Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 6.1

    MEDIUM
    CVE-2025-0175

    A vulnerability was found in code-projects Online Shop 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument name/details leads to cross site scripting. The attack can be ... Read more

    Affected Products : online_shop
    • Published: Jan. 03, 2025
    • Modified: Feb. 25, 2025
    • Vuln Type: Cross-Site Scripting

  • 6.5

    MEDIUM
    CVE-2025-0174

    A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /user/search_result2.php of the component Parameter Handler. The manipulation of th... Read more

    • Published: Jan. 03, 2025
    • Modified: Feb. 25, 2025
    • Vuln Type: Injection

  • 7.8

    HIGH
    CVE-2024-43769

    In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privile... Read more

    Affected Products : android
    • Published: Jan. 03, 2025
    • Modified: Apr. 21, 2025
    • Vuln Type: Authorization

  • 7.8

    HIGH
    CVE-2024-43768

    In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.... Read more

    Affected Products : android
    • Published: Jan. 03, 2025
    • Modified: Apr. 21, 2025
    • Vuln Type: Memory Corruption

  • 8.8

    HIGH
    CVE-2024-43767

    In prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp, there is a possible heap overflow due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for explo... Read more

    Affected Products : android
    • Published: Jan. 03, 2025
    • Modified: Apr. 21, 2025
    • Vuln Type: Memory Corruption

  • 7.8

    HIGH
    CVE-2024-43764

    In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.... Read more

    Affected Products : android
    • Published: Jan. 03, 2025
    • Modified: Jul. 03, 2025

  • 7.8

    HIGH
    CVE-2024-43762

    In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede... Read more

    Affected Products : android
    • Published: Jan. 03, 2025
    • Modified: Jul. 03, 2025
    • Vuln Type: Authorization

  • 7.8

    HIGH
    CVE-2024-43097

    In resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.... Read more

    Affected Products : android
    • Published: Jan. 03, 2025
    • Modified: Jul. 03, 2025
    • Vuln Type: Memory Corruption

  • 7.8

    HIGH
    CVE-2024-43077

    In DevmemValidateFlags of devicemem_server.c , there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitati... Read more

    Affected Products : android
    • Published: Jan. 03, 2025
    • Modified: Jul. 03, 2025
    • Vuln Type: Memory Corruption

  • 5.9

    MEDIUM
    CVE-2024-8447

    A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or han... Read more

    Affected Products : undertow
    • Published: Jan. 02, 2025
    • Modified: May. 14, 2025
    • Vuln Type: Denial of Service

  • 4.7

    MEDIUM
    CVE-2024-48197

    Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface.... Read more

    Affected Products :
    • Published: Jan. 02, 2025
    • Modified: Jan. 02, 2025
    • Vuln Type: Cross-Site Scripting

  • 7.5

    HIGH
    CVE-2025-0173

    A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /orders/view_order.php. The manipulation of the argument id leads to sql injection. The attack... Read more

    Affected Products : online_eyewear_shop
    • Published: Jan. 02, 2025
    • Modified: Feb. 10, 2025
    • Vuln Type: Injection

  • 7.6

    HIGH
    CVE-2024-56199

    phpMyFAQ is an open source FAQ web application. Starting no later than version 3.2.10 and prior to version 4.0.2, an attacker can inject malicious HTML content into the FAQ editor at `http[:]//localhost/admin/index[.]php?action=editentry`, resulting in a ... Read more

    Affected Products : phpmyfaq
    • Published: Jan. 02, 2025
    • Modified: Aug. 14, 2025
    • Vuln Type: Denial of Service

  • 6.3

    MEDIUM
    CVE-2024-11717

    Tokens in CTFd used for account activation and password resetting can be used interchangeably for these operations. When used, they are sent to the server as a GET parameter and they are not single use, which means, that during token expiration time an on... Read more

    Affected Products : ctfd
    • Published: Jan. 02, 2025
    • Modified: Jan. 02, 2025
    • Vuln Type: Authentication

  • 5.3

    MEDIUM
    CVE-2024-11716

    While assignment of a user to a team (bracket) in CTFd should be possible only once, at the registration, a flaw in logic implementation allows an authenticated user to reset it's bracket and then pick a new one, joining another team while a competition ... Read more

    Affected Products : ctfd
    • Published: Jan. 02, 2025
    • Modified: Jan. 02, 2025
    • Vuln Type: Authorization

  • 7.5

    HIGH
    CVE-2025-0172

    A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deleteroom.php. The manipulation of the argument id leads to sql injection. The attac... Read more

    Affected Products : chat_system chat_system chat_system
    • Published: Jan. 02, 2025
    • Modified: Apr. 03, 2025
    • Vuln Type: Injection

  • 8.5

    HIGH
    CVE-2024-9950

    A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory.... Read more

    Affected Products : secureconnector
    • Published: Jan. 02, 2025
    • Modified: Jan. 02, 2025
    • Vuln Type: Misconfiguration

  • 5.5

    MEDIUM
    CVE-2024-56414

    Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.... Read more

    Affected Products : cyber_protect
    • Published: Jan. 02, 2025
    • Modified: Jan. 02, 2025
    • Vuln Type: Cryptography

  • 6.1

    MEDIUM
    CVE-2024-56413

    Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.... Read more

    Affected Products : cyber_protect
    • Published: Jan. 02, 2025
    • Modified: Jan. 02, 2025
    • Vuln Type: Authentication

  • 7.8

    HIGH
    CVE-2024-55543

    Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.... Read more

    Affected Products : cyber_protect
    • Published: Jan. 02, 2025
    • Modified: Jan. 02, 2025
    • Vuln Type: Misconfiguration
Showing 20 of 293592 Results