo
Published: Dec. 21, 2017

Modified: Apr. 20, 2025
8.0

HIGH

CVE-2017-5263

Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which are most typically implemented as randomized per-session tokens associated with any web application function, especial...

Affected Products : cnpilot_r190v_firmware cnpilot_e410_firmware cnpilot_r190n_firmware cnpilot_e400_firmware cnpilot_e600_firmware cnpilot_r190v cnpilot_e410 cnpilot_r190n cnpilot_e400 cnpilot_e600
Published: Dec. 20, 2017

Modified: Apr. 20, 2025
8.0

HIGH

CVE-2017-5262

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive information by OID reference....

Affected Products : cnpilot_r190v_firmware cnpilot_e410_firmware cnpilot_r190n_firmware cnpilot_e400_firmware cnpilot_e600_firmware cnpilot_r190v cnpilot_e410 cnpilot_r190n cnpilot_e400 cnpilot_e600
Published: Dec. 20, 2017

Modified: Apr. 20, 2025
9.0

HIGH

CVE-2017-5259

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https://<device-ip-or-hostname>/adm/syscmd.asp....

Affected Products : cnpilot_r190v_firmware cnpilot_e410_firmware cnpilot_r190n_firmware cnpilot_e400_firmware cnpilot_e600_firmware cnpilot_r190v cnpilot_e410 cnpilot_r190n cnpilot_e400 cnpilot_e600
Published: Dec. 20, 2017

Modified: Apr. 20, 2025

Showing 20 of 292802 Results

1
...
1717
1718
1719
1720
1721
1722
1723
...
14641

Browse by Apps

Latest CVE Feed

4.8

6.1

9.8

8.8

7.8

9.3

5.4

7.8

8.8

2.3

7.5

9.3

9.3

4.8

4.8

4.9

4.9

8.0

8.0

9.0

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable