Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

5.3

MEDIUM

CVE-2016-1670

Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a rend...

Affected Products : debian_linux chrome opensuse
Published: May. 14, 2016

Modified: Apr. 12, 2025
9.3

HIGH

CVE-2016-1669

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overf...

Affected Products : ubuntu_linux debian_linux chrome opensuse node.js v8
Published: May. 14, 2016

Modified: Apr. 12, 2025
8.8

HIGH

CVE-2016-1668

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a...

Affected Products : debian_linux chrome opensuse
Published: May. 14, 2016

Modified: Apr. 12, 2025
8.8

HIGH

CVE-2016-1667

The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attacke...

Affected Products : debian_linux chrome opensuse
Published: May. 14, 2016

Modified: Apr. 12, 2025
9.8

CRITICAL

CVE-2016-1666

Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors....

Affected Products : chrome opensuse enterprise_linux_server_supplementary enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary_eus enterprise_linux_workstation_supplementary
Published: May. 14, 2016

Modified: Apr. 12, 2025
6.5

MEDIUM

CVE-2016-1665

The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code....

Affected Products : chrome opensuse enterprise_linux_server_supplementary enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary_eus enterprise_linux_workstation_supplementary
Published: May. 14, 2016

Modified: Apr. 12, 2025
4.3

MEDIUM

CVE-2016-1664

The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers to ...

Affected Products : chrome opensuse enterprise_linux_server_supplementary enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary_eus enterprise_linux_workstation_supplementary
Published: May. 14, 2016

Modified: Apr. 12, 2025
8.8

HIGH

CVE-2016-1663

The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows r...

Affected Products : chrome opensuse enterprise_linux_server_supplementary enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary_eus enterprise_linux_workstation_supplementary
Published: May. 14, 2016

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2016-1662

extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unsp...

Affected Products : chrome opensuse enterprise_linux_server_supplementary enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary_eus enterprise_linux_workstation_supplementary
Published: May. 14, 2016

Modified: Apr. 12, 2025
8.3

HIGH

CVE-2016-1661

Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or pos...

Affected Products : chrome opensuse enterprise_linux_server_supplementary enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary_eus enterprise_linux_workstation_supplementary
Published: May. 14, 2016

Modified: Apr. 12, 2025
8.8

HIGH

CVE-2016-1660

Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other...

Affected Products : chrome opensuse enterprise_linux_server_supplementary enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary_eus enterprise_linux_workstation_supplementary
Published: May. 14, 2016

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2016-4325

Lantronix xPrintServer devices with firmware before 5.0.1-65 have hardcoded credentials, which allows remote attackers to obtain root access via unspecified vectors....

Affected Products : xprintserver_firmware
Published: May. 14, 2016

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2016-2298

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext information via unspecified vectors....

Affected Products : web\'log_basic_100 web\'log_light web\'log_pro web\'log_pro_unlimited
Published: May. 14, 2016

Modified: Apr. 12, 2025
9.7

HIGH

CVE-2016-2297

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an "access command shell-like feature."...

Affected Products : web\'log_basic_100 web\'log_light web\'log_pro web\'log_pro_unlimited
Published: May. 14, 2016

Modified: Apr. 12, 2025
9.4

CRITICAL

CVE-2016-2296

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors....

Affected Products : web\'log_basic_100 web\'log_light web\'log_pro web\'log_pro_unlimited
Published: May. 14, 2016

Modified: Apr. 12, 2025
5.4

MEDIUM

CVE-2016-1207

Cross-site scripting (XSS) vulnerability on I-O DATA DEVICE WN-G300R devices with firmware 1.12 and earlier, WN-G300R2 devices with firmware 1.12 and earlier, and WN-G300R3 devices with firmware 1.01 and earlier allows remote authenticated users to inject...

Affected Products : wn-g300r3_firmware wn-g300r2_firmware wn-g300r_firmware wn-g300r2 wn-g300r3 wn-g300r
Published: May. 14, 2016

Modified: Apr. 12, 2025
4.3

MEDIUM

CVE-2016-1206

The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attackers to obtain network access via a brute-force attack....

Affected Products : wn-gdn\/r3_firmware wn-gdn\/r3 wn-gdn\/r3-c wn-gdn\/r3-s wn-gdn\/r3-u
Published: May. 14, 2016

Modified: Apr. 12, 2025
5.5

MEDIUM

CVE-2016-2016

Base-VxFS-50 B.05.00.01 through B.05.00.02, Base-VxFS-501 B.05.01.0 through B.05.01.03, and Base-VxFS-51 B.05.10.00 through B.05.10.02 on HPE HP-UX 11iv3 with VxFS 5.0, VxFS 5.0.1, and VxFS 5.1SP1 mishandles ACL inheritance for default:class: entries, def...

Affected Products : hp-ux base-vxfs-50 base-vxfs-501 base-vxfs-51
Published: May. 14, 2016

Modified: Apr. 12, 2025
7.1

HIGH

CVE-2016-2015

HPE System Management Homepage before 7.5.5 allows local users to obtain sensitive information or modify data via unspecified vectors....

Affected Products : system_management_homepage
Published: May. 14, 2016

Modified: Apr. 12, 2025
9.8

CRITICAL

CVE-2016-1209

The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized values in a POST request....

Affected Products : ninja_forms
Published: May. 14, 2016

Modified: Apr. 12, 2025

Showing 20 of 293414 Results

Browse by Apps

Latest CVE Feed

5.3

9.3

8.8

8.8

9.8

6.5

4.3

8.8

10.0

8.3

8.8

10.0

10.0

9.7

9.4

5.4

4.3

5.5

7.1

9.8

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable