Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

8.8

HIGH

CVE-2025-27074

Memory corruption while processing a GP command response....

Affected Products : qca6574au_firmware wcn3980_firmware wsa8810_firmware wsa8815_firmware csr8811_firmware immersive_home_214_platform_firmware immersive_home_216_platform_firmware immersive_home_316_platform_firmware immersive_home_318_platform_firmware ipq5010_firmware +180 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-47352

Memory corruption while processing audio streaming operations....

Affected Products : fastconnect_7800_firmware wsa8840_firmware wsa8845_firmware wsa8845h_firmware fastconnect_7800 wsa8840 wsa8845 wsa8845h qcc2072_firmware qcc2072 +18 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-47353

Memory corruption while processing request sent from GVM....

Affected Products : qca6595_firmware qca6698aq_firmware sa9000p_firmware qam8255p_firmware qca6797aq_firmware sa8255p_firmware qam8650p_firmware qam8775p_firmware qca6595 sa8770p_firmware +26 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
8.0

HIGH

CVE-2025-47357

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions....

Affected Products : qca6595au_firmware qca6696_firmware qca6595_firmware qca6678aq_firmware qca6698aq_firmware sa9000p_firmware qam8255p_firmware qca6797aq_firmware sa8255p_firmware qam8650p_firmware +38 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Information Disclosure
7.8

HIGH

CVE-2025-47360

Memory corruption while processing client message during device management....

Affected Products : qam8295p_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware sa8145p_firmware sa8150p_firmware sa8155p_firmware +60 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-47361

Memory corruption when triggering a subsystem crash with an out-of-range identifier....

Affected Products : qam8295p_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa8295p_firmware qca6595_firmware qca6698aq_firmware sa8540p_firmware sa9000p_firmware qam8255p_firmware +46 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
6.1

MEDIUM

CVE-2025-47362

Information disclosure while processing message from client with invalid payload....

Affected Products : qam8295p_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware sa8145p_firmware sa8150p_firmware sa8155p_firmware +66 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Information Disclosure
7.8

HIGH

CVE-2025-47365

Memory corruption while processing large input data from a remote source via a communication interface....

Affected Products : qam8295p_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware sa8145p_firmware sa8150p_firmware sa8155p_firmware +60 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-47367

Memory corruption while accessing a buffer during IOCTL processing....

Affected Products : wcd9380_firmware wcd9385_firmware wsa8830_firmware wsa8835_firmware qcm6490_firmware qcs6490_firmware snapdragon_7c\+_gen_3_compute_firmware wcd9370_firmware wcd9375_firmware fastconnect_6900_firmware +52 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
7.8

HIGH

CVE-2025-47368

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing....

Affected Products : wcd9380_firmware wcd9385_firmware fastconnect_6900_firmware fastconnect_7800_firmware wsa8840_firmware wsa8845_firmware wsa8845h_firmware wcd9380 wcd9385 sc8380xp_firmware +6 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
6.5

MEDIUM

CVE-2025-47370

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan....

Affected Products : qam8295p_firmware qca6391_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware sa8145p_firmware sa8150p_firmware +262 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Denial of Service
7.5

HIGH

CVE-2025-20725

In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges nee...

Affected Products : nr15 nr16 lr12a mt2735 mt6833 mt6833p mt6853 mt6853t mt6855 mt6873 +62 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
7.5

HIGH

CVE-2025-20726

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed...

Affected Products : nr15 nr16 nr17 lr12a mt2735 mt6813 mt6833 mt6833p mt6835 mt6853 +79 more products
Published: Nov. 04, 2025

Modified: Nov. 05, 2025

Vuln Type: Memory Corruption
9.1

CRITICAL

CVE-2025-64459

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods `QuerySet.filter()`, `QuerySet.exclude()`, and `QuerySet.get()`, and the class `Q()`, are subject to SQL injection when using a suitably crafted dictionary,...

Affected Products :
Published: Nov. 05, 2025

Modified: Nov. 05, 2025

Vuln Type: Injection
7.5

HIGH

CVE-2025-64458

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, `django.http.HttpResponseRedirect`, `django.http.HttpResponsePermanentRedirect`, and the shortcut `dj...

Affected Products :
Published: Nov. 05, 2025

Modified: Nov. 05, 2025

Vuln Type: Denial of Service
0.0

NA

CVE-2025-63248

DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, replacing the questionnaire ID with the ID of another questionnaire can enable the deletion of other questionnaires....

Affected Products :
Published: Nov. 05, 2025

Modified: Nov. 05, 2025

Vuln Type: Authorization
10.0

CRITICAL

CVE-2025-62168

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn t...

Affected Products : squid
Published: Oct. 17, 2025

Modified: Nov. 05, 2025

Vuln Type: Information Disclosure
0.0

NA

CVE-2025-59716

ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/{email}/{token} endpoint. Because of insufficient validation of the supplied token in showPasswordForm, the server responds differently when an e-mail addr...

Affected Products :
Published: Nov. 05, 2025

Modified: Nov. 05, 2025

Vuln Type: Information Disclosure
0.0

NA

CVE-2025-57244

OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting (XSS) in the user account creation interface. The Name field accepts script tags and the Email field is vulnerable when the POST request is modified to include encoded script tag...

Affected Products :
Published: Nov. 05, 2025

Modified: Nov. 05, 2025

Vuln Type: Cross-Site Scripting
8.3

HIGH

CVE-2025-57130

An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attacker to escalate their privileges. By sending a specially crafted HTTP request, a low-privilege user can access and mod...

Affected Products :
Published: Nov. 05, 2025

Modified: Nov. 05, 2025

Vuln Type: Authorization

Showing 20 of 3912 Results

Browse by Apps

Latest CVE Feed

8.8

7.8

7.8

8.0

7.8

7.8

6.1

7.8

7.8

7.8

6.5

7.5

7.5

9.1

7.5

0.0

10.0

0.0

0.0

8.3

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable