Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

6.4

MEDIUM

CVE-2024-1242

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button onclick attribute in all versions up to, and including, 4.10.18 due to insufficient input sanitization and output escaping. This makes it pos...

Affected Products : premium_addons_for_elementor
Published: Feb. 29, 2024

Modified: Aug. 15, 2025
8.8

HIGH

CVE-2024-1522

A Cross-Site Request Forgery (CSRF) vulnerability in the parisneo/lollms-webui project allows remote attackers to execute arbitrary code on a victim's system. The vulnerability stems from the `/execute_code` API endpoint, which does not properly validate ...

Affected Products : lollms_web_ui lollms_webui lollms_web_ui lollms-webui
Published: Mar. 30, 2024

Modified: Aug. 15, 2025
8.2

HIGH

CVE-2024-1646

parisneo/lollms-webui is vulnerable to authentication bypass due to insufficient protection over sensitive endpoints. The application checks if the host parameter is not '0.0.0.0' to restrict access, which is inadequate when the application is bound to a ...

Affected Products : lollms_web_ui lollms_webui lollms_web_ui lollms-webui lollms-webui
Published: Apr. 16, 2024

Modified: Aug. 15, 2025
7.5

HIGH

CVE-2024-21459

Information disclosure while handling beacon or probe response frame in STA....

Affected Products : qam8295p_firmware qca6391_firmware qca6426_firmware qca6436_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware +342 more products
Published: Aug. 05, 2024

Modified: Aug. 15, 2025
7.8

HIGH

CVE-2024-21803

Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associated with program files https://gitee.Com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/af_blu...

Affected Products : linux_kernel
EPSS Score: %0.04

Published: Jan. 30, 2024

Modified: Aug. 15, 2025
8.2

HIGH

CVE-2024-34949

SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function, exploited at the /admin/order/lists.html endpoint....

Affected Products : likeshop
Published: May. 20, 2024

Modified: Aug. 15, 2025
5.3

MEDIUM

CVE-2021-30187

CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command....

Affected Products : 750-831_firmware 750-852_firmware 750-880_firmware 750-881_firmware 750-889_firmware 750-829_firmware 750-882_firmware 750-885_firmware runtime_toolkit 750-891_firmware +45 more products
EPSS Score: %0.12

Published: May. 25, 2021

Modified: Aug. 15, 2025
9.8

CRITICAL

CVE-2021-30188

CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow....

Affected Products : 750-831_firmware 750-852_firmware 750-880_firmware 750-881_firmware 750-889_firmware 750-829_firmware 750-882_firmware 750-885_firmware plcwinnt 750-891_firmware +46 more products
EPSS Score: %0.57

Published: May. 25, 2021

Modified: Aug. 15, 2025
9.8

CRITICAL

CVE-2021-30189

CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow....

Affected Products : 750-831_firmware 750-852_firmware 750-880_firmware 750-881_firmware 750-889_firmware 750-829_firmware 750-882_firmware 750-885_firmware 750-891_firmware 750-823_firmware +45 more products
EPSS Score: %0.57

Published: May. 25, 2021

Modified: Aug. 15, 2025
9.8

CRITICAL

CVE-2021-30190

CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control....

Affected Products : 750-831_firmware 750-852_firmware 750-880_firmware 750-881_firmware 750-889_firmware 750-829_firmware 750-882_firmware 750-885_firmware 750-891_firmware 750-823_firmware +45 more products
EPSS Score: %0.43

Published: May. 25, 2021

Modified: Aug. 15, 2025
7.5

HIGH

CVE-2021-30191

CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input....

Affected Products : 750-831_firmware 750-852_firmware 750-880_firmware 750-881_firmware 750-889_firmware 750-829_firmware 750-882_firmware 750-885_firmware 750-891_firmware 750-823_firmware +45 more products
EPSS Score: %0.41

Published: May. 25, 2021

Modified: Aug. 15, 2025
9.8

CRITICAL

CVE-2021-30192

CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check....

Affected Products : 750-831_firmware 750-852_firmware 750-880_firmware 750-881_firmware 750-889_firmware 750-829_firmware 750-882_firmware 750-885_firmware 750-891_firmware 750-823_firmware +45 more products
EPSS Score: %0.53

Published: May. 25, 2021

Modified: Aug. 15, 2025
9.8

CRITICAL

CVE-2021-30193

CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write....

Affected Products : 750-831_firmware 750-852_firmware 750-880_firmware 750-881_firmware 750-889_firmware 750-829_firmware 750-882_firmware 750-885_firmware 750-891_firmware 750-823_firmware +45 more products
EPSS Score: %0.53

Published: May. 25, 2021

Modified: Aug. 15, 2025
9.1

CRITICAL

CVE-2021-30194

CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read....

Affected Products : 750-831_firmware 750-852_firmware 750-880_firmware 750-881_firmware 750-889_firmware 750-829_firmware 750-882_firmware 750-885_firmware 750-891_firmware 750-823_firmware +45 more products
EPSS Score: %0.53

Published: May. 25, 2021

Modified: Aug. 15, 2025
7.5

HIGH

CVE-2021-30195

CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation....

Affected Products : 750-831_firmware 750-852_firmware 750-880_firmware 750-881_firmware 750-889_firmware 750-829_firmware 750-882_firmware 750-885_firmware plcwinnt runtime_toolkit +46 more products
EPSS Score: %0.42

Published: May. 25, 2021

Modified: Aug. 15, 2025
7.5

HIGH

CVE-2021-34583

Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22....

Affected Products : 750-831_firmware 750-852_firmware 750-880_firmware 750-881_firmware 750-889_firmware 750-829_firmware 750-882_firmware 750-885_firmware 750-891_firmware 750-823_firmware +45 more products
EPSS Score: %3.82

Published: Oct. 26, 2021

Modified: Aug. 15, 2025
9.1

CRITICAL

CVE-2021-34584

Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22....

Affected Products : 750-831_firmware 750-852_firmware 750-880_firmware 750-881_firmware 750-889_firmware 750-829_firmware 750-882_firmware 750-885_firmware 750-891_firmware 750-823_firmware +45 more products
EPSS Score: %0.61

Published: Oct. 26, 2021

Modified: Aug. 15, 2025
7.5

HIGH

CVE-2021-34585

In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service...

Affected Products : 750-831_firmware 750-852_firmware 750-880_firmware 750-881_firmware 750-889_firmware 750-829_firmware 750-882_firmware 750-885_firmware 750-891_firmware 750-823_firmware +45 more products
EPSS Score: %0.47

Published: Oct. 26, 2021

Modified: Aug. 15, 2025
7.5

HIGH

CVE-2021-34586

In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition....

Affected Products : 750-831_firmware 750-852_firmware 750-880_firmware 750-881_firmware 750-889_firmware 750-829_firmware 750-882_firmware 750-885_firmware 750-891_firmware 750-823_firmware +45 more products
EPSS Score: %3.29

Published: Oct. 26, 2021

Modified: Aug. 15, 2025
7.5

HIGH

CVE-2021-34593

In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communica...

Affected Products : plcwinnt runtime_toolkit 750-8202_firmware 750-8203_firmware 750-8204_firmware 750-8206_firmware 750-8207_firmware 750-8208_firmware 750-8210_firmware 750-8211_firmware +19 more products
EPSS Score: %1.60

Published: Oct. 26, 2021

Modified: Aug. 15, 2025

Showing 20 of 291741 Results

1
...
175
176
177
178
179
180
181
...
14588

Latest CVE Feed

6.4

8.8

8.2

7.5

7.8

8.2

5.3

9.8

9.8

9.8

7.5

9.8

9.8

9.1

7.5

7.5

9.1

7.5

7.5

7.5

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable