Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 9.8

    CRITICAL
    CVE-2024-20100

    In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998449; Iss... Read more

    Affected Products : android iot_yocto mt6985 mt6989 mt6990 mt8183 mt8676 mt8678 mt8755 mt8775 +9 more products
    • Published: Oct. 07, 2024
    • Modified: Apr. 25, 2025

  • 6.7

    MEDIUM
    CVE-2024-20099

    In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08997492; Issue ID: M... Read more

    • Published: Oct. 07, 2024
    • Modified: Apr. 25, 2025

  • 6.7

    MEDIUM
    CVE-2024-20098

    In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996886; Issue ID: M... Read more

    Affected Products : android yocto mt6779 mt6781 mt6785 mt6833 mt6853 mt6873 mt6877 mt6885 +10 more products
    • Published: Oct. 07, 2024
    • Modified: Apr. 25, 2025

  • 4.4

    MEDIUM
    CVE-2024-20097

    In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-... Read more

    Affected Products : android mt6785 mt6789 mt6853 mt6873 mt6885 mt8675 mt6761 mt6765 mt6768 +4 more products
    • Published: Oct. 07, 2024
    • Modified: Oct. 27, 2024

  • 4.4

    MEDIUM
    CVE-2024-20096

    In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996900; Issue ID: MSV-1... Read more

    Affected Products : android mt6779 mt6781 mt6785 mt6789 mt6833 mt6853 mt6855 mt6873 mt6877 +17 more products
    • Published: Oct. 07, 2024
    • Modified: Oct. 27, 2024

  • 4.4

    MEDIUM
    CVE-2024-20095

    In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996894; Issue ID: MSV-1... Read more

    Affected Products : android mt6779 mt6781 mt6785 mt6789 mt6833 mt6853 mt6855 mt6873 mt6877 +17 more products
    • Published: Oct. 07, 2024
    • Modified: Oct. 27, 2024

  • 7.5

    HIGH
    CVE-2024-20094

    In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00843282; Issue ID: MSV-15... Read more

    Affected Products : nr15 mt2735 mt6833 mt6853 mt6855 mt6873 mt6875 mt6877 mt6880 mt6883 +11 more products
    • Published: Oct. 07, 2024
    • Modified: Apr. 25, 2025

  • 4.4

    MEDIUM
    CVE-2024-20093

    In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-... Read more

    Affected Products : android mt6779 mt6785 mt6853 mt6873 mt6885 mt6761 mt6765 mt6768 mt8667 +7 more products
    • Published: Oct. 07, 2024
    • Modified: Oct. 27, 2024

  • 7.8

    HIGH
    CVE-2024-20092

    In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MS... Read more

    Affected Products : android mt6779 mt6785 mt6853 mt6873 mt6885 mt6761 mt6765 mt6768 mt8667 +7 more products
    • Published: Oct. 07, 2024
    • Modified: Apr. 25, 2025

  • 4.4

    MEDIUM
    CVE-2024-20091

    In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-... Read more

    Affected Products : android mt6779 mt6785 mt6853 mt6873 mt6885 mt6761 mt6765 mt6768 mt8667 +7 more products
    • Published: Oct. 07, 2024
    • Modified: Oct. 27, 2024

  • 6.7

    MEDIUM
    CVE-2024-20090

    In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MS... Read more

    Affected Products : android mt6779 mt6785 mt6853 mt6873 mt6885 mt6761 mt6765 mt6768 mt8667 +7 more products
    • Published: Oct. 07, 2024
    • Modified: Apr. 25, 2025

  • 9.0

    HIGH
    CVE-2024-9565

    A vulnerability has been found in D-Link DIR-605L 2.13B01 BETA and classified as critical. Affected by this vulnerability is the function formSetPassword of the file /goform/formSetPassword. The manipulation of the argument curTime leads to buffer overflo... Read more

    Affected Products : dir-605l_firmware dir-605l
    • Published: Oct. 07, 2024
    • Modified: Oct. 08, 2024

  • 9.0

    HIGH
    CVE-2024-9564

    A vulnerability, which was classified as critical, was found in D-Link DIR-605L 2.13B01 BETA. Affected is the function formWlanWizardSetup of the file /goform/formWlanWizardSetup. The manipulation of the argument webpage leads to buffer overflow. It is po... Read more

    Affected Products : dir-605l_firmware dir-605l
    • Published: Oct. 07, 2024
    • Modified: Oct. 08, 2024

  • 9.0

    HIGH
    CVE-2024-9563

    A vulnerability, which was classified as critical, has been found in D-Link DIR-605L 2.13B01 BETA. This issue affects the function formWlanSetup_Wizard of the file /goform/formWlanSetup_Wizard. The manipulation of the argument webpage leads to buffer over... Read more

    Affected Products : dir-605l_firmware dir-605l
    • Published: Oct. 07, 2024
    • Modified: Oct. 08, 2024

  • 9.0

    HIGH
    CVE-2024-9562

    A vulnerability classified as critical was found in D-Link DIR-605L 2.13B01 BETA. This vulnerability affects the function formSetWizard1/formSetWizard2. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotel... Read more

    Affected Products : dir-605l_firmware dir-605l
    • Published: Oct. 06, 2024
    • Modified: Oct. 08, 2024

  • 9.0

    HIGH
    CVE-2024-9561

    A vulnerability classified as critical has been found in D-Link DIR-605L 2.13B01 BETA. This affects the function formSetWAN_Wizard51/formSetWAN_Wizard52. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the att... Read more

    Affected Products : dir-605l_firmware dir-605l
    • Published: Oct. 06, 2024
    • Modified: Oct. 08, 2024

  • 8.8

    HIGH
    CVE-2024-9560

    A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is the function delCatelogs of the file /CDGServer3/document/Catelogs;logindojojs?command=DelCatelogs. The manipulation of the argument id leads to sql inj... Read more

    Affected Products : cdg
    • Published: Oct. 06, 2024
    • Modified: Nov. 05, 2024

  • 9.0

    HIGH
    CVE-2024-9559

    A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been classified as critical. Affected is the function formWlanSetup of the file /goform/formWlanSetup. The manipulation of the argument webpage leads to buffer overflow. It is possible to l... Read more

    Affected Products : dir-605l_firmware dir-605l
    • Published: Oct. 06, 2024
    • Modified: Oct. 08, 2024

  • 9.0

    HIGH
    CVE-2024-9558

    A vulnerability was found in D-Link DIR-605L 2.13B01 BETA and classified as critical. This issue affects the function formSetWanPPTP of the file /goform/formSetWanPPTP. The manipulation of the argument webpage leads to buffer overflow. The attack may be i... Read more

    Affected Products : dir-605l_firmware dir-605l
    • Published: Oct. 06, 2024
    • Modified: Oct. 08, 2024

  • 9.0

    HIGH
    CVE-2024-9557

    A vulnerability has been found in D-Link DIR-605L 2.13B01 BETA and classified as critical. This vulnerability affects the function formSetWanPPPoE of the file /goform/formSetWanPPPoE. The manipulation of the argument webpage leads to buffer overflow. The ... Read more

    Affected Products : dir-605l_firmware dir-605l
    • Published: Oct. 06, 2024
    • Modified: Oct. 08, 2024
Showing 20 of 294860 Results