CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 17:00 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2018-0174 In wildKEV | IX IOS XE Cisco | 8.6 | Mar 28 | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability |
| CVE-2018-0158 In wildKEV | IX IOS XE Cisco | 8.6 | Mar 28 | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability |
| CVE-2018-0175 In wildKEV | IX IOS XE Cisco | 8.0 | Mar 28 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability |
| CVE-2018-0154 In wildKEV | CI Cisco IOS | 7.5 | Mar 28 | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability |
| CVE-2018-0159 In wildKEV | IX IOS XE Cisco | 7.5 | Mar 28 | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability |
| CVE-2018-0156 In wildKEV | IX IOS XE Cisco | 7.5 | Mar 28 | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability |
| CVE-2018-0161 In wildKEV | CI Cisco IOS | 6.3 | Mar 28 | Cisco IOS Software Resource Management Errors Vulnerability |
| CVE-2018-0180 In wildKEV | CI Cisco IOS | 5.9 | Mar 28 | Cisco IOS Software Denial-of-Service Vulnerability |
| CVE-2018-0179 In wildKEV | CI Cisco IOS | 5.9 | Mar 28 | Cisco IOS Software Denial-of-Service Vulnerability |
| CVE-2018-6882 RansomwareIn wildKEV | ZC Zimbra Collaboration Suite Synacor | 6.1 | Mar 27 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability |
| CVE-2017-12319 In wildKEV | IX IOS XE Cisco | 5.9 | Mar 27 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability |
| CVE-2018-7445 In wildKEV | RO Routeros Mikrotik | 9.8 | Mar 19 | MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability |
| CVE-2018-0147 In wildKEV | CS Cisco Secure Access Control System | 9.8 | Mar 8 | Cisco Secure Access Control System Java Deserialization Vulnerability |
| CVE-2018-6530 RansomwareIn wildKEV | DF Dir-860l Firmware Dlink | 9.8 | Mar 6 | D-Link Multiple Routers OS Command Injection Vulnerability |
| CVE-2018-2380 RansomwareIn wildKEV | SC SAP CRM SAP SE | 6.6 | Mar 1 | SAP Customer Relationship Management (CRM) Path Traversal Vulnerability |
| CVE-2018-6789 RansomwareIn wildKEV | UL Ubuntu Linux Canonical | 9.8 | Feb 8 | Exim Buffer Overflow Vulnerability |
| CVE-2018-0125 In wildKEV | CR Cisco RV132W and RV134W | 9.8 | Feb 8 | Cisco VPN Routers Remote Code Execution Vulnerability |
| CVE-2018-4878 RansomwareIn wildKEV | AF Adobe Flash Player before 28.0.0.161 | 7.8 | Feb 6 | Adobe Flash Player Use-After-Free Vulnerability |
| CVE-2017-1000353 In wildKEV | JE Jenkins Jenkins | 9.8 | Jan 29 | Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution |
| CVE-2018-0798 In wildKEV | OF Office Microsoft | 8.8 | Jan 10 | Microsoft Office Memory Corruption Vulnerability |
| CVE-2018-0802 RansomwareIn wildKEV | OF Office Microsoft | 7.8 | Jan 10 | Microsoft Office Memory Corruption Vulnerability |
| CVE-2017-1000486 In wildKEV | PR Primefaces Primetek | 9.8 | Jan 3 | Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution |
| CVE-2017-17562 In wildKEV | GO Goahead Embedthis | 8.1 | Dec 12 | Embedthis GoAhead Remote Code Execution Vulnerability |
| CVE-2017-15944 In wildKEV | PA PAN-OS Palo Alto Networks | 9.8 | Dec 11 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability |
| CVE-2017-11882 RansomwareIn wildKEV | OF Office Microsoft | 7.8 | Nov 15 | Microsoft Office Memory Corruption Vulnerability |
| CVE-2017-16651 In wildKEV | DL Debian Linux Debian | 7.8 | Nov 9 | Roundcube Webmail File Disclosure Vulnerability |
| CVE-2017-5070 In wildKEV | CH Chrome Google | 8.8 | Oct 27 | Google Chromium V8 Type Confusion Vulnerability |
| CVE-2017-11292 In wildKEV | AF Adobe Flash Player version 27.0.0.159 and earlier | 8.8 | Oct 21 | Adobe Flash Player Type Confusion Vulnerability |
| CVE-2017-10271 RansomwareIn wildKEV | WS WebLogic Server Oracle | 7.5 | Oct 19 | Oracle Corporation WebLogic Server Remote Code Execution Vulnerability |
| CVE-2017-11774 In wildKEV | OU Outlook Microsoft | 7.8 | Oct 13 | Microsoft Office Outlook Security Feature Bypass Vulnerability |
| CVE-2017-11826 In wildKEV | OF Office Microsoft | 7.8 | Oct 13 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2017-12149 RansomwareIn wildKEV | JB jbossas Red Hat, Inc. | 9.8 | Oct 4 | Red Hat JBoss Application Server Remote Code Execution Vulnerability |
| CVE-2017-1000253 RansomwareIn wildKEV | KE Kernel Linux | 7.8 | Oct 4 | Linux Kernel PIE Stack Buffer Corruption Vulnerability |
| CVE-2017-12617 In wildKEV | TO Tomcat Apache | 8.1 | Oct 3 | When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g |
| CVE-2017-12240 In wildKEV | CI Cisco IOS and IOS XE | 9.8 | Sep 28 | Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability |
| CVE-2017-12233 In wildKEV | CI Cisco IOS | 7.5 | Sep 28 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability |
| CVE-2017-12237 In wildKEV | IX IOS XE Cisco | 7.5 | Sep 28 | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability |
| CVE-2017-12235 In wildKEV | CI Cisco IOS | 7.5 | Sep 28 | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability |
| CVE-2017-12234 In wildKEV | CI Cisco IOS | 7.5 | Sep 28 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability |
| CVE-2017-12231 In wildKEV | CI Cisco IOS | 7.5 | Sep 28 | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability |
| CVE-2017-12232 In wildKEV | CI Cisco IOS | 6.5 | Sep 28 | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability |
| CVE-2017-12238 In wildKEV | CI Cisco IOS | 6.5 | Sep 28 | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability |
| CVE-2015-1187 In wildKEV | DF Dir-626l Firmware Dlink | 9.8 | Sep 21 | D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability |
| CVE-2017-12615 RansomwareIn wildKEV | TO Tomcat Apache | 8.1 | Sep 19 | When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g |
| CVE-2017-9805 In wildKEV | ST Struts Apache | 8.1 | Sep 15 | The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type… |
| CVE-2017-8759 In wildKEV | MN Microsoft .NET Framework Microsoft Corporation | 7.8 | Sep 13 | Microsoft .NET Framework Remote Code Execution Vulnerability |
| CVE-2017-6627 In wildKEV | IX IOS XE Cisco | 7.5 | Sep 7 | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability |
| CVE-2017-11317 In wildKEV | UF UI For Asp.net Ajax Telerik | 9.8 | Aug 23 | Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability |
| CVE-2017-11357 RansomwareIn wildKEV | TU Telerik UI For Asp.net Ajax Progress | 9.8 | Aug 23 | Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability |
| CVE-2017-6327 In wildKEV | MG Messaging Gateway Symantec Corporation | 8.8 | Aug 11 | Symantec Messaging Gateway Remote Code Execution Vulnerability |