Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.
- Tracked
- 409,349
- Last 24h
- 687
- Critical, 7 days
- 356
- Known exploited
- 1,779
4,271 results · Clear filters · Feed
-
High 8.3CVE-2023-42931 Public exploit
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Mon…
-
High 8.4CVE-2024-23727 Public exploit
The YI Smart Kami Vision com.kamivision.yismart application through 1.0.0_20231219 for Android allows a remote attacker…
-
High 7.6CVE-2024-28247 Public exploit
Pihole Authenticated Arbitrary File Read with root privileges
The Pi-hole is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. A vulnerability has been discovered in Pihole that allows an authenticated user on the platform to read internal server files arbitrari…
-
High 8.6CVE-2024-1540 Public exploit
Command Injection in gradio-app/gradio via deploy+test-visual.yml workflow
A command injection vulnerability exists in the deploy+test-visual.yml workflow of the gradio-app/gradio repository, due to improper neutralization of special elements used in a command. This vulnerability allows attackers to execute unauthorized commands, po…
-
High 7.2
A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can e…
-
High 7.5CVE-2024-25736 Public exploit
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can restart the device via a /…
-
High 7.5CVE-2024-25734 Public exploit
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only …
-
High 8.1
Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary co…
-
High 7.5CVE-2024-23722 Public exploit
In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the conten…
-
High 7.2CVE-2024-25420 Public exploit
Ignite Realtime Openfire privilege escalation vulnerability
An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component.
-
High 8.8
Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a PO…
-
High 7.5
.NET Framework Information Disclosure Vulnerability
.NET Framework Information Disclosure Vulnerability
KEV Feb 4, 2025 -
High 8.8CVE-2024-28116 Public exploit
Server-Side Template Injection (SSTI) with Grav CMS security sandbox bypass
Grav is an open-source, flat-file content management system. Grav CMS prior to version 1.7.45 is vulnerable to a Server-Side Template Injection (SSTI), which allows any authenticated user (editor permissions are sufficient) to execute arbitrary code on the re…
-
High 7.2CVE-2023-51444 Public exploit
GeoServer arbitrary file upload vulnerability in REST Coverage Store API
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file upload vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with permissions …
-
High 7.5CVE-2024-2169 Public exploit
Implementations of UDP application protocols are susceptible to network loops and denial of service
Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.
-
High 7.3CVE-2024-22017 Public exploit
setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows t…
-
High 7.5CVE-2023-40278 Public exploit
An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the p…
-
High 7.5CVE-2023-40279 Public exploit
An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page para…
-
High 8.8CVE-2024-28715 Public exploit
Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via …
-
High 7.4
ColdFusion | Improper Access Control (CWE-284)
ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this …
KEV Dec 16, 2024 -
High 8.8
SpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadata
OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The `AlertUtil::validateExpression` method evaluates an SpEL expression using `getVal…
-
High 7.5
Apache Tomcat: HTTP/2 header handling DoS
Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after …
-
High 8.6CVE-2024-0368 Public exploit
Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys
The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.8.3 via hardcoded API Keys. This makes it possible for unauthenticated attackers to extr…
-
High 7.8CVE-2024-26170 Public exploit
Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability
Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability
-
High 7.8
Windows Error Reporting Service Elevation of Privilege Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability
KEV Jun 13, 2024 -
High 7.3CVE-2024-1302 Public exploit
Multiple Vulnerabilities in Badger Meter's Monitool
Information exposure vulnerability in Badger Meter Monitool affecting versions up to 4.6.3 and earlier. A local attacker could change the application's file parameter to a log file obtaining all sensitive information such as database credentials.
-
High 7.8CVE-2024-0044 Public exploit
In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input vali…
-
High 8.8CVE-2024-0670 Public exploit
Privilege escalation in windows agent
Privilege escalation in windows agent plugin in Checkmk before 2.2.0p23, 2.1.0p40 and 2.0.0 (EOL) allows local user to escalate privileges
-
High 7.5CVE-2024-28757 Public exploit
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created vi…
-
High 8.2CVE-2024-0258 Public exploit
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14…
-
High 7.5CVE-2023-49988 Public exploit
Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the npss parameter at rooms.p…
-
High 8.1CVE-2024-22752 Public exploit
Insecure permissions issue in EaseUS MobiMover 6.0.5 Build 21620 allows attackers to gain escalated privileges via use …
-
High 8.0CVE-2024-28157 Public exploit
Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting
Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs.
-
High 7.3CVE-2024-20338 Public exploit
A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, …
-
High 7.5CVE-2023-49980 Public exploit
A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories an…
-
High 7.5CVE-2023-49979 Public exploit
A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive file…
-
High 8.8CVE-2023-49982 Public exploit
Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers t…
-
High 7.5CVE-2023-49981 Public exploit
A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensit…
-
High 7.2CVE-2023-49978 Public exploit
Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages an…
-
High 7.8
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, …
KEV Mar 6, 2024