Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

5.5

MEDIUM

CVE-2024-26726

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't drop extent_map for free space inode on write error While running the CI for an unrelated change I hit the following panic with generic/648 on btrfs_holes_spacecache. asse...

Affected Products : linux_kernel
Published: Apr. 03, 2024

Modified: Jul. 10, 2025
7.8

HIGH

CVE-2025-29800

Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally....

Affected Products : autoupdate
Published: Apr. 08, 2025

Modified: Jul. 10, 2025

Vuln Type: Authorization
4.3

MEDIUM

CVE-2025-5924

The WP Firebase Push Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.0. This is due to missing or incorrect nonce validation on the wfpn_brodcast_notification_message() function. This...

Affected Products : wp_firebase_push_notification
Published: Jul. 04, 2025

Modified: Jul. 10, 2025

Vuln Type: Cross-Site Request Forgery
7.8

HIGH

CVE-2025-27743

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally....

Affected Products : system_center_operations_manager system_center_data_protection_manager system_center_virtual_machine_manager system_center_service_manager system_center_orchestrator
Published: Apr. 08, 2025

Modified: Jul. 10, 2025

Vuln Type: Authorization
5.5

MEDIUM

CVE-2025-27742

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products
Published: Apr. 08, 2025

Modified: Jul. 10, 2025

Vuln Type: Information Disclosure
7.8

HIGH

CVE-2025-27741

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_1507 windows windows_server_2012_r2 windows_server_2008_r2 +1 more products
Published: Apr. 08, 2025

Modified: Jul. 10, 2025

Vuln Type: Memory Corruption
8.8

HIGH

CVE-2025-27740

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows windows_server_2022_23h2 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 +2 more products
Published: Apr. 08, 2025

Modified: Jul. 10, 2025

Vuln Type: Authentication
8.8

HIGH

CVE-2025-5353

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials....

Affected Products : workspace_control
Published: Jun. 10, 2025

Modified: Jul. 10, 2025

Vuln Type: Cryptography
7.3

HIGH

CVE-2025-22463

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environment password....

Affected Products : workspace_control
Published: Jun. 10, 2025

Modified: Jul. 10, 2025

Vuln Type: Cryptography
8.8

HIGH

CVE-2025-22455

A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials....

Affected Products : workspace_control
Published: Jun. 10, 2025

Modified: Jul. 10, 2025

Vuln Type: Misconfiguration
7.8

HIGH

CVE-2025-27739

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 +2 more products
Published: Apr. 08, 2025

Modified: Jul. 10, 2025

Vuln Type: Memory Corruption
5.3

MEDIUM

CVE-2024-6763

Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class, HttpURI, for URI/URL parsing. The HttpURI class does insufficient validation on the authority segment of a URI. However the behaviou...

Affected Products : jetty
Published: Oct. 14, 2024

Modified: Jul. 10, 2025
7.5

HIGH

CVE-2025-29810

Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products
Published: Apr. 08, 2025

Modified: Jul. 10, 2025

Vuln Type: Authorization
9.8

CRITICAL

CVE-2025-3466

langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions. The vulnerability arises from the ability to override global functions in JavaScript, such as pa...

Affected Products : dify dify
Published: Jul. 07, 2025

Modified: Jul. 10, 2025

Vuln Type: Misconfiguration
5.5

MEDIUM

CVE-2025-24069

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally....

Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 windows_11_23h2 +4 more products
Published: Jun. 10, 2025

Modified: Jul. 10, 2025

Vuln Type: Information Disclosure
6.1

MEDIUM

CVE-2025-53377

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the cadastro_dependente_pessoa_nova.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious s...

Affected Products : wegia
Published: Jul. 07, 2025

Modified: Jul. 10, 2025

Vuln Type: Cross-Site Scripting
8.0

HIGH

CVE-2025-26646

External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network....

Affected Products : linux_kernel macos visual_studio .net windows visual_studio_2022 build_tools_for_visual_studio_2022 build_tools
Published: May. 13, 2025

Modified: Jul. 10, 2025

Vuln Type: Path Traversal
7.3

HIGH

CVE-2025-29803

Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally....

Affected Products : sql_server_management_studio .vsta_sdk visual_studio_tools_for_applications visual_studio_tools_for_applications_2019 visual_studio_tools_for_applications_2019_sdk visual_studio_tools_for_applications_2022 visual_studio_tools_for_applications_2022_sdk
Published: Apr. 12, 2025

Modified: Jul. 10, 2025

Vuln Type: Authorization
6.2

MEDIUM

CVE-2025-29819

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally....

Affected Products : windows_admin_center
Published: Apr. 08, 2025

Modified: Jul. 10, 2025

Vuln Type: Path Traversal
7.8

HIGH

CVE-2025-29812

Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025
Published: Apr. 08, 2025

Modified: Jul. 10, 2025

Vuln Type: Memory Corruption

Showing 20 of 292247 Results

1
...
589
590
591
592
593
594
595
...
14613

Browse by Apps

Latest CVE Feed

5.5

7.8

4.3

7.8

5.5

7.8

8.8

8.8

7.3

8.8

7.8

5.3

7.5

9.8

5.5

6.1

8.0

7.3

6.2

7.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable