Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

8.8

HIGH

CVE-2024-50930

An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code....

Affected Products : z-wave_software_development_kit zm5202 zm5101
Published: Dec. 10, 2024

Modified: Jul. 01, 2025
6.2

MEDIUM

CVE-2024-50929

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the controller's memory, leading to a Denial of Service (DoS)....

Affected Products : z-wave_software_development_kit zgm130s037hgn zgm230sb27hgn efr32zg14p231f256gm32 efr32zg23a010f512gm40 efr32zg23a010f512gm48 efr32zg23a020f512gm40 efr32zg23a020f512gm48 efr32zg23b010f512im40 efr32zg23b010f512im48 +5 more products
Published: Dec. 10, 2024

Modified: Jul. 01, 2025
6.5

MEDIUM

CVE-2024-50928

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to change the wakeup interval of end devices in controller memory, disrupting the device's communications with the controller....

Affected Products : z-wave_software_development_kit zgm130s037hgn zgm230sb27hgn efr32zg14p231f256gm32 efr32zg23a010f512gm40 efr32zg23a010f512gm48 efr32zg23a020f512gm40 efr32zg23a020f512gm48 efr32zg23b010f512im40 efr32zg23b010f512im48 +5 more products
Published: Dec. 10, 2024

Modified: Jul. 01, 2025
6.5

MEDIUM

CVE-2024-50924

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller....

Affected Products : z-wave_software_development_kit zgm130s037hgn zgm230sb27hgn z-wave_software_development_kit efr32zg14p231f256gm32 efr32zg23a010f512gm40 efr32zg23a010f512gm48 efr32zg23a020f512gm40 efr32zg23a020f512gm48 efr32zg23b010f512im40 +6 more products
Published: Dec. 10, 2024

Modified: Jul. 01, 2025
6.5

MEDIUM

CVE-2024-50921

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service (DoS) via repeatedly sending crafted packets to the controller....

Affected Products : z-wave_software_development_kit zgm130s037hgn zgm230sb27hgn z-wave_software_development_kit efr32zg14p231f256gm32 efr32zg23a010f512gm40 efr32zg23a010f512gm48 efr32zg23a020f512gm40 efr32zg23a020f512gm48 efr32zg23b010f512im40 +6 more products
Published: Dec. 10, 2024

Modified: Jul. 01, 2025
8.8

HIGH

CVE-2024-50920

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets....

Affected Products : z-wave_software_development_kit zgm130s037hgn zgm230sb27hgn z-wave_software_development_kit efr32zg14p231f256gm32 efr32zg23a010f512gm40 efr32zg23a010f512gm48 efr32zg23a020f512gm40 efr32zg23a020f512gm48 efr32zg23b010f512im40 +6 more products
Published: Dec. 10, 2024

Modified: Jul. 01, 2025
8.0

HIGH

CVE-2024-50699

TP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 were discovered to contain weak default credentials for the Administrator account....

Affected Products : tl-wr845n_firmware tl-wr845n
Published: Dec. 10, 2024

Modified: Jul. 02, 2025
9.8

CRITICAL

CVE-2024-46442

An issue in the BYD Dilink Headunit System v3.0 to v4.0 allows attackers to bypass authentication via a bruteforce attack....

Affected Products :
Published: Dec. 10, 2024

Modified: Dec. 11, 2024
9.1

CRITICAL

CVE-2024-11773

SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements....

Affected Products : cloud_services_appliance
Published: Dec. 10, 2024

Modified: Jan. 17, 2025
9.1

CRITICAL

CVE-2024-11772

Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution....

Affected Products : cloud_services_appliance
Published: Dec. 10, 2024

Modified: Jan. 17, 2025
10.0

CRITICAL

CVE-2024-11639

An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative access...

Affected Products : cloud_services_appliance
Published: Dec. 10, 2024

Modified: Jan. 17, 2025
9.1

CRITICAL

CVE-2024-11634

Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution. (Not applicable to 9.1Rx)...

Affected Products : connect_secure policy_secure
Published: Dec. 10, 2024

Modified: Jan. 17, 2025
9.1

CRITICAL

CVE-2024-11633

Argument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

Affected Products : connect_secure
Published: Dec. 10, 2024

Modified: Jan. 17, 2025
7.1

HIGH

CVE-2024-10256

Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files....

Affected Products : endpoint_manager security_controls neurons_agent_platform neurons_for_patch_management patch_for_configuration_manager patch_software_development_kit
Published: Dec. 10, 2024

Modified: Aug. 12, 2025
5.8

MEDIUM

CVE-2024-53866

The package manager pnpm prior to version 9.15.0 seems to mishandle overrides and global cache: Overrides from one workspace leak into npm metadata saved in global cache; npm metadata from global cache affects other workspaces; and installs by default don...

Affected Products : pnpm
Published: Dec. 10, 2024

Modified: Dec. 10, 2024
8.8

HIGH

CVE-2024-53247

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7, and versions below 3.4.261 and 3.7.13 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could perform a Remo...

Affected Products : splunk splunk_secure_gateway
Published: Dec. 10, 2024

Modified: Jan. 02, 2025
7.5

HIGH

CVE-2024-53246

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206, an SPL command can potentially disclose sensitive information. The vulnerability requires the ...

Affected Products : splunk splunk_cloud_platform
Published: Dec. 10, 2024

Modified: Dec. 10, 2024
4.3

MEDIUM

CVE-2024-53245

In Splunk Enterprise versions below 9.3.0, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.1.2312.206, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles, that has a username with the same name as a role with read acc...

Affected Products : splunk splunk_cloud_platform
Published: Dec. 10, 2024

Modified: Mar. 06, 2025
5.7

MEDIUM

CVE-2024-53244

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.2.2406.107, 9.2.2403.109, and 9.1.2312.206, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could run a saved search with a...

Affected Products : splunk splunk_cloud_platform
Published: Dec. 10, 2024

Modified: Dec. 10, 2024
4.3

MEDIUM

CVE-2024-53243

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and versions below 3.2.462, 3.7.18, and 3.8.5 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could see ale...

Affected Products : splunk splunk_secure_gateway
Published: Dec. 10, 2024

Modified: Dec. 10, 2024

Showing 20 of 292048 Results

1
...
1679
1680
1681
1682
1683
1684
1685
...
14603

Latest CVE Feed

8.8

6.2

6.5

6.5

6.5

8.8

8.0

9.8

9.1

9.1

10.0

9.1

9.1

7.1

5.8

8.8

7.5

4.3

5.7

4.3

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable