Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.1

HIGH

CVE-2025-47694

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in solwin Blog Designer PRO. This issue affects Blog Designer PRO: from n/a through 3.4.7....

Affected Products :
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Cross-Site Scripting
7.5

HIGH

CVE-2025-47571

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in highwarden Super Store Finder. This issue affects Super Store Finder: from n/a through 6.9.7....

Affected Products : super_store_finder
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Path Traversal
7.5

HIGH

CVE-2025-47695

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in solwin Blog Designer PRO. This issue affects Blog Designer PRO: from n/a through 3.4.7....

Affected Products :
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Injection
6.5

MEDIUM

CVE-2025-53797

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2 windows_server_2025
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
4.3

MEDIUM

CVE-2025-39553

Missing Authorization vulnerability in andy_moyle Church Admin. This issue affects Church Admin: from n/a through 5.0.9....

Affected Products : church_admin
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Authorization
7.0

HIGH

CVE-2025-49734

Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 powershell windows_11_23h2 +3 more products
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
7.6

HIGH

CVE-2025-58993

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS allows SQL Injection. This issue affects Tutor LMS: from n/a through 3.7.4....

Affected Products : tutor_lms
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Injection
5.3

MEDIUM

CVE-2025-5500

A flaw has been found in ZhenShi Mibro Fit App 1.6.3.17499 on Android. This impacts an unknown function of the file AndroidManifest.xml of the component com.xiaoxun.xunoversea.mibrofit. This manipulation causes improper export of android application compo...

Affected Products :
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Misconfiguration
6.7

MEDIUM

CVE-2025-53810

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 +7 more products
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
6.5

MEDIUM

CVE-2025-54096

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2 windows_server_2025
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
7.5

HIGH

CVE-2025-55243

Exposure of sensitive information to an unauthorized actor in Microsoft Office Plus allows an unauthorized attacker to perform spoofing over a network....

Affected Products : officeplus
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
6.5

MEDIUM

CVE-2025-54095

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2 windows_server_2025
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
9.0

HIGH

CVE-2025-10170

A security vulnerability has been detected in UTT 1200GW up to 3.0.0-170831. This affects the function sub_4B48F8 of the file /goform/formApLbConfig. Such manipulation of the argument loadBalanceNameOld leads to buffer overflow. The attack may be launched...

Affected Products :
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Memory Corruption
7.1

HIGH

CVE-2025-58765

wabac.js provides a full web archive replay system, or 'wayback machine', using Service Workers. A Reflected Cross-Site Scripting (XSS) vulnerability exists in the 404 error handling logic of wabac.js v2.23.10 and below. The parameter `requestURL` (derive...

Affected Products :
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Cross-Site Scripting
7.1

HIGH

CVE-2025-58063

CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This...

Affected Products : coredns
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Denial of Service
7.0

HIGH

CVE-2025-54115

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
8.8

HIGH

CVE-2025-54113

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2 windows_server_2025
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
6.7

MEDIUM

CVE-2025-53808

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 +7 more products
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
6.5

MEDIUM

CVE-2025-53806

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2 windows_server_2025
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
10.0

CRITICAL

CVE-2025-55051

CWE-1392: Use of Default Credentials...

Affected Products :
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Authentication

Showing 20 of 4509 Results

Browse by Apps

Latest CVE Feed

7.1

7.5

7.5

6.5

4.3

7.0

7.6

5.3

6.7

6.5

7.5

6.5

9.0

7.1

7.1

7.0

8.8

6.7

6.5

10.0

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable