Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

5.3

MEDIUM

CVE-2025-62884

Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Coupon Affiliates: from n/a through <= 7.0.3....

Affected Products : coupon_affiliates
Published: Oct. 27, 2025

Modified: Oct. 27, 2025

Vuln Type: Authorization
4.3

MEDIUM

CVE-2025-62883

Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce User Roles: from n/a through <= 1.0.13....

Affected Products : medikaid
Published: Oct. 27, 2025

Modified: Oct. 27, 2025

Vuln Type: Authorization
4.3

MEDIUM

CVE-2025-62882

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through <= 3.13.0....

Affected Products : seriously_simple_podcasting
Published: Oct. 27, 2025

Modified: Oct. 27, 2025

Vuln Type: Authorization
4.3

MEDIUM

CVE-2025-62881

Missing Authorization vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Lister Lite for eBay: from n/a through <= 3.8.3....

Affected Products : wp-lister_lite_for_ebay
Published: Oct. 27, 2025

Modified: Oct. 27, 2025

Vuln Type: Authorization
6.5

MEDIUM

CVE-2025-60790

ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Language Support that is auto-extracted without limits prior to validation, enabling resource-exhaustion Denial of Service....

Affected Products : processwire
Published: Oct. 21, 2025

Modified: Oct. 27, 2025

Vuln Type: Denial of Service
7.5

HIGH

CVE-2025-60339

Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the schedStartTime and schedEndTime parameters....

Affected Products : ac6_firmware ac6
Published: Oct. 22, 2025

Modified: Oct. 27, 2025

Vuln Type: Denial of Service
7.5

HIGH

CVE-2025-60337

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a buffer overflow in the speed_dir parameter in the SetSpeedWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input....

Affected Products : ac6_firmware ac6
Published: Oct. 22, 2025

Modified: Oct. 27, 2025

Vuln Type: Memory Corruption
6.1

MEDIUM

CVE-2025-55757

A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered....

Affected Products : virtuemart
Published: Oct. 25, 2025

Modified: Oct. 27, 2025

Vuln Type: Cross-Site Scripting
5.5

MEDIUM

CVE-2025-53070

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris e...

Affected Products : solaris solaris
Published: Oct. 21, 2025

Modified: Oct. 27, 2025
5.4

MEDIUM

CVE-2025-22175

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to modify the steps of another user's private checklist....

Affected Products : jira_align
Published: Oct. 22, 2025

Modified: Oct. 27, 2025

Vuln Type: Authorization
5.4

MEDIUM

CVE-2025-11154

The IDonate WordPress plugin before 2.1.13 does not have authorisation and CSRF when deleting users via an action handler, allowing unauthenticated attackers to delete arbitrary users....

Affected Products : idonate
Published: Oct. 27, 2025

Modified: Oct. 27, 2025

Vuln Type: Authorization
6.1

MEDIUM

CVE-2025-55338

Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack....

Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 windows_11_23h2 +6 more products
Published: Oct. 14, 2025

Modified: Oct. 27, 2025
7.8

HIGH

CVE-2025-55339

Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_2h2
Published: Oct. 14, 2025

Modified: Oct. 27, 2025
5.5

MEDIUM

CVE-2025-55683

Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally....

Affected Products : windows_server_2016 windows_server_2019 windows_server_2022 windows_server_2022_23h2 windows_server_23h2 windows_server_2025
Published: Oct. 14, 2025

Modified: Oct. 27, 2025
7.0

HIGH

CVE-2025-55684

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally....

Affected Products : windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_2h2
Published: Oct. 14, 2025

Modified: Oct. 27, 2025
7.0

HIGH

CVE-2025-55685

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally....

Affected Products : windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 +1 more products
Published: Oct. 14, 2025

Modified: Oct. 27, 2025
7.0

HIGH

CVE-2025-55686

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally....

Affected Products : windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 +1 more products
Published: Oct. 14, 2025

Modified: Oct. 27, 2025
7.4

HIGH

CVE-2025-55687

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unauthorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 +8 more products
Published: Oct. 14, 2025

Modified: Oct. 27, 2025
8.4

HIGH

CVE-2025-53782

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally....

Affected Products : exchange_server exchange_server_se exchange_server_2019 exchange_server_2016
Published: Oct. 14, 2025

Modified: Oct. 27, 2025
6.1

MEDIUM

CVE-2025-55333

Incomplete comparison with missing factors in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack....

Affected Products : windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 windows_11_23h2 +6 more products
Published: Oct. 14, 2025

Modified: Oct. 27, 2025

Showing 20 of 4186 Results

Browse by Apps

Latest CVE Feed

5.3

4.3

4.3

4.3

6.5

7.5

7.5

6.1

5.5

5.4

5.4

6.1

7.8

5.5

7.0

7.0

7.0

7.4

8.4

6.1

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable