Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

6.5

MEDIUM

CVE-2025-0571

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is required ...

Affected Products : sante_pacs_server
Published: Jan. 30, 2025

Modified: Feb. 19, 2025

Vuln Type: Memory Corruption
6.5

MEDIUM

CVE-2025-0570

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is required ...

Affected Products : sante_pacs_server
Published: Jan. 30, 2025

Modified: Feb. 19, 2025

Vuln Type: Memory Corruption
7.5

HIGH

CVE-2025-0569

Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to expl...

Affected Products : sante_pacs_server
Published: Jan. 30, 2025

Modified: Feb. 19, 2025

Vuln Type: Memory Corruption
7.5

HIGH

CVE-2025-0568

Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to expl...

Affected Products : sante_pacs_server
Published: Jan. 30, 2025

Modified: Feb. 19, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2024-11611

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is require...

Affected Products : c-more_ea9-t6cl-r_firmware c-more_ea9-t6cl_firmware c-more_ea9-t8cl_firmware c-more_ea9-t10cl_firmware c-more_ea9-t10wcl_firmware c-more_ea9-t12cl_firmware c-more_ea9-t15cl-r_firmware c-more_ea9-t15cl_firmware c-more_ea9-rhmi_firmware c-more_ea9-t6cl-r +8 more products
Published: Jan. 30, 2025

Modified: Aug. 12, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2024-11610

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is require...

Affected Products : c-more_ea9-t6cl-r_firmware c-more_ea9-t6cl_firmware c-more_ea9-t8cl_firmware c-more_ea9-t10cl_firmware c-more_ea9-t10wcl_firmware c-more_ea9-t12cl_firmware c-more_ea9-t15cl-r_firmware c-more_ea9-t15cl_firmware c-more_ea9-rhmi_firmware c-more_ea9-t6cl-r +8 more products
Published: Jan. 30, 2025

Modified: Aug. 12, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2024-11609

AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction ...

Affected Products : c-more_ea9-t6cl-r_firmware c-more_ea9-t6cl_firmware c-more_ea9-t8cl_firmware c-more_ea9-t10cl_firmware c-more_ea9-t10wcl_firmware c-more_ea9-t12cl_firmware c-more_ea9-t15cl-r_firmware c-more_ea9-t15cl_firmware c-more_ea9-rhmi_firmware c-more_ea9-t6cl-r +8 more products
Published: Jan. 30, 2025

Modified: Aug. 12, 2025

Vuln Type: Memory Corruption
8.6

HIGH

CVE-2025-24802

Plonky2 is a SNARK implementation based on techniques from PLONK and FRI. Lookup tables, whose length is not divisible by 26 = floor(num_routed_wires / 3) always include the 0 -> 0 input-output pair. Thus a malicious prover can always prove that f(0) = 0 ...

Affected Products :
Published: Jan. 30, 2025

Modified: Jan. 30, 2025

Vuln Type: Misconfiguration
9.8

CRITICAL

CVE-2025-0147

Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to conduct an escalation of privilege via network access....

Affected Products : meeting_software_development_kit video_software_development_kit workplace_desktop
Published: Jan. 30, 2025

Modified: Aug. 01, 2025

Vuln Type: Authorization
5.0

MEDIUM

CVE-2025-0146

Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access....

Affected Products : rooms meeting_software_development_kit video_software_development_kit workplace_desktop rooms_controller
Published: Jan. 30, 2025

Modified: Aug. 01, 2025

Vuln Type: Denial of Service
7.8

HIGH

CVE-2025-0145

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access....

Affected Products : rooms meeting_software_development_kit video_software_development_kit workplace_desktop rooms_controller workplace_virtual_desktop_infrastructure
Published: Jan. 30, 2025

Modified: Aug. 20, 2025

Vuln Type: Authorization
6.5

MEDIUM

CVE-2025-0144

Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via network access....

Affected Products : rooms meeting_software_development_kit video_software_development_kit workplace_desktop rooms_controller workplace workplace_virtual_desktop_infrastructure
Published: Jan. 30, 2025

Modified: Aug. 20, 2025

Vuln Type: Memory Corruption
6.5

MEDIUM

CVE-2025-0143

Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct a denial of service via network access....

Affected Products : meeting_software_development_kit video_software_development_kit workplace_desktop
Published: Jan. 30, 2025

Modified: Jul. 31, 2025

Vuln Type: Denial of Service
4.3

MEDIUM

CVE-2025-0142

Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authenticated user to conduct a disclosure of information via network access....

Affected Products :
Published: Jan. 30, 2025

Modified: Jan. 30, 2025

Vuln Type: Information Disclosure
6.9

MEDIUM

CVE-2024-10604

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances...

Affected Products : fuchsia
Published: Jan. 30, 2025

Modified: Jul. 29, 2025

Vuln Type: Cryptography
6.3

MEDIUM

CVE-2024-10603

Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances....

Affected Products : gvisor
Published: Jan. 30, 2025

Modified: Jul. 29, 2025

Vuln Type: Misconfiguration
6.3

MEDIUM

CVE-2024-10026

A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances....

Affected Products : gvisor
Published: Jan. 30, 2025

Modified: Jul. 31, 2025

Vuln Type: Cryptography
8.9

HIGH

CVE-2025-24507

This vulnerability allows appliance compromise at boot time....

Affected Products : symantec_privileged_access_management
Published: Jan. 30, 2025

Modified: Feb. 05, 2025

Vuln Type: Authentication
5.3

MEDIUM

CVE-2025-24506

A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types....

Affected Products : symantec_privileged_access_management
Published: Jan. 30, 2025

Modified: Feb. 05, 2025

Vuln Type: Authentication
8.8

HIGH

CVE-2025-24505

This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file....

Affected Products : symantec_privileged_access_management
Published: Jan. 30, 2025

Modified: Feb. 05, 2025

Vuln Type: Authentication

Showing 20 of 291293 Results

1
...
1320
1321
1322
1323
1324
1325
1326
...
14565

Latest CVE Feed

6.5

6.5

7.5

7.5

7.8

7.8

7.8

8.6

9.8

5.0

7.8

6.5

6.5

4.3

6.9

6.3

6.3

8.9

5.3

8.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable