Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.
- Tracked
- 408,840
- Last 24h
- 2,089
- Critical, 7 days
- 353
- Known exploited
- 1,779
97,402 results · Clear filters · Feed
-
High 7.8
Premiere Pro | Buffer Underwrite ('Buffer Underflow') (CWE-124)
Premiere Pro is affected by a Buffer Underwrite ('Buffer Underflow') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this i…
-
High 7.8
Premiere Pro | Out-of-bounds Write (CWE-787)
Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
-
High 7.8
Premiere Pro | Out-of-bounds Write (CWE-787)
Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
-
High 7.8
Premiere Pro | Buffer Overflow (CWE-120)
Premiere Pro is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user inte…
-
High 7.8
Premiere Pro | Out-of-bounds Write (CWE-787)
Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
-
High 7.8
Premiere Pro | Out-of-bounds Write (CWE-787)
Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
-
High 7.1
Premiere Pro | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Premiere Pro is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories o…
-
High 7.8
Premiere Pro | Untrusted Search Path (CWE-426)
Premiere Pro is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires us…
-
High 8.7
A replica-set database server node does not limit or reclaim internal wait records created while handling a client-supp…
-
High 7.1
An authorization flaw in the aggregation and view-definition handling of sharded deployments may allow a user holding o…
-
High 7.1
An authorization weakness in the aggregation framework of MongoDB Server may allow an authenticated user holding only b…
-
High 8.7
A use-after-free in the time-series collection component of MongoDB Server can occur when the server validates a time-s…
-
High 8.6
MongoDB Server may omit an authorization check on the resource that a replication-related administrative command actual…
-
High 7.1
A use-after-free in the aggregation framework of MongoDB Server can occur when certain expressions are evaluated in an …
-
High 7.1
A use-after-free weakness in MongoDB Server's server-side JavaScript support for aggregation may allow a stale referenc…
-
High 7.1
A race condition in the schema validation component of MongoDB Server can occur when concurrent writes are checked agai…
-
High 8.6
An incorrect authorization check in the MongoDB Server authorization subsystem may allow an unauthenticated party with …
-
High 7.5
An improper privilege management issue in the sharding subsystem of MongoDB Server may allow a user holding certain sha…
-
High 8.2
An issue in MongoDB Server's client-side field-level encryption (CSFLE) schema processing component allows encryption m…
-
High 7.3
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyz…
-
High 7.9
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS…
-
High 8.6
Security Advisory 0224
On affected platforms running Arista EOS with Precision Time Protocol (PTP) configured, an unauthenticated attacker with network access to a PTP-enabled port can create a denial of service (DoS) condition by sending traffic to the system.
-
High 7.5
Security Advisory 0218
On affected EOS versions with the eAPI service enabled, a specially crafted HTTP request can allow an unauthenticated, remote attacker to read arbitrary files, including sensitive credentials from the switch filesystem.
-
High 8.9
On affected platforms running Arista EOS with Bidirectional Forwarding Detection (BFD) configured to use keyed MD5 or k…
-
High 8.3
A malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agent or expo…
-
High 8.3
On affected platforms running Arista EOS with Border Gateway Protocol (BGP) changing the BGP listen port from its defau…
-
High 8.3
A crafted Error Report can leave EOS stuck believing that a cache reset is in progress, preventing ROA publication, wit…
-
High 7.7
An unauthenticated attacker on an adjacent network segment can send crafted RIPv2 packets to a RIP-enabled interface on…
-
High 8.7
On affected platforms running Arista EOS with Border Gateway Protocol (BGP) configured, An unauthenticated attacker who…
-
High 7.1
On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device profiling e…
-
High 7.0
On affected platforms running Arista EOS with IEEE 802.1X authentication and MACsec using dynamically derived keys, sen…
-
High 7.1
An issue in MongoDB server’s aggregation framework allows an authenticated user with read privileges to cause a denial …
-
High 7.2
A vulnerability exists in a system component that may, under certain conditions, allow an authorized user to make unaut…
-
High 7.5
A vulnerability exists in a network-facing component that may, under certain conditions, result in service disruption. …
-
High 7.5
A vulnerability exists in a system component that may, under certain conditions, disrupt the availability of affected s…
-
High 7.5
A vulnerability exists in a monitoring component that may, under certain conditions, allow security controls to be circ…
-
High 7.5
A security vulnerability exists in AthonetOS that may allow an unauthorized party to affect service operation or gain a…
-
High 8.1
A vulnerability exists in the authentication and session-management mechanisms that may result in access not being full…
-
High 7.5
A flaw in MongoDB’s X.509 cluster-membership authentication guard could allow a holder of a cluster-member certificate …
-
High 7.0
A flaw in MongoDB Server's user management commands may lead to incomplete cleanup of role authorization data when role…