Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

6.5

MEDIUM

CVE-2025-0277

HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content....

Affected Products : bigfix_mobile bigfix_modern_client_management
Published: Oct. 16, 2025

Modified: Oct. 21, 2025

Vuln Type: Misconfiguration
4.3

MEDIUM

CVE-2025-10545

Mattermost versions 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to properly validate guest user permissions when adding channel members which allows guest users to add any team members to their private channels via the `/api/v4/channels/{channel_id}/member...

Affected Products : mattermost_server
Published: Oct. 16, 2025

Modified: Oct. 21, 2025

Vuln Type: Authorization
5.4

MEDIUM

CVE-2025-41410

Mattermost versions 10.10.x <= 10.10.2, 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to validate email ownership during Slack import process which allows attackers to create verified user accounts with arbitrary email domains via malicious Slack import data...

Affected Products : mattermost_server
Published: Oct. 16, 2025

Modified: Oct. 21, 2025

Vuln Type: Authentication
3.7

LOW

CVE-2025-54499

Mattermost versions 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to use constant-time comparison for sensitive string comparisons which allows attackers to exploit timing oracles to perform byte-by-byte brute force attacks via response time analysis on Clou...

Affected Products : mattermost_server
Published: Oct. 16, 2025

Modified: Oct. 21, 2025

Vuln Type: Authentication
8.1

HIGH

CVE-2025-58073

Mattermost versions 10.11.x <= 10.11.1, 10.10.x <= 10.10.2, 10.5.x <= 10.5.10 fail to verify a user has permission to join a Mattermost team using the original invite token which allows any attacked to join any team on a Mattermost server regardless of re...

Affected Products : mattermost_server
Published: Oct. 16, 2025

Modified: Oct. 21, 2025

Vuln Type: Authorization
8.1

HIGH

CVE-2025-58075

Mattermost versions 10.11.x <= 10.11.1, 10.10.x <= 10.10.2, 10.5.x <= 10.5.10 fail to verify a user has permission to join a Mattermost team using the original invite token which allows any attacked to join any team on a Mattermost server regardless of re...

Affected Products : mattermost_server
Published: Oct. 16, 2025

Modified: Oct. 21, 2025

Vuln Type: Authorization
9.8

CRITICAL

CVE-2025-60307

code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can bypass login attempts....

Affected Products : computer_laboratory_system
Published: Oct. 10, 2025

Modified: Oct. 21, 2025

Vuln Type: Injection
8.8

HIGH

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations....

Affected Products : online_student_clearance_system
Published: Oct. 10, 2025

Modified: Oct. 21, 2025

Vuln Type: Authentication
5.4

MEDIUM

CVE-2025-27259

Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains....

Affected Products : network_manager
Published: Oct. 13, 2025

Modified: Oct. 21, 2025

Vuln Type: Information Disclosure
9.8

CRITICAL

CVE-2025-27258

Ericsson Network Manager (ENM) versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege....

Affected Products : network_manager
Published: Oct. 13, 2025

Modified: Oct. 21, 2025

Vuln Type: Authorization
6.9

MEDIUM

CVE-2025-55091

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ip_packet_receive() function when received an Ethernet with type set as IP but no IP data....

Affected Products : threadx_netx_duo threadx_usbx
Published: Oct. 16, 2025

Modified: Oct. 21, 2025

Vuln Type: Memory Corruption
6.9

MEDIUM

CVE-2025-55090

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() function when received an Ethernet frame with less than 4 bytes of IP packet....

Affected Products : threadx_netx_duo threadx_usbx
Published: Oct. 16, 2025

Modified: Oct. 21, 2025

Vuln Type: Memory Corruption
6.9

MEDIUM

CVE-2025-55084

In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check in_nx_secure_tls_proc_clienthello_supported_versions_extension() in the extension version field....

Affected Products : threadx_netx_duo threadx_usbx
Published: Oct. 16, 2025

Modified: Oct. 21, 2025

Vuln Type: Memory Corruption
6.9

MEDIUM

CVE-2025-55083

In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check resulting it out by two out of bound read....

Affected Products : threadx_netx_duo threadx_usbx
Published: Oct. 15, 2025

Modified: Oct. 21, 2025

Vuln Type: Memory Corruption
6.9

MEDIUM

CVE-2025-55082

In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was a potential out of bound read in _nx_secure_tls_process_clienthello() because of a missing validation of PSK length provided in the user message....

Affected Products : threadx_netx_duo threadx_usbx
Published: Oct. 15, 2025

Modified: Oct. 21, 2025

Vuln Type: Memory Corruption
6.5

MEDIUM

CVE-2025-27040

Information disclosure may occur while processing the hypervisor log....

Affected Products : csr8811_firmware immersive_home_214_platform_firmware immersive_home_216_platform_firmware immersive_home_316_platform_firmware immersive_home_318_platform_firmware ipq5010_firmware ipq5028_firmware ipq8070_firmware ipq8070a_firmware ipq8071_firmware +120 more products
Published: Oct. 09, 2025

Modified: Oct. 21, 2025

Vuln Type: Information Disclosure
8.8

HIGH

CVE-2025-27059

Memory corruption while performing SCM call....

Affected Products : immersive_home_214_platform_firmware immersive_home_216_platform_firmware immersive_home_316_platform_firmware immersive_home_318_platform_firmware ipq5010_firmware ipq5028_firmware qcn6023_firmware qcn6024_firmware qcn6100_firmware qcn6102_firmware +40 more products
Published: Oct. 09, 2025

Modified: Oct. 21, 2025

Vuln Type: Memory Corruption
8.8

HIGH

CVE-2025-27060

Memory corruption while performing SCM call with malformed inputs....

Affected Products : immersive_home_214_platform_firmware immersive_home_216_platform_firmware immersive_home_316_platform_firmware immersive_home_318_platform_firmware ipq5010_firmware ipq5028_firmware qcn6023_firmware qcn6024_firmware qcn6100_firmware qcn6102_firmware +40 more products
Published: Oct. 09, 2025

Modified: Oct. 21, 2025

Vuln Type: Memory Corruption
7.1

HIGH

CVE-2025-47342

Transient DOS may occur when multi-profile concurrency arises with QHS enabled....

Affected Products : qcc7225_firmware qcc7226_firmware qcc7228_firmware qcc7225 qcc7226 qcc7228 qcc5161_firmware qcc5161 s3_gen_2_sound_platform_firmware s3_gen_2_sound_platform +6 more products
Published: Oct. 09, 2025

Modified: Oct. 21, 2025

Vuln Type: Denial of Service
7.8

HIGH

CVE-2025-47347

Memory corruption while processing control commands in the virtual memory management interface....

Affected Products : qam8295p_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware sa8145p_firmware sa8150p_firmware sa8155p_firmware +64 more products
Published: Oct. 09, 2025

Modified: Oct. 21, 2025

Vuln Type: Memory Corruption

Showing 20 of 3872 Results

Browse by Apps

Latest CVE Feed

6.5

4.3

5.4

3.7

8.1

8.1

9.8

8.8

5.4

9.8

6.9

6.9

6.9

6.9

6.9

6.5

8.8

8.8

7.1

7.8

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable