Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 6.1

    MEDIUM
    CVE-2016-6319

    Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter.... Read more

    Affected Products : foreman
    • EPSS Score: %0.54
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 9.1

    CRITICAL
    CVE-2016-6254

    Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted network packet.... Read more

    Affected Products : fedora debian_linux collectd
    • EPSS Score: %13.06
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 7.5

    HIGH
    CVE-2016-5736

    The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF2; BIG-IP AAM, AFM, and PEM 11.4.x, 11... Read more

    • EPSS Score: %1.49
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 5.3

    MEDIUM
    CVE-2016-5390

    Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the view_hosts permission containing a filter to obtain sensitive network interface information via a request to API routes beneath "hosts," as demonstrated by a GET requ... Read more

    Affected Products : foreman
    • EPSS Score: %0.45
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 5.3

    MEDIUM
    CVE-2016-4995

    Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview provisioning templates, which allows remote authenticated users with permission to view some hosts to obtain sensitive host configuration information via a URL wit... Read more

    Affected Products : foreman
    • EPSS Score: %0.25
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 8.8

    HIGH
    CVE-2016-4475

    The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and location restrictions and (a) read, (b) edit, or (c) delete arbitrary organizations or lo... Read more

    Affected Products : foreman
    • EPSS Score: %0.13
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 6.0

    MEDIUM
    CVE-2016-4451

    The (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1 allow remote authenticated users with unlimited filters to bypass organization and location restrictions and read or modify data for an arbitrary organizatio... Read more

    Affected Products : foreman
    • EPSS Score: %0.26
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 6.1

    MEDIUM
    CVE-2016-3195

    Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecif... Read more

    • EPSS Score: %0.30
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 6.1

    MEDIUM
    CVE-2016-3194

    Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML ... Read more

    • EPSS Score: %0.30
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 5.4

    MEDIUM
    CVE-2016-3193

    Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x before 5.2.6, and 5.4.x before 5.4.1 and FortiAnalyzer 5.x before 5.0.13, 5.2.x before 5.2.6, and 5.4.x before 5.4.1 allows remote ... Read more

    • EPSS Score: %0.22
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 6.1

    MEDIUM
    CVE-2016-3089

    Cross-site scripting (XSS) vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter.... Read more

    Affected Products : openmeetings
    • EPSS Score: %0.87
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 8.8

    HIGH
    CVE-2016-0760

    Multiple incomplete blacklist vulnerabilities in Apache Sentry before 1.7.0 allow remote authenticated users to execute arbitrary code via the (1) reflect, (2) reflect2, or (3) java_method Hive builtin functions.... Read more

    Affected Products : sentry
    • EPSS Score: %0.71
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 10.0

    HIGH
    CVE-2015-8949

    Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01 allows attackers to have unspecified impact by leveraging a call to mysql_errno after a failure of my_login.... Read more

    Affected Products : debian_linux dbd-mysql
    • EPSS Score: %3.92
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 8.5

    HIGH
    CVE-2015-8022

    The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AAM 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.... Read more

    • EPSS Score: %0.47
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 10.0

    HIGH
    CVE-2014-9906

    Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute arbitrary code via vectors related to a lost server connection.... Read more

    Affected Products : debian_linux dbd-mysql
    • EPSS Score: %3.00
    • Published: Aug. 19, 2016
    • Modified: Apr. 12, 2025

  • 9.3

    HIGH
    CVE-2016-4654

    IOMobileFrameBuffer in Apple iOS before 9.3.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.... Read more

    Affected Products : iphone_os
    • EPSS Score: %0.36
    • Published: Aug. 18, 2016
    • Modified: Apr. 12, 2025

  • 9.0

    HIGH
    CVE-2016-1458

    The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services 4.x and 5.x before 5.3.0.3, ... Read more

    • EPSS Score: %0.20
    • Published: Aug. 18, 2016
    • Modified: Apr. 12, 2025

  • 9.0

    HIGH
    CVE-2016-1457

    The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 a... Read more

    • EPSS Score: %0.26
    • Published: Aug. 18, 2016
    • Modified: Apr. 12, 2025

  • 8.8

    HIGH
    CVE-2016-1365

    The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter, aka Bug ID CSCux15507.... Read more

    • EPSS Score: %0.98
    • Published: Aug. 18, 2016
    • Modified: Apr. 12, 2025

  • 7.8

    HIGH
    CVE-2016-6367

    Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.... Read more

    • Actively Exploited
    • EPSS Score: %23.09
    • Published: Aug. 18, 2016
    • Modified: Apr. 12, 2025
Showing 20 of 292048 Results