Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.
- Tracked
- 410,259
- Last 24h
- 673
- Critical, 7 days
- 370
- Known exploited
- 1,779
12,797 results · Clear filters · Feed
-
Low 3.5
Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information dis…
-
Low 3.7
Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network acces…
-
Low 3.1
Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a den…
-
Low 3.4
Inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` in aiohttp
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security vulnerability regarding the inconsistent interpretation of the http protocol. HTTP/1.1 is a persistent protocol, if both Content-Lengt…
-
Low 3.7
Information Disclosure in Install Tool in typo3/cms-install
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions the login screen of the standalone install tool discloses the full path of the transient data directory (e.g. /var/www/html/var/transient/). This …
-
Low 2.3
Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user t…
-
Low 2.6
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentia…
-
Low 3.9
Improper access control in the Intel Smart Campus android application before version 9.4 may allow an authenticated use…
-
Low 3.3
Exposure of sensitive information to an unauthorized actor in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may…
-
Low 1.9
Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially enable denial of service v…
-
Low 1.9
Improper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of serv…
-
Low 1.9
Improper access control for some Intel Unison software may allow a privileged user to potentially enable denial of serv…
-
Low 2.2
Exposure of sensitive information to an unauthorized actor for some Intel Unison software may allow an authenticated us…
-
Low 2.2
Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalati…
-
Low 2.5
Insertion of sensitive information into log file for some Intel Unison software may allow an authenticated user to pote…
-
Low 3.3
Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enab…
-
Low 3.3
Incomplete cleanup for some Intel Unison software may allow an authenticated user to potentially enable information dis…
-
Low 3.3
Improper initialization for some Intel Unison software may allow an authenticated user to potentially enable informatio…
-
Low 3.3
Exposure of sensitive system information due to uncleared debug information for some Intel Unison software may allow an…
-
Low 3.8
Out-of-bounds read in the Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 …
-
Low 1.9
SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest…
-
Low 1.9
Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-…
-
Low 1.9
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the…
-
Low 3.3
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory con…
-
Low 2.5
Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP…
-
Low 2.1
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 a…
-
Low 3.7
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCO…
-
Low 2.7
Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web…
-
Low 3.5
A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks…
-
Low 2.9
Global Buffer Overflow leading to denial of service in PX4-Autopilot
PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParser_TryParseCrsfPacket function in /src/drivers/rc/crsf_rc/CrsfParser.cpp:298 due to the invalid size check. A malicious us…
-
Low 3.1
Denial of service from malicious image manifest in kyverno
Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause denial of service of Kyverno. The vulnerable component in Kyvernos Notary verifier. An attacker would need control over the registr…
-
Low 3.1
Denial of service from malicious image manifest in kyverno
Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause denial of service of Kyverno. The vulnerability was in Kyvernos Notary verifier. An attacker would need control over the registry f…
-
Low 2.4
Intelbras RX 1500 SSID WiFi.html cross site scripting
A vulnerability has been found in Intelbras RX 1500 1.1.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /WiFi.html of the component SSID Handler. The manipulation leads to cross site scripting. The attac…
-
Low 3.2
gnark's range checker gadget allows wider inputs up to word alignment
### Impact gnark provides a gadget in the standard library to allow optimized checking of the bitwidth of the inputs. The gadget works by constructing a fixed lookup table containing all valid entries, partitioning the input and checking that all parts are in…
-
Low 3.3
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Tel…
-
Low 3.4
Discourse SSRF vulnerability in Embedding
Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, the embedding feature is susceptible to server side request forgery. The issue is p…
-
Low 3.5
PHPGurukul Restaurant Table Booking System Reservation Request index.php cross site scripting
A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file index.php of the component Reservation Request Handler. The manipulation leads to cross site scripting. It …
-
Low 3.3
Unread bookmark reminder notifications that the user cannot access can be seen
Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, there is an edge case where a bookmark reminder is sent and an unread notification …
-
Low 3.3
Moodle: duplicating a bigbluebutton activity assigns the same meeting id
When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.
-
Low 3.3
Moodle: forum summary report shows students from other groups when in separate groups mode
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.