CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 10:04 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2018-19320 RansomwareIn wildKEV | AG Aorus Graphics Engine Gigabyte | 7.8 | Dec 21 | GIGABYTE Multiple Products Unspecified Vulnerability |
| CVE-2018-19321 RansomwareIn wildKEV | AG Aorus Graphics Engine Gigabyte | 7.8 | Dec 21 | GIGABYTE Multiple Products Privilege Escalation Vulnerability |
| CVE-2018-19322 RansomwareIn wildKEV | AG Aorus Graphics Engine Gigabyte | 7.8 | Dec 21 | GIGABYTE Multiple Products Code Execution Vulnerability |
| CVE-2018-8653 In wildKEV | IE Internet Explorer 10 Microsoft | 7.5 | Dec 20 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-8611 In wildKEV | WI Windows Microsoft | 7.8 | Dec 12 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| CVE-2018-8639 RansomwareIn wildKEV | WI Windows Microsoft | 7.8 | Dec 12 | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability |
| CVE-2018-20062 In wildKEV | NO Nonecms 5none | 9.8 | Dec 11 | ThinkPHP "noneCms" Remote Code Execution Vulnerability |
| CVE-2018-17480 In wildKEV | CH Chrome Google | 8.8 | Dec 11 | Google Chromium V8 Out-of-Bounds Write Vulnerability |
| CVE-2018-1000861 In wildKEV | JE Jenkins Jenkins | 9.8 | Dec 10 | A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in… |
| CVE-2018-19410 In wildKEV | PN Prtg Network Monitor Paessler | 9.8 | Nov 21 | Paessler PRTG Network Monitor Local File Inclusion Vulnerability |
| CVE-2018-6065 In wildKEV | CH Chrome Google | 8.8 | Nov 14 | Google Chromium V8 Integer Overflow Vulnerability |
| CVE-2018-17463 In wildKEV | CH Chrome Google | 8.8 | Nov 14 | Google Chromium V8 Remote Code Execution Vulnerability |
| CVE-2018-8589 In wildKEV | W7 Windows 7 Microsoft | 7.8 | Nov 14 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2018-8581 RansomwareIn wildKEV | ES Exchange Server Microsoft | 7.4 | Nov 14 | Microsoft Exchange Server Privilege Escalation Vulnerability |
| CVE-2018-14667 In wildKEV | RI RichFaces [UNKNOWN] | 9.8 | Nov 6 | The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource |
| CVE-2018-14558 In wildKEV | AF Ac10 Firmware Tenda | 9.8 | Oct 30 | Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability |
| CVE-2018-8453 RansomwareIn wildKEV | WI Windows Microsoft | 7.8 | Oct 10 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2018-14634 In wildKEV | KE Kernel Linux | 7.8 | Sep 25 | Linux Kernel Integer Overflow Vulnerability |
| CVE-2018-15961 In wildKEV | CO ColdFusion Adobe | 9.8 | Sep 25 | Adobe ColdFusion Unrestricted File Upload Vulnerability |
| CVE-2018-8440 RansomwareIn wildKEV | WI Windows Microsoft | 7.8 | Sep 13 | Microsoft Windows Privilege Escalation Vulnerability |
| CVE-2018-11776 In wildKEV | ST Struts Apache | 8.1 | Aug 22 | Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like… |
| CVE-2018-8414 In wildKEV | WI Windows Microsoft | 8.8 | Aug 15 | Microsoft Windows Shell Remote Code Execution Vulnerability |
| CVE-2018-8406 RansomwareIn wildKEV | WI Windows Microsoft | 7.8 | Aug 15 | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability |
| CVE-2018-8405 RansomwareIn wildKEV | WI Windows Microsoft | 7.8 | Aug 15 | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability |
| CVE-2018-8373 In wildKEV | IE Internet Explorer 10 Microsoft | 7.5 | Aug 15 | Microsoft Scripting Engine Memory Corruption Vulnerability |
| CVE-2018-15133 In wildKEV | LA Laravel Laravel | 8.1 | Aug 9 | In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value |
| CVE-2018-14933 In wildKEV | NF Nvrmini Firmware Nuuo | 9.8 | Aug 4 | NUUO NVRmini Devices OS Command Injection Vulnerability |
| CVE-2018-14847 In wildKEV | RO Routeros Mikrotik | 9.1 | Aug 2 | MikroTik Router OS Directory Traversal Vulnerability |
| CVE-2018-7602 RansomwareIn wildKEV | DR Drupal Drupal | 9.8 | Jul 19 | Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004 |
| CVE-2018-8298 In wildKEV | CH ChakraCore Microsoft | 7.5 | Jul 11 | ChakraCore Scripting Engine Type Confusion Vulnerability |
| CVE-2018-4990 In wildKEV | AA Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions | 8.8 | Jul 9 | Adobe Acrobat and Reader Double Free Vulnerability |
| CVE-2018-5002 In wildKEV | AF Adobe Flash Player 29.0.0.171 and earlier versions | 7.8 | Jul 9 | Adobe Flash Player Stack-based Buffer Overflow Vulnerability |
| CVE-2018-9276 In wildKEV | PN Prtg Network Monitor Paessler | 7.2 | Jul 2 | Paessler PRTG Network Monitor OS Command Injection Vulnerability |
| CVE-2018-6961 In wildKEV | NS NSX SD-WAN by VeloCloud VMware | 8.1 | Jun 11 | VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability |
| CVE-2016-9079 In wildKEV | FI Firefox Mozilla | 7.5 | Jun 11 | Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability |
| CVE-2018-0296 In wildKEV | CA Cisco Adaptive Security Appliance unknown | 7.5 | Jun 7 | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability |
| CVE-2018-11138 RansomwareIn wildKEV | KS Kace System Management Appliance Quest | 9.8 | May 31 | Quest KACE System Management Appliance Remote Command Execution Vulnerability |
| CVE-2018-4939 In wildKEV | CO ColdFusion Adobe | 9.8 | May 19 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
| CVE-2018-0824 In wildKEV | WI Windows Microsoft | 8.8 | May 9 | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability |
| CVE-2018-8174 RansomwareIn wildKEV | WI Windows Microsoft | 7.5 | May 9 | Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability |
| CVE-2018-8120 RansomwareIn wildKEV | W7 Windows 7 Microsoft | 7.0 | May 9 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2018-10562 RansomwareIn wildKEV | GR Gpon Router Firmware Dasannetworks | 9.8 | May 4 | Dasan GPON Routers Command Injection Vulnerability |
| CVE-2018-10561 In wildKEV | GR Gpon Router Firmware Dasannetworks | 9.8 | May 4 | Dasan GPON Routers Authentication Bypass Vulnerability |
| CVE-2018-2628 In wildKEV | WS WebLogic Server Oracle | 9.8 | Apr 19 | Oracle WebLogic Server Unspecified Vulnerability |
| CVE-2018-5430 In wildKEV | TJ TIBCO JasperReports Server TIBCO Software Inc. | 8.8 | Apr 17 | TIBCO JasperReports Server Information Disclosure Vulnerability |
| CVE-2018-1273 RansomwareIn wildKEV | SF Spring Framework Spring by Pivotal | 9.8 | Apr 11 | Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of… |
| CVE-2018-7600 RansomwareIn wildKEV | DR Drupal Drupal | 9.8 | Mar 29 | Drupal Core Remote Code Execution Vulnerability |
| CVE-2018-0171 In wildKEV | CI Cisco IOS and IOS XE | 9.8 | Mar 28 | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability |
| CVE-2018-0151 In wildKEV | IX IOS XE Cisco | 9.8 | Mar 28 | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability |
| CVE-2018-0167 In wildKEV | IX IOS XE Cisco | 8.8 | Mar 28 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability |