Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

5.4

MEDIUM

CVE-2025-51656

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Link.php....

Affected Products : semcms
Published: Jul. 14, 2025

Modified: Jul. 15, 2025

Vuln Type: Injection
7.5

HIGH

CVE-2024-10714

A vulnerability in binary-husky/gpt_academic version 3.83 allows an attacker to cause a Denial of Service (DoS) by adding excessive characters to the end of a multipart boundary during file upload. This results in the server continuously processing each c...

Affected Products : gpt_academic
Published: Mar. 20, 2025

Modified: Jul. 15, 2025

Vuln Type: Denial of Service
7.5

HIGH

CVE-2024-11169

An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. The issue occurs when the fs module throws an exception while handling file uploads. An unauthenticated user can trigger this exception by sending a specially craf...

Affected Products : librechat
Published: Mar. 20, 2025

Modified: Jul. 15, 2025

Vuln Type: Denial of Service
8.8

HIGH

CVE-2025-49674

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_2022_23h2 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2 +1 more products
Published: Jul. 08, 2025

Modified: Jul. 15, 2025

Vuln Type: Memory Corruption
8.8

HIGH

CVE-2024-11170

A vulnerability in danny-avila/librechat version git 81f2936 allows for path traversal due to improper sanitization of file paths by the multer middleware. This can lead to arbitrary file write and potentially remote code execution. The issue is fixed in ...

Affected Products : librechat
Published: Mar. 20, 2025

Modified: Jul. 15, 2025

Vuln Type: Path Traversal
7.5

HIGH

CVE-2024-11171

In danny-avila/librechat version git 0c2a583, there is an improper input validation vulnerability. The application uses multer middleware for handling multipart file uploads. When using in-memory storage (the default setting for multer), there is no limit...

Affected Products : librechat
Published: Mar. 20, 2025

Modified: Jul. 15, 2025

Vuln Type: Denial of Service
7.5

HIGH

CVE-2024-11172

A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server. The middleware `checkBan` is not surrounded by a try-catch block, and an unhandled exc...

Affected Products : librechat
Published: Mar. 20, 2025

Modified: Jul. 15, 2025

Vuln Type: Denial of Service
8.8

HIGH

CVE-2025-49673

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_2022_23h2 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2 +1 more products
Published: Jul. 08, 2025

Modified: Jul. 15, 2025

Vuln Type: Memory Corruption
5.4

MEDIUM

CVE-2025-51657

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Link.php....

Affected Products : semcms
Published: Jul. 14, 2025

Modified: Jul. 15, 2025

Vuln Type: Injection
8.8

HIGH

CVE-2025-49672

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_2022_23h2 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2 +1 more products
Published: Jul. 08, 2025

Modified: Jul. 15, 2025

Vuln Type: Memory Corruption
6.5

MEDIUM

CVE-2024-31141

Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients accept configuration data for customizing behavior, and includes ConfigProvider plugins in order to manipulate ...

Affected Products : kafka
Published: Nov. 19, 2024

Modified: Jul. 15, 2025
5.4

MEDIUM

CVE-2025-51658

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_InquiryView.php....

Affected Products : semcms
Published: Jul. 14, 2025

Modified: Jul. 15, 2025

Vuln Type: Injection
6.5

MEDIUM

CVE-2025-49671

Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_2022_23h2 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2 +1 more products
Published: Jul. 08, 2025

Modified: Jul. 15, 2025

Vuln Type: Information Disclosure
6.5

MEDIUM

CVE-2025-49670

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_2022_23h2 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2 +1 more products
Published: Jul. 08, 2025

Modified: Jul. 15, 2025

Vuln Type: Memory Corruption
5.4

MEDIUM

CVE-2025-51659

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Products.php....

Affected Products : semcms
Published: Jul. 14, 2025

Modified: Jul. 15, 2025

Vuln Type: Injection
8.8

HIGH

CVE-2025-49669

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_2022_23h2 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2 +1 more products
Published: Jul. 08, 2025

Modified: Jul. 15, 2025

Vuln Type: Memory Corruption
8.1

HIGH

CVE-2024-36263

** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: all versions. As this project is retired...

Affected Products : submarine
Published: Jun. 12, 2024

Modified: Jul. 15, 2025
8.8

HIGH

CVE-2025-49668

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_2022_23h2 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2 +1 more products
Published: Jul. 08, 2025

Modified: Jul. 15, 2025

Vuln Type: Memory Corruption
7.5

HIGH

CVE-2024-36471

Import functionality is vulnerable to DNS rebinding attacks between verification and processing of the URL. Project administrators can run these imports, which could cause Allura to read from internal services and expose them. This issue affects Apache ...

Affected Products : allura
Published: Jun. 10, 2024

Modified: Jul. 15, 2025
4.3

MEDIUM

CVE-2024-46901

Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository. All ...

Affected Products : debian_linux subversion
Published: Dec. 09, 2024

Modified: Jul. 15, 2025

Showing 20 of 291946 Results

1
...
511
512
513
514
515
516
517
...
14598

Latest CVE Feed

5.4

7.5

7.5

8.8

8.8

7.5

7.5

8.8

5.4

8.8

6.5

5.4

6.5

6.5

5.4

8.8

8.1

8.8

7.5

4.3

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable