Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

6.5

MEDIUM

CVE-2016-2291

Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allow remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors....

Affected Products : proface_gp-pro_ex_ex-ed proface_gp-pro_ex_pfxexedls proface_gp-pro_ex_pfxexedv proface_gp-pro_ex_pfxexgrpls
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
8.8

HIGH

CVE-2016-2290

Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrary code via unspecified vectors....

Affected Products : proface_gp-pro_ex_ex-ed proface_gp-pro_ex_pfxexedls proface_gp-pro_ex_pfxexedv proface_gp-pro_ex_pfxexgrpls
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
6.9

MEDIUM

CVE-2016-2277

IAB.exe in Rockwell Automation Integrated Architecture Builder (IAB) before 9.6.0.8 and 9.7.x before 9.7.0.2 allows remote attackers to execute arbitrary code via a crafted project file....

Affected Products : integrated_architecture_builder
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
7.5

HIGH

CVE-2016-2272

Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie....

Affected Products : eg2_web_control
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
7.1

HIGH

CVE-2016-1346

The kernel in Cisco TelePresence Server 3.0 through 4.2(4.18) on Mobility Services Engine (MSE) 8710 devices allows remote attackers to cause a denial of service (panic and reboot) via a crafted sequence of IPv6 packets, aka Bug ID CSCuu46673....

Affected Products : jr6150_firmware emc_powerscale_onefs x14j_firmware gs1900-10hp_firmware telepresence_server_software keymouse_firmware telepresence_server_mse_8710
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2016-1313

Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to obtain root access via unspecified vectors, aka Bug ID ...

Affected Products : ucs_invicta_c3124sa_appliance
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
9.8

CRITICAL

CVE-2016-1291

Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192....

Affected Products : opensolaris prime_infrastructure evolved_programmable_network_manager
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
8.1

HIGH

CVE-2016-1290

The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an HTTP request that is inconsistent wi...

Affected Products : opensolaris prime_infrastructure evolved_programmable_network_manager
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
8.8

HIGH

CVE-2016-1174

Cross-site request forgery (CSRF) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators....

Affected Products : casebook_plugin
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
6.1

MEDIUM

CVE-2016-1173

Cross-site scripting (XSS) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors....

Affected Products : casebook_plugin
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
8.8

HIGH

CVE-2016-1172

Cross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators....

Affected Products : casebook_plugin
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
6.1

MEDIUM

CVE-2016-1171

Cross-site scripting (XSS) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors....

Affected Products : casebook_plugin
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
8.8

HIGH

CVE-2016-1170

Cross-site request forgery (CSRF) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators....

Affected Products : casebook_plugin
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
6.1

MEDIUM

CVE-2016-1169

Cross-site scripting (XSS) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors....

Affected Products : casebook_plugin
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
7.5

HIGH

CVE-2016-0871

Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the configuration file, and consequently discover credentials, via a direct request....

Affected Products : eg2_web_control
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
9.1

CRITICAL

CVE-2015-7921

The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging kn...

Affected Products : proface_gp-pro_ex_ex-ed proface_gp-pro_ex_pfxexedls proface_gp-pro_ex_pfxexedv proface_gp-pro_ex_pfxexgrpls
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
7.8

HIGH

CVE-2015-6313

Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and Virtual Machine (VM) devices allows remote attackers to cause a denial of service (memory consumption or device rel...

Affected Products : opensolaris gs1900-10hp_firmware telepresence_server_software keymouse_firmware telepresence_server_7010 telepresence_server_mse_8710 telepresence_server_on_multiparty_media_310 telepresence_server_on_multiparty_media_320 telepresence_server_on_virtual_machine telepresence_server_on_multiparty_media_820
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
7.8

HIGH

CVE-2015-6312

Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine (MSE) 8710, Multiparty Media 310 and 320, and Virtual Machine (VM) devices allows remote attackers to cause a denial of service (device reload) via malformed STUN packets, aka Bug ID CSCuv013...

Affected Products : jr6150_firmware emc_powerscale_onefs gs1900-10hp_firmware telepresence_server_software keymouse_firmware telepresence_server_7010 telepresence_server_mse_8710 telepresence_server_on_multiparty_media_310 telepresence_server_on_multiparty_media_320 telepresence_server_on_virtual_machine
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
6.1

MEDIUM

CVE-2016-3969

Cross-site scripting (XSS) vulnerability in McAfee Email Gateway (MEG) 7.6.x before 7.6.404, when File Filtering is enabled with the action set to ESERVICES:REPLACE, allows remote attackers to inject arbitrary web script or HTML via an attachment in a blo...

Affected Products : email_gateway
Published: Apr. 06, 2016

Modified: Apr. 12, 2025
6.1

MEDIUM

CVE-2016-3968

Multiple cross-site scripting (XSS) vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance with firmware 10.6.3 MR-1 build 503, CR35iNG UTM appliance with firmware 10.6.2 MR-1 build 383, and CR35iNG UTM appliance with firmware 10.6.2 Build 378 allow re...

Affected Products : cyberoam_cr100ing_utm_firmware cyberoam_cr35ing_utm_firmware cyberoam_cr100ing_utm cyberoam_cr35ing_utm
Published: Apr. 06, 2016

Modified: Apr. 12, 2025

Showing 20 of 293186 Results

Browse by Apps

Latest CVE Feed

6.5

8.8

6.9

7.5

7.1

10.0

9.8

8.1

8.8

6.1

8.8

6.1

8.8

6.1

7.5

9.1

7.8

7.8

6.1

6.1

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable