Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 6.5

    MEDIUM
    CVE-2024-5166

    An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model.... Read more

    Affected Products : looker
    • Published: May. 22, 2024
    • Modified: Jul. 22, 2025

  • 9.8

    CRITICAL
    CVE-2024-5436

    Type confusion in Snapchat LensCore could lead to denial of service or arbitrary code execution prior to version 12.88. We recommend upgrading to version 12.88 or above.... Read more

    Affected Products : snapchat_lenscore
    • Published: May. 31, 2024
    • Modified: Jul. 22, 2025

  • 7.5

    HIGH
    CVE-2023-6349

    A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above... Read more

    Affected Products : libvpx
    • Published: May. 27, 2024
    • Modified: Jul. 22, 2025

  • 7.8

    HIGH
    CVE-2024-8375

    There exists a use after free vulnerability in Reverb. Reverb supports the VARIANT datatype, which is supposed to represent an arbitrary object in C++. When a tensor proto of type VARIANT is unpacked, memory is first allocated to store the entire tensor, ... Read more

    Affected Products : reverb
    • Published: Sep. 19, 2024
    • Modified: Jul. 22, 2025

  • 6.3

    MEDIUM
    CVE-2024-7246

    It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients see failed requests. It's also possible to use this vulnerability to leak other clients HTTP header keys,... Read more

    Affected Products : grpc
    • Published: Aug. 06, 2024
    • Modified: Jul. 22, 2025

  • 7.5

    HIGH
    CVE-2025-54073

    mcp-package-docs is an MCP (Model Context Protocol) server that provides LLMs with efficient access to package documentation across multiple programming languages and language server protocol (LSP) capabilities. A command injection vulnerability exists in... Read more

    Affected Products :
    • Published: Jul. 18, 2025
    • Modified: Jul. 22, 2025
    • Vuln Type: Injection

  • 5.4

    MEDIUM
    CVE-2024-20346

    A vulnerability in the web-based management interface of Cisco AppDynamics Controller could allow an authenticated, remote attacker to perform a reflected cross-site scripting (XSS) attack against a user of the interface of an affected device. This vul... Read more

    Affected Products : appdynamics_controller appdynamics
    • Published: Mar. 06, 2024
    • Modified: Jul. 22, 2025

  • 9.1

    CRITICAL
    CVE-2024-5197

    There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the re... Read more

    Affected Products : debian_linux libvpx
    • Published: Jun. 03, 2024
    • Modified: Jul. 22, 2025

  • 8.8

    HIGH
    CVE-2018-1000216

    Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in cJSON library that can result in Possible crash or RCE. This attack appear to be exploitable via Attacker must be able to force victim to print JSON data, dependi... Read more

    Affected Products : cjson cjson
    • Published: Aug. 20, 2018
    • Modified: Jul. 22, 2025

  • 9.8

    CRITICAL
    CVE-2016-10749

    parse_string in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character.... Read more

    Affected Products : cjson cjson
    • Published: Apr. 29, 2019
    • Modified: Jul. 22, 2025

  • 9.8

    CRITICAL
    CVE-2019-11834

    cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal.... Read more

    • Published: May. 09, 2019
    • Modified: Jul. 22, 2025

  • 9.8

    CRITICAL
    CVE-2018-1000217

    Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in cJSON library that can result in Possible crash, corruption of data or even RCE. This attack appear to be exploitable via Depends on how application uses cJSON... Read more

    Affected Products : cjson cjson
    • Published: Aug. 20, 2018
    • Modified: Jul. 22, 2025

  • 7.5

    HIGH
    CVE-2019-1010239

    DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. The impact is: Null dereference, so attack can cause denial of service. The component is: cJSON_GetObjectItemCaseSensitive() function. The attack vector is:... Read more

    • Published: Jul. 19, 2019
    • Modified: Jul. 22, 2025

  • 9.8

    CRITICAL
    CVE-2019-11835

    cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments.... Read more

    • Published: May. 09, 2019
    • Modified: Jul. 22, 2025

  • 7.5

    HIGH
    CVE-2018-1000215

    Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack appear to be exploitable via If the attacker can force the data to be printed and the system is in low me... Read more

    Affected Products : cjson cjson
    • Published: Aug. 20, 2018
    • Modified: Jul. 22, 2025

  • 7.5

    HIGH
    CVE-2023-50472

    cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.... Read more

    Affected Products : cjson cjson
    • Published: Dec. 14, 2023
    • Modified: Jul. 22, 2025

  • 7.5

    HIGH
    CVE-2023-50471

    cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c.... Read more

    Affected Products : cjson cjson
    • Published: Dec. 14, 2023
    • Modified: Jul. 22, 2025

  • 2.7

    LOW
    CVE-2025-24474

    An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, 7.2 all versions, 7.0 all versions, 6.4 all versions; FortiManager Cloud 7.4.1 through... Read more

    • Published: Jul. 08, 2025
    • Modified: Jul. 22, 2025
    • Vuln Type: Injection

  • 7.3

    HIGH
    CVE-2024-20338

    A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to the use of an uncontrolled search path eleme... Read more

    Affected Products : linux_kernel secure_client
    • Published: Mar. 06, 2024
    • Modified: Jul. 22, 2025

  • 7.8

    HIGH
    CVE-2025-20206

    A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the Secure Firewall Posture Engine, formerly HostSca... Read more

    Affected Products : windows secure_client
    • Published: Mar. 05, 2025
    • Modified: Jul. 22, 2025
    • Vuln Type: Misconfiguration
Showing 20 of 293334 Results