CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 13:03 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2017-0001 In wildKEV | WG Windows GDI Microsoft Corporation | 7.8 | Mar 17 | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability |
| CVE-2017-0147 RansomwareIn wildKEV | WS Windows SMB Microsoft Corporation | 7.5 | Mar 17 | Microsoft Windows SMBv1 Information Disclosure Vulnerability |
| CVE-2017-0022 In wildKEV | XC XML Core Services Microsoft Corporation | 6.5 | Mar 17 | Microsoft XML Core Services Information Disclosure Vulnerability |
| CVE-2017-0059 In wildKEV | IE Internet Explorer Microsoft Corporation | 4.3 | Mar 17 | Microsoft Internet Explorer Information Disclosure Vulnerability |
| CVE-2017-5638 RansomwareIn wildKEV | ST Struts Apache | 9.8 | Mar 11 | The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload… |
| CVE-2017-6334 In wildKEV | DS Dgn2200 Series Firmware Netgear | 8.8 | Mar 6 | NETGEAR DGN2200 Devices OS Command Injection Vulnerability |
| CVE-2017-0037 In wildKEV | IB Internet Browser Microsoft Corporation | 8.1 | Feb 26 | Microsoft Edge and Internet Explorer Type Confusion Vulnerability |
| CVE-2017-6077 In wildKEV | DF Dgn2200 Firmware Netgear | 9.8 | Feb 22 | NETGEAR DGN2200 Remote Code Execution Vulnerability |
| CVE-2016-10174 In wildKEV | DF D6100 Firmware Netgear | 9.8 | Jan 30 | NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability |
| CVE-2016-5198 In wildKEV | CH Chrome Google | 8.8 | Jan 19 | Google Chromium V8 Out-of-Bounds Memory Vulnerability |
| CVE-2017-5521 In wildKEV | AF Ac1450 Firmware Netgear | 8.1 | Jan 17 | NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability |
| CVE-2016-10033 In wildKEV | JO Joomla Joomla | 9.8 | Dec 30 | The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute… |
| CVE-2016-7262 In wildKEV | EX Excel Microsoft | 7.8 | Dec 20 | Microsoft Office Security Feature Bypass Vulnerability |
| CVE-2016-7892 In wildKEV | AF Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier | 8.8 | Dec 15 | Adobe Flash Player Use-After-Free Vulnerability |
| CVE-2016-6277 In wildKEV | DF D6220 Firmware Netgear | 8.8 | Dec 14 | NETGEAR Multiple Routers Remote Code Execution Vulnerability |
| CVE-2016-9563 In wildKEV | NA Netweaver Application Server Java Sap | 6.5 | Nov 23 | SAP NetWeaver XML External Entity (XXE) Vulnerability |
| CVE-2016-8562 In wildKEV | SC Simatic CP 1543-1 Firmware Siemens | 7.5 | Nov 18 | Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability |
| CVE-2016-5195 In wildKEV | KE Kernel Linux | 7.0 | Nov 10 | Linux Kernel Race Condition Vulnerability |
| CVE-2016-7200 In wildKEV | ED Edge Microsoft | 8.8 | Nov 10 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… |
| CVE-2016-7201 In wildKEV | ED Edge Microsoft | 8.8 | Nov 10 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… |
| CVE-2016-7256 In wildKEV | WI Windows Microsoft | 8.8 | Nov 10 | Microsoft Windows Open Type Font Remote Code Execution Vulnerability |
| CVE-2016-7255 RansomwareIn wildKEV | W1 Windows 10 1507 Microsoft | 7.8 | Nov 10 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2016-7855 In wildKEV | FP Flash Player Adobe | 8.8 | Nov 1 | Adobe Flash Player Use-After-Free Vulnerability |
| CVE-2016-7193 In wildKEV | OF Office Microsoft | 7.8 | Oct 14 | Microsoft Office Memory Corruption Vulnerability |
| CVE-2016-3393 In wildKEV | WI Windows Microsoft | 7.8 | Oct 14 | Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability |
| CVE-2016-3298 In wildKEV | IE Internet Explorer Microsoft | 6.5 | Oct 14 | Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability |
| CVE-2016-6415 In wildKEV | IX IOS XE Cisco | 7.5 | Sep 19 | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability |
| CVE-2016-3351 RansomwareIn wildKEV | ED Edge Microsoft | 6.5 | Sep 14 | Microsoft Internet Explorer and Edge Information Disclosure Vulnerability |
| CVE-2016-4657 In wildKEV | IO iOS Apple | 8.8 | Aug 25 | Apple iOS Webkit Memory Corruption Vulnerability |
| CVE-2016-4656 In wildKEV | IO iOS Apple | 7.8 | Aug 25 | Apple iOS Memory Corruption Vulnerability |
| CVE-2016-4655 In wildKEV | IO iOS Apple | 5.5 | Aug 25 | Apple iOS Information Disclosure Vulnerability |
| CVE-2016-6366 In wildKEV | AS Adaptive Security Appliance Software Cisco | 8.8 | Aug 18 | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability |
| CVE-2016-6367 In wildKEV | AS Adaptive Security Appliance Software Cisco | 7.8 | Aug 18 | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability |
| CVE-2016-3309 RansomwareIn wildKEV | WI Windows Microsoft | 7.8 | Aug 9 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| CVE-2016-3643 In wildKEV | VM Virtualization Manager Solarwinds | 7.8 | Jun 17 | SolarWinds Virtualization Manager Privilege Escalation Vulnerability |
| CVE-2016-4171 In wildKEV | FP Flash Player Adobe | 9.8 | Jun 16 | Adobe Flash Player Remote Code Execution Vulnerability |
| CVE-2016-3235 In wildKEV | OF Office Microsoft | 7.8 | Jun 16 | Microsoft Office OLE DLL Side Loading Vulnerability |
| CVE-2016-4523 In wildKEV | VT Vtscada Trihedral | 7.5 | Jun 9 | Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability |
| CVE-2016-4437 In wildKEV | AU Aurora Apache | 9.8 | Jun 7 | Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access… |
| CVE-2016-3088 In wildKEV | AC ActiveMQ Apache | 9.8 | Jun 1 | The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request |
| CVE-2010-5326 In wildKEV | NA Netweaver Application Server Java Sap | 10.0 | May 13 | SAP NetWeaver Remote Code Execution Vulnerability |
| CVE-2016-4117 RansomwareIn wildKEV | FP Flash Player Adobe | 9.8 | May 11 | Adobe Flash Player Arbitrary Code Execution Vulnerability |
| CVE-2016-0185 In wildKEV | WI Windows Microsoft | 7.8 | May 11 | Microsoft Windows Media Center Remote Code Execution Vulnerability |
| CVE-2016-0189 RansomwareIn wildKEV | IE Internet Explorer Microsoft | 7.5 | May 11 | Microsoft Internet Explorer Memory Corruption Vulnerability |
| CVE-2016-3714 In wildKEV | UL Ubuntu Linux Canonical | 8.4 | May 5 | ImageMagick Improper Input Validation Vulnerability |
| CVE-2016-3715 In wildKEV | UL Ubuntu Linux Canonical | 5.5 | May 5 | ImageMagick Arbitrary File Deletion Vulnerability |
| CVE-2016-3718 In wildKEV | UL Ubuntu Linux Canonical | 5.5 | May 5 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability |
| CVE-2016-3081 In wildKEV | ST Struts Apache | 8.1 | Apr 26 | Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method:… |
| CVE-2016-3427 In wildKEV | CA Cassandra Apache | 9.8 | Apr 21 | Oracle Java SE and JRockit Unspecified Vulnerability |
| CVE-2016-0151 RansomwareIn wildKEV | W1 Windows 10 1507 Microsoft | 7.8 | Apr 12 | Microsoft Windows CSRSS Security Feature Bypass Vulnerability |