Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 7.5

    HIGH
    CVE-2025-10709

    A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform 1.0. Affected by this issue is some unknown functionality of the file /history/historyDownload.do;otheruserLogin.do;getfile. The manipulation of the argument fileName re... Read more

    Affected Products : water_conservancy_informatization
    • Published: Sep. 19, 2025
    • Modified: Oct. 03, 2025
    • Vuln Type: Path Traversal
  • 7.5

    HIGH
    CVE-2025-10708

    A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform 1.0. Affected by this vulnerability is an unknown functionality of the file /history/historyDownload.do;usrlogout.do. The manipulation of the argument file... Read more

    Affected Products : water_conservancy_informatization
    • Published: Sep. 19, 2025
    • Modified: Oct. 03, 2025
    • Vuln Type: Path Traversal
  • 8.8

    HIGH
    CVE-2025-10707

    A weakness has been identified in JeecgBoot up to 3.8.2. Affected is an unknown function of the file /message/sysMessageTemplate/sendMsg. Executing manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been ... Read more

    Affected Products : jeecgboot
    • Published: Sep. 19, 2025
    • Modified: Oct. 02, 2025
    • Vuln Type: Authorization
Showing 20 of 3903 Results