Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.
- Tracked
- 408,861
- Last 24h
- 2,103
- Critical, 7 days
- 356
- Known exploited
- 1,779
97,417 results · Clear filters · Feed
-
High 8.1
A vulnerability exists in the authentication and session-management mechanisms that may result in access not being full…
-
High 7.5
A flaw in MongoDB’s X.509 cluster-membership authentication guard could allow a holder of a cluster-member certificate …
-
High 7.0
A flaw in MongoDB Server's user management commands may lead to incomplete cleanup of role authorization data when role…
-
High 8.2
A flaw exists in the server-side SSPI Kerberos authentication handler on Windows Enterprise builds of MongoDB. When pro…
-
High 7.1
A use-after-free issue exists in MongoDB’s SBE (Slot-Based Execution) implementation of a window function accumulator u…
-
High 8.3
Winter CMS: ImportExportController AJAX handlers bypass granular import/export permission gate
Winter CMS is a content management system built on the Laravel PHP framework. Prior to 1.2.14, the ImportExportController behavior applies userHasAccess() only to the import() and export() page actions, while Backend\Classes\Controller::execAjaxHandlers() dis…
-
High 7.0
Docker Engine overlay-network encryption rules are not restored after a firewalld reload
Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. T…
-
High 7.7
Cluster-API proxy overwrites forwarded client identity with its own
SwarmKit's Cluster-API proxy can overwrite a forwarded client's TLS identity with an intermediary manager's identity. WithMetadataForwardTLSInfo replaces outgoing metadata with a copy of the incoming metadata, discarding the redirect guard's changes when buil…
-
High 7.5
The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.6.3…
-
High 7.7
Invalid Memory Access via the MSI-X table in QVM could allow an attacker in the guest to execute arbitrary code in the …
-
High 7.5
In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via an undr…
-
High 7.5
In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process…
-
High 7.5
In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to …
-
High 7.5
In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap du…
-
High 7.5
In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abo…
-
High 7.5
In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recu…
-
High 7.5
In SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing null check. This could …
-
High 7.5
In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due…
-
High 7.5
In Retry_MtsMessageInPending of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via leak…
-
High 7.5
In s_gen_tile_param of multiple files, there is a possible way to trigger an out of bounds write in tile parameter arra…
-
High 8.4
Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for Safety
Heap-based Buffer Overflow in the DCMD_PROC_EVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel.
-
High 7.4
Forge: X.509 nameConstraints not enforced by verifyCertificateChain()
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.3, pki.verifyCertificateChain() in lib/x509.js does not decode or enforce the X.509 nameConstraints extension while validating certificate paths.…
-
High 7.0
AMD MmSaveStateLib SysCall path performs out-of-bounds writes for partial save-state reads
EDK2 contains vulnerabilities in BIOS where skilled and privileged users or attackers may cause “Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could compromise SMM handler integrity, cause system instability, and lead to …
-
High 8.8
Untrusted search path in the cross-user process launcher in OpenJD Sessions for Python, as used in the AWS Deadline Cloud worker agent
Untrusted search path in the cross-user process launcher in Open Job Description (OpenJD) Sessions for Python before 0.11.0, as used in the AWS Deadline Cloud worker agent before 0.33.0, on Linux might allow an authenticated remote user with permission to sub…
-
High 7.4
Vulnerabilities in the QNX io-char library Impacts QNX Software Development Platform
Heap-based Buffer Overflow in the io-char library's DCMD_CHR_WAITINFO devctl() handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver.
-
High 7.5
HarnessRouter: A workspace's API key could read and change sessions, files and responses of other workspaces in the same organization
HarnessRouter is a self-hosted unified API for agent harnesses. From version 0.4.2 until 0.31.7, routes that accept a session ID or response ID validate only the caller's organization and do not enforce the workspace scope of a non-default workspace API key. …
-
High 7.5
Affected versions of Git have a heap buffer overflow in the three-way merge code (xdiff), which an attacker can trigger…
-
High 8.4
Kaneo: Gitea integration access token and webhook secret exposed to any workspace member
Kaneo is a project management application with boards, Gantt charts, and GitHub integration that can be self-hosted or used as a cloud service. Prior to 2.13.0, GET /api/external-link/task/:taskId returns integration.config to any workspace member, including …
-
High 8.8
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 7.5
Microsoft Office SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 7.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
-
High 7.5
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 7.5
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.