Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 8.8

    HIGH
    CVE-2016-1365

    The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter, aka Bug ID CSCux15507.... Read more

    • EPSS Score: %0.98
    • Published: Aug. 18, 2016
    • Modified: Apr. 12, 2025

  • 7.8

    HIGH
    CVE-2016-6367

    Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.... Read more

    • Actively Exploited
    • EPSS Score: %23.09
    • Published: Aug. 18, 2016
    • Modified: Apr. 12, 2025

  • 8.8

    HIGH
    CVE-2016-6366

    Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbit... Read more

    • Actively Exploited
    • EPSS Score: %90.09
    • Published: Aug. 18, 2016
    • Modified: Apr. 12, 2025

  • 5.8

    MEDIUM
    CVE-2016-5847

    SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security Note 2327384.... Read more

    Affected Products : sapcar sapcar_archive_tool
    • EPSS Score: %0.12
    • Published: Aug. 13, 2016
    • Modified: Apr. 12, 2025

  • 5.5

    MEDIUM
    CVE-2016-5845

    SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service (program crash) via an invalid file name in an archive file, aka SAP Security Note 2312905.... Read more

    Affected Products : sapcar
    • EPSS Score: %1.45
    • Published: Aug. 13, 2016
    • Modified: Apr. 12, 2025

  • 7.8

    HIGH
    CVE-2016-5384

    fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.... Read more

    • EPSS Score: %0.26
    • Published: Aug. 13, 2016
    • Modified: Apr. 12, 2025

  • 6.5

    MEDIUM
    CVE-2016-6214

    gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.... Read more

    Affected Products : debian_linux leap libgd
    • EPSS Score: %7.26
    • Published: Aug. 12, 2016
    • Modified: Apr. 12, 2025

  • 6.5

    MEDIUM
    CVE-2016-6207

    Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds memory write or memory consumption) via unspecified vectors.... Read more

    Affected Products : debian_linux leap php libgd
    • EPSS Score: %5.02
    • Published: Aug. 12, 2016
    • Modified: Apr. 12, 2025

  • 6.5

    MEDIUM
    CVE-2016-6161

    The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.... Read more

    Affected Products : debian_linux leap libgd
    • EPSS Score: %0.40
    • Published: Aug. 12, 2016
    • Modified: Apr. 12, 2025

  • 6.5

    MEDIUM
    CVE-2016-6132

    The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file.... Read more

    Affected Products : debian_linux leap libgd
    • EPSS Score: %2.14
    • Published: Aug. 12, 2016
    • Modified: Apr. 12, 2025

  • 8.6

    HIGH
    CVE-2016-6597

    Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail system via a request for the resource, aka an Open Reverse Proxy vulnerability.... Read more

    Affected Products : mobile_control_eas_proxy
    • EPSS Score: %0.17
    • Published: Aug. 10, 2016
    • Modified: Apr. 12, 2025

  • 8.1

    HIGH
    CVE-2016-5421

    Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors.... Read more

    • EPSS Score: %1.09
    • Published: Aug. 10, 2016
    • Modified: Apr. 12, 2025

  • 7.5

    HIGH
    CVE-2016-5420

    curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different ... Read more

    Affected Products : debian_linux leap curl libcurl
    • EPSS Score: %0.94
    • Published: Aug. 10, 2016
    • Modified: Apr. 12, 2025

  • 7.5

    HIGH
    CVE-2016-5419

    curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.... Read more

    Affected Products : debian_linux leap curl libcurl
    • EPSS Score: %2.13
    • Published: Aug. 10, 2016
    • Modified: Apr. 12, 2025

  • 9.8

    CRITICAL
    CVE-2016-5408

    Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6_8.6 in Red Hat Enterprise Linux 6 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this vulnerability e... Read more

    • EPSS Score: %5.37
    • Published: Aug. 10, 2016
    • Modified: Apr. 12, 2025

  • 3.3

    LOW
    CVE-2013-7458

    linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.... Read more

    Affected Products : debian_linux redis
    • EPSS Score: %0.03
    • Published: Aug. 10, 2016
    • Modified: Apr. 12, 2025

  • 5.3

    MEDIUM
    CVE-2016-3329

    Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the existence of files via a crafted webpage, aka "Internet Explorer Information Disclosure Vulnerability."... Read more

    Affected Products : edge internet_explorer
    • EPSS Score: %32.71
    • Published: Aug. 09, 2016
    • Modified: Apr. 12, 2025

  • 5.3

    MEDIUM
    CVE-2016-3327

    Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3326.... Read more

    Affected Products : edge internet_explorer
    • EPSS Score: %32.71
    • Published: Aug. 09, 2016
    • Modified: Apr. 12, 2025

  • 5.3

    MEDIUM
    CVE-2016-3326

    Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3327.... Read more

    Affected Products : edge internet_explorer
    • EPSS Score: %17.40
    • Published: Aug. 09, 2016
    • Modified: Apr. 12, 2025

  • 7.6

    HIGH
    CVE-2016-3322

    Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3289.... Read more

    Affected Products : edge internet_explorer
    • EPSS Score: %23.93
    • Published: Aug. 09, 2016
    • Modified: Apr. 12, 2025
Showing 20 of 291570 Results