Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

6.1

MEDIUM

CVE-2017-12646

XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address....

Affected Products : liferay_portal
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
6.1

MEDIUM

CVE-2017-12645

XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId....

Affected Products : liferay_portal
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
9.8

CRITICAL

CVE-2017-12567

SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a Service 7.0 through 7.2....

Affected Products : kace_systems_management_appliance kace_asset_management_appliance k1000_as_a_service
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
6.1

MEDIUM

CVE-2016-10404

XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted redirect field to modules/apps/foundation/frontend-js/frontend-js-spa-web/src/main/resources/META-INF/resources/init.jsp....

Affected Products : liferay_portal
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
7.5

HIGH

CVE-2017-9801

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers....

Affected Products : commons_email
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
8.8

HIGH

CVE-2017-12644

ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c....

Affected Products : imagemagick
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
7.1

HIGH

CVE-2017-12643

ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c....

Affected Products : debian_linux imagemagick
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
8.8

HIGH

CVE-2017-12642

ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c....

Affected Products : imagemagick
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
8.8

HIGH

CVE-2017-12641

ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\png.c....

Affected Products : imagemagick
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
8.8

HIGH

CVE-2017-12640

ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c....

Affected Products : debian_linux imagemagick
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
9.0

HIGH

CVE-2017-12479

It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR environment variable during a web session to elevate an existing low-privilege user to root privileges. A remote attacker with existing lo...

Affected Products : unitrends_backup
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
10.0

HIGH

CVE-2017-12478

It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated. A remote attacker could use this flaw to bypass authentication and execute arbitrary commands ...

Affected Products : unitrends_backup
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
10.0

HIGH

CVE-2017-12477

It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands wit...

Affected Products : unitrends_backup
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
7.2

HIGH

CVE-2017-9647

A Stack-Based Buffer Overflow issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced between 2009-2010, Ford a limited number of P-HEV vehicles, Infiniti 2013 JX35, Infiniti 2014-2016 QX60, Infiniti ...

Affected Products : s-gold_2_pmb_8876
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
8.8

HIGH

CVE-2017-9633

An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced between 2009-2010, Ford a limited number of P-HEV vehicles, Infiniti ...

Affected Products : s-gold_2_pmb_8876
Published: Aug. 07, 2017

Modified: May. 06, 2025
9.8

CRITICAL

CVE-2017-9632

A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, Lase...

Affected Products : laserwash_g5_firmware laserwash_g5_s_firmware laserwash_m5_firmware laserwash_360_firmware laserwash_360_plus_firmware laserwash_autoxpress_firmware laserwash_autoxpress_plus_firmware laserjet_firmware protouch_tandem_firmware protouch_icon_firmware +12 more products
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
9.4

CRITICAL

CVE-2017-9630

An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpress and AutoExpress Plus, all versions, LaserJet, all ve...

Affected Products : laserwash_g5_firmware laserwash_g5_s_firmware laserwash_m5_firmware laserwash_360_firmware laserwash_360_plus_firmware laserwash_autoxpress_firmware laserwash_autoxpress_plus_firmware laserjet_firmware protouch_tandem_firmware protouch_icon_firmware +12 more products
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
6.3

MEDIUM

CVE-2017-7936

A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX 6Quad, i.MX 6DualPlus, i.MX 6QuadPlus, Vybrid VF3xx, Vybrid VF5xx, and Vybrid...

Affected Products : i.mx_6dual_firmware i.mx_6duallite_firmware i.mx_6dualplus_firmware i.mx_6quad_firmware i.mx_6quadplus_firmware i.mx_6solo_firmware i.mx_6sololite_firmware i.mx_6solox_firmware i.mx_6ull_firmware i.mx_6ultralite_firmware +44 more products
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
6.0

MEDIUM

CVE-2017-7932

An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, Vybrid VF6xx, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6DualLite, i.MX 6SoloX, i.MX 6Dual, i.MX ...

Affected Products : i.mx_6dual_firmware i.mx_6duallite_firmware i.mx_6dualplus_firmware i.mx_6quad_firmware i.mx_6quadplus_firmware i.mx_6solo_firmware i.mx_6sololite_firmware i.mx_6solox_firmware i.mx_6ull_firmware i.mx_6ultralite_firmware +50 more products
Published: Aug. 07, 2017

Modified: Apr. 20, 2025
10.0

CRITICAL

CVE-2017-7928

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while con...

Affected Products : sel-3620_firmware sel-3622_firmware sel-3620 sel-3622
Published: Aug. 07, 2017

Modified: Apr. 20, 2025

Showing 20 of 294860 Results

Browse by Apps

Latest CVE Feed

6.1

6.1

9.8

6.1

7.5

8.8

7.1

8.8

8.8

8.8

9.0

10.0

10.0

7.2

8.8

9.8

9.4

6.3

6.0

10.0

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable