Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.
- Tracked
- 409,693
- Last 24h
- 433
- Critical, 7 days
- 344
- Known exploited
- 1,779
35,523 results · Clear filters · Feed
-
High 7.1CVE-2021-21401 Public exploit
Invalid free() call in Nanopb
Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically formed message can cause invalid `free()` or `realloc()` calls if the message type contains an `oneof` field, and the `…
-
Medium 6.1
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the…
-
High 7.5
XStream can cause a Denial of Service
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such…
-
Medium 5.8
XStream is vulnerable to a Remote Command Execution attack
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed inp…
-
Unscored —CVE-2021-27308 Public exploit
A cross-site scripting (XSS) vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to i…
-
Unscored —
RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI
Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz.
-
Unscored —CVE-2019-14830 Public exploit
A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where th…
-
Unscored —
A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the …
-
Unscored —
A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the …
-
Unscored —
A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, …
-
Unscored —
Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE
Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly check the imported file, allowing PHP ones to be uploaded by administrator by using the 'text/csv' content-type in the request.
-
Unscored —
Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export
Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example.
-
Unscored —CVE-2021-28420 Public exploit
A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and t…
-
Unscored —
The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which lead…
-
Unscored —CVE-2021-28418 Public exploit
A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and…
-
Unscored —CVE-2021-28417 Public exploit
A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and …
-
High 8.8
Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap co…
KEV Nov 3, 2021 -
Unscored —CVE-2021-27946 Public exploit
SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. (issue 1 of 3).
-
Unscored —
SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files.
-
Unscored —CVE-2021-27889 Public exploit
Cross-site Scripting (XSS) vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages.
-
Unscored —CVE-2021-27695 Public exploit
Multiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbi…
-
Unscored —CVE-2021-28379 Public exploit
web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allo…
-
Low 3.7CVE-2021-28378 Public exploit
Cross-site Scripting in Gitea
Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.
-
Unscored —CVE-2020-35682 Public exploit
Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass (only during SAML login).
-
High 7.8CVE-2021-26882 Public exploit
Remote Access API Elevation of Privilege Vulnerability
Remote Access API Elevation of Privilege Vulnerability
-
High 7.8CVE-2021-26871 Public exploit
Windows WalletService Elevation of Privilege Vulnerability
Windows WalletService Elevation of Privilege Vulnerability
-
High 7.8CVE-2021-26868 Public exploit
Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
-
High 8.8
Internet Explorer Memory Corruption Vulnerability
Internet Explorer Memory Corruption Vulnerability
KEV Nov 3, 2021 -
Unscored —CVE-2021-0399 Public exploit
In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to loc…
-
Unscored —CVE-2021-0392 Public exploit
In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of…
-
Unscored —CVE-2021-0390 Public exploit
In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to…
-
Unscored —CVE-2021-0397 Public exploit
In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead t…
-
Unscored —CVE-2021-0391 Public exploit
In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, witho…
-
Unscored —CVE-2021-0394 Public exploit
In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing boun…
-
Unscored —CVE-2021-0393 Public exploit
In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflo…
-
Unscored —CVE-2021-0396 Public exploit
In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bound…
-
Unscored —CVE-2021-3310 Public exploit
Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can…
-
Unscored —
An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sens…
-
High 8.1CVE-2021-21772 Public exploit
A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3m…
-
Unscored —CVE-2021-20253 Public exploit
A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker …