Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.3

HIGH

CVE-2025-43491

A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted....

Affected Products :
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Path Traversal
4.9

MEDIUM

CVE-2025-58977

Server-Side Request Forgery (SSRF) vulnerability in Rhys Wynne WP eBay Product Feeds allows Server Side Request Forgery. This issue affects WP eBay Product Feeds: from n/a through 3.4.8....

Affected Products : wp_ebay_product_feeds
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Server-Side Request Forgery
4.3

MEDIUM

CVE-2025-58975

Cross-Site Request Forgery (CSRF) vulnerability in Helmut Wandl Advanced Settings allows Cross Site Request Forgery. This issue affects Advanced Settings: from n/a through 3.1.1....

Affected Products :
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Cross-Site Request Forgery
4.3

MEDIUM

CVE-2025-54917

Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 +7 more products
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
7.8

HIGH

CVE-2025-54902

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

Affected Products : 365_apps office_macos_2024 office_macos_2021 excel_2016 office_2024 office_2021 office_2019
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
5.5

MEDIUM

CVE-2025-53803

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 +5 more products
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
6.5

MEDIUM

CVE-2025-55053

CWE-328: Use of Weak Hash...

Affected Products :
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Cryptography
9.8

CRITICAL

CVE-2025-57633

A command injection vulnerability in FTP-Flask-python through 5173b68 allows unauthenticated remote attackers to execute arbitrary OS commands. The /ftp.html endpoint's "Upload File" action constructs a shell command from the ftp_file parameter and execut...

Affected Products :
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Injection
8.8

HIGH

CVE-2025-54113

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2 windows_server_2025
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
8.6

HIGH

CVE-2025-59037

DuckDB is an analytical in-process SQL database management system. On 08 September 2025, the DuckDB distribution for Node.js on npm was compromised with malware (along with several other packages). An attacker published new versions of four of DuckDB's pa...

Affected Products : duckdb
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Supply Chain
7.0

HIGH

CVE-2025-54115

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
7.8

HIGH

CVE-2025-54092

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
6.5

MEDIUM

CVE-2025-54097

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_server_2022 windows_server_23h2 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2 windows_server_2025
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
6.7

MEDIUM

CVE-2025-53810

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 +7 more products
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
7.8

HIGH

CVE-2025-54913

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 windows_11_23h2 +3 more products
Published: Sep. 09, 2025

Modified: Sep. 11, 2025
5.3

MEDIUM

CVE-2025-7746

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read data in a victim’s browser....

Affected Products :
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Cross-Site Scripting
5.9

MEDIUM

CVE-2025-58984

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nanbu Welcart e-Commerce allows Stored XSS. This issue affects Welcart e-Commerce: from n/a through 2.11.20....

Affected Products : welcart_e-commerce
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Cross-Site Scripting
4.3

MEDIUM

CVE-2025-55052

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor...

Affected Products :
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Information Disclosure
5.1

MEDIUM

CVE-2025-58758

TinyEnv is an environment variable loader for PHP applications. In versions 1.0.1, 1.0.2, 1.0.9, and 1.0.10, TinyEnv did not require the `.env` file to exist when loading environment variables. This could lead to unexpected behavior where the application ...

Affected Products :
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Misconfiguration
5.3

MEDIUM

CVE-2025-58978

Missing Authorization vulnerability in WP Swings PDF Generator for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF Generator for WordPress: from n/a through 1.5.4....

Affected Products : pdf_generator_for_wordpress
Published: Sep. 09, 2025

Modified: Sep. 11, 2025

Vuln Type: Authorization

Showing 20 of 4404 Results

Browse by Apps

Latest CVE Feed

7.3

4.9

4.3

4.3

7.8

5.5

6.5

9.8

8.8

8.6

7.0

7.8

6.5

6.7

7.8

5.3

5.9

4.3

5.1

5.3

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable