Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

5.5

MEDIUM

CVE-2022-4981

A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig::readPeerList of the file /dcmqrcnf.cc of the component dcmqrscp. The manipulation results in null pointer dereference. The attack needs to be a...

Affected Products : dcmtk
Published: Oct. 21, 2025

Modified: Oct. 31, 2025

Vuln Type: Memory Corruption
6.1

MEDIUM

CVE-2025-60280

Cross-Site Scripting (XSS) vulnerability in Bang Resto v1.0 could allow an attacker to inject malicious JavaScript code into the application's web pages. This vulnerability exists due to insufficient input sanitization or output encoding, allowing attacke...

Affected Products : bang_resto
Published: Oct. 21, 2025

Modified: Oct. 31, 2025

Vuln Type: Cross-Site Scripting
6.1

MEDIUM

CVE-2025-11952

Stored Cross-site Scripting (XSS) in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerabil...

Affected Products : chatbot
Published: Oct. 22, 2025

Modified: Oct. 31, 2025

Vuln Type: Cross-Site Scripting
4.4

MEDIUM

CVE-2025-43724

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to gain unauthorized access to NFSv4 o...

Affected Products : powerscale_onefs
Published: Oct. 08, 2025

Modified: Oct. 31, 2025

Vuln Type: Authorization
8.5

HIGH

CVE-2025-7329

A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering a...

Affected Products : 1783-natr_firmware 1783-natr
Published: Oct. 14, 2025

Modified: Oct. 30, 2025

Vuln Type: Cross-Site Scripting
7.0

HIGH

CVE-2025-7330

A cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CSRF checks on the impacted form. This allows for unintended configuration modification if an attacker can convince a logged in admi...

Affected Products : 1783-natr_firmware 1783-natr
Published: Oct. 14, 2025

Modified: Oct. 30, 2025

Vuln Type: Cross-Site Request Forgery
7.0

HIGH

CVE-2025-55688

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally....

Affected Products : windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_2h2
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.0

HIGH

CVE-2025-55689

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally....

Affected Products : windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 +1 more products
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.0

HIGH

CVE-2025-55690

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally....

Affected Products : windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_2h2
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.0

HIGH

CVE-2025-55691

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally....

Affected Products : windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_2h2
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.8

HIGH

CVE-2025-55692

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_10_1507 +8 more products
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.4

HIGH

CVE-2025-55693

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally....

Affected Products : windows_11_24h2 windows_server_2025 windows_11_25h2
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.8

HIGH

CVE-2025-55694

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_2h2
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
5.5

MEDIUM

CVE-2025-55695

Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally....

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +11 more products
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.8

HIGH

CVE-2025-55696

Time-of-check time-of-use (toctou) race condition in NtQueryInformation Token function (ntifs.h) allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 +3 more products
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.8

HIGH

CVE-2025-55697

Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2022_23h2 windows_server_23h2 windows_server_2025
Published: Oct. 14, 2025

Modified: Oct. 30, 2025
7.5

HIGH

CVE-2025-61234

Incorrect access control on Dataphone A920 v2025.07.161103 exposes a service on port 8888 by default on the local network without authentication. This allows an attacker to interact with the device via a TCP socket without credentials. Additionally, sendi...

Affected Products :
Published: Oct. 29, 2025

Modified: Oct. 30, 2025

Vuln Type: Authentication
8.2

HIGH

CVE-2025-60595

SPH Engineering UgCS 5.13.0 is vulnerable to Arbitary code execution....

Affected Products :
Published: Oct. 29, 2025

Modified: Oct. 30, 2025
6.5

MEDIUM

CVE-2025-60542

SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false....

Affected Products : typeorm
Published: Oct. 29, 2025

Modified: Oct. 30, 2025

Vuln Type: Injection
9.8

CRITICAL

CVE-2025-12309

A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely...

Affected Products : nero_social_networking_site
Published: Oct. 27, 2025

Modified: Oct. 30, 2025

Vuln Type: Injection

Showing 20 of 3911 Results

Browse by Apps

Latest CVE Feed

5.5

6.1

6.1

4.4

8.5

7.0

7.0

7.0

7.0

7.0

7.8

7.4

7.8

5.5

7.8

7.8

7.5

8.2

6.5

9.8

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable