CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 11:09 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2018-7841 In wildKEV | UB U.motion Builder software version 1.3.4 U.motion | 9.8 | May 22 | Schneider Electric U.motion Builder SQL Injection Vulnerability |
| CVE-2019-11634 RansomwareIn wildKEV | RE Receiver Citrix | 9.8 | May 22 | Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability |
| CVE-2019-0903 In wildKEV | WI Windows Microsoft | 8.8 | May 16 | Microsoft GDI Remote Code Execution Vulnerability |
| CVE-2019-0708 RansomwareIn wildKEV | WI Windows Microsoft | 9.8 | May 16 | Microsoft Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2019-0863 In wildKEV | WI Windows Microsoft | 7.8 | May 16 | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability |
| CVE-2018-14839 In wildKEV | NF N1a1 Firmware LG | 9.8 | May 14 | LG N1A1 NAS Remote Command Execution Vulnerability |
| CVE-2019-3568 In wildKEV | WB WhatsApp Business for Android Facebook | 9.8 | May 14 | WhatsApp VOIP Stack Buffer Overflow Vulnerability |
| CVE-2019-11510 RansomwareIn wildKEV | CS Connect Secure Ivanti | 10.0 | May 8 | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability |
| CVE-2018-4063 In wildKEV | SW Sierra Wireless | 8.8 | May 6 | Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability |
| CVE-2017-18368 In wildKEV | 5F 5200w-t Firmware Billion | 9.8 | May 2 | Zyxel P660HN-T1A Routers Command Injection Vulnerability |
| CVE-2019-3929 In wildKEV | CA Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4. Crestron | 9.8 | Apr 30 | Crestron Multiple Products Command Injection Vulnerability |
| CVE-2019-9621 In wildKEV | ZC Zimbra Collaboration Suite Synacor | 7.5 | Apr 30 | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability |
| CVE-2019-2725 RansomwareIn wildKEV | WS WebLogic Server Oracle | 9.8 | Apr 26 | Oracle WebLogic Server, Injection |
| CVE-2019-11539 RansomwareIn wildKEV | CS Connect Secure Ivanti | 7.2 | Apr 26 | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability |
| CVE-2019-2616 In wildKEV | BP BI Publisher (formerly XML Publisher) Oracle Corporation | 7.2 | Apr 23 | Oracle BI Publisher Unauthorized Access Vulnerability |
| CVE-2019-3398 In wildKEV | CO Confluence Atlassian | 8.8 | Apr 18 | Atlassian Confluence Server and Data Center Path Traversal Vulnerability |
| CVE-2019-0859 RansomwareIn wildKEV | WI Windows Microsoft | 7.8 | Apr 9 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2019-0841 RansomwareIn wildKEV | WI Windows Microsoft | 7.8 | Apr 9 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability |
| CVE-2019-0803 RansomwareIn wildKEV | WI Windows Microsoft | 7.8 | Apr 9 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2019-0752 RansomwareIn wildKEV | IE Internet Explorer 10 Microsoft | 7.5 | Apr 9 | Microsoft Internet Explorer Type Confusion Vulnerability |
| CVE-2019-0797 In wildKEV | WI Windows Microsoft | 7.8 | Apr 9 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2019-0808 In wildKEV | WI Windows Microsoft | 7.8 | Apr 9 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2019-0703 In wildKEV | WI Windows Microsoft | 6.5 | Apr 8 | Microsoft Windows SMB Information Disclosure Vulnerability |
| CVE-2019-0211 In wildKEV | HS HTTP Server Apache | 7.8 | Apr 8 | Apache HTTP Server Privilege Escalation Vulnerability |
| CVE-2019-11001 In wildKEV | CP C1 Pro Firmware Reolink | 7.2 | Apr 8 | Reolink Multiple IP Cameras OS Command Injection Vulnerability |
| CVE-2018-4344 In wildKEV | IO iOS Apple | 7.8 | Apr 3 | Apple Multiple Products Memory Corruption Vulnerability |
| CVE-2019-5418 In wildKEV | HT https://github.com/rails/rails Rails | 7.5 | Mar 27 | Rails Ruby on Rails Path Traversal Vulnerability |
| CVE-2019-10068 In wildKEV | XP Xperience Kentico | 9.8 | Mar 26 | Kentico Xperience Deserialization of Untrusted Data Vulnerability |
| CVE-2019-3396 RansomwareIn wildKEV | CO Confluence Atlassian | 9.8 | Mar 25 | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability |
| CVE-2019-7609 In wildKEV | KI Kibana Elastic | 10.0 | Mar 25 | Kibana Arbitrary Code Execution |
| CVE-2019-9978 In wildKEV | WO WordPress WordPress | 6.1 | Mar 24 | WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability |
| CVE-2019-7238 In wildKEV | NR Nexus Repository Manager Sonatype | 9.8 | Mar 21 | Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability |
| CVE-2019-1003030 In wildKEV | JE Jenkins Jenkins | 9.9 | Mar 8 | Jenkins Matrix Project Plugin Remote Code Execution Vulnerability |
| CVE-2019-1003029 In wildKEV | JE Jenkins Jenkins | 9.9 | Mar 8 | Jenkins Script Security Plugin Sandbox Bypass Vulnerability |
| CVE-2018-18809 In wildKEV | TJ TIBCO JasperReports Library TIBCO Software Inc. | 6.5 | Mar 7 | TIBCO JasperReports Library Directory Traversal Vulnerability |
| CVE-2019-0676 In wildKEV | IE Internet Explorer 10 Microsoft | 6.5 | Mar 5 | Microsoft Internet Explorer Information Disclosure Vulnerability |
| CVE-2019-0604 RansomwareIn wildKEV | SH SharePoint Microsoft | 9.8 | Mar 5 | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2019-6223 In wildKEV | IO iOS Apple | 7.5 | Mar 5 | Apple iOS and macOS Group Facetime Vulnerability |
| CVE-2019-9082 In wildKEV | OS Open Source Background Management System Opensourcebms | 8.8 | Feb 24 | ThinkPHP Remote Code Execution Vulnerability |
| CVE-2019-6340 In wildKEV | DR Drupal Drupal | 8.1 | Feb 21 | Drupal core - Highly critical - Remote Code Execution |
| CVE-2019-8394 In wildKEV | MA ManageEngine ADSelfService Plus Zoho | 6.5 | Feb 17 | Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability |
| CVE-2018-20250 RansomwareIn wildKEV | WI WinRAR Check Point Software Technologies Ltd. | 7.8 | Feb 5 | WinRAR Absolute Path Traversal Vulnerability |
| CVE-2018-20753 RansomwareIn wildKEV | VS Virtual System Administrator Kaseya | 9.8 | Feb 5 | Kaseya VSA Remote Code Execution Vulnerability |
| CVE-2017-18362 RansomwareIn wildKEV | MA Manageditsync Connectwise | 9.8 | Feb 5 | Kaseya VSA SQL Injection Vulnerability |
| CVE-2019-1653 In wildKEV | CS Cisco Small Business RV Series Router Firmware Cisco | 7.5 | Jan 24 | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability |
| CVE-2019-1652 In wildKEV | CS Cisco Small Business RV Series Router Firmware Cisco | 7.2 | Jan 24 | Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability |
| CVE-2018-13374 RansomwareIn wildKEV | FO FortiOS Fortinet | 4.3 | Jan 22 | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability |
| CVE-2018-15982 RansomwareIn wildKEV | FP Flash Player Adobe | 7.8 | Jan 18 | Adobe Flash Player Use-After-Free Vulnerability |
| CVE-2019-0541 In wildKEV | OF Office Microsoft | 8.8 | Jan 8 | Microsoft MSHTML Remote Code Execution Vulnerability |
| CVE-2019-0543 RansomwareIn wildKEV | WI Windows Microsoft | 7.8 | Jan 8 | Microsoft Windows Privilege Escalation Vulnerability |