Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.
- Tracked
- 409,662
- Last 24h
- 518
- Critical, 7 days
- 343
- Known exploited
- 1,779
35,523 results · Clear filters · Feed
-
Unscored —CVE-2021-0516 Public exploit
In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. Thi…
-
Unscored —CVE-2021-0511 Public exploit
In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This…
-
Unscored —CVE-2021-0510 Public exploit
In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead…
-
Unscored —CVE-2021-0509 Public exploit
In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead t…
-
Unscored —CVE-2021-0508 Public exploit
In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to l…
-
Unscored —CVE-2021-0520 Public exploit
In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condit…
-
Unscored —CVE-2021-0522 Public exploit
In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. T…
-
Unscored —CVE-2021-0478 Public exploit
In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This c…
-
Unscored —CVE-2021-0513 Public exploit
In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission b…
-
Unscored —CVE-2021-29337 Public exploit
MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access kernel memory and potentially escalate …
-
Unscored —CVE-2020-8300 Public exploit
Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-…
-
Unscored —
Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-messa…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corr…
KEV Nov 3, 2021 -
Critical 9.8
Multiple vulnerabilities leading to RCE
elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect elFinder 2.1.58. These vulnerabilities can allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP c…
-
Unscored —CVE-2021-24356 Public exploit
Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Arbitrary Plugin Activation
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activate_plugin, made it possible for authenticated users to activate arbitrary plu…
-
Unscored —
SP Project & Document Manager <2 4.22 - Authenticated Shell Upload
The SP Project & Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was di…
-
High 8.1
Remote Code Execution (RCE)
The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP.
-
Unscored —CVE-2021-0475 Public exploit
In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possible memory corruption due to a use after free. This could lea…
-
Unscored —CVE-2021-0472 Public exploit
In shouldLockKeyguard of LockTaskController.java, there is a possible way to exit App Pinning without a PIN due to a pe…
-
Unscored —CVE-2021-0474 Public exploit
In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lea…
-
Unscored —CVE-2021-0466 Public exploit
In startIpClient of ClientModeImpl.java, there is a possible identifier which could be used to track a device. This cou…
-
Unscored —CVE-2021-0476 Public exploit
In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition. This could lead to local…
-
Unscored —CVE-2021-0481 Public exploit
In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpec…
-
High 8.8
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and ex…
KEV Dec 3, 2025 -
Unscored —CVE-2019-25046 Public exploit
The Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS via an SVG document.
-
Unscored —CVE-2021-21735 Public exploit
A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary use…
-
Unscored —
mod_session NULL pointer dereference
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service
-
Unscored —
lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. I…
-
Unscored —CVE-2021-29995 Public exploit
A Cross Site Request Forgery (CSRF) issue in Server Console in CloverDX through 5.9.0 allows remote attackers to execut…
-
Unscored —CVE-2021-34369 Public exploit
portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensit…
-
Unscored —
Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are…
-
High 8.4
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Microsoft DWM Core Library Elevation of Privilege Vulnerability
KEV Nov 3, 2021 -
Medium 5.5
Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
KEV Nov 3, 2021 -
High 7.8
Windows NTFS Elevation of Privilege Vulnerability
Windows NTFS Elevation of Privilege Vulnerability
KEV Nov 3, 2021 -
High 7.6CVE-2021-31950 Public exploit
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
-
High 7.8
Windows Print Spooler Remote Code Execution Vulnerability
Windows Print Spooler Remote Code Execution Vulnerability
KEV Nov 3, 2021 -
Medium 4.8
Windows DCOM Server Security Feature Bypass
Windows DCOM Server Security Feature Bypass
-
Medium 6.8
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab C…
-
Unscored —
SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file sup…
-
High 7.5CVE-2021-33560 Public exploit
Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to addre…