CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 22:42 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2015-8253 | FP Frontel Protocol Rsi Video Technologies | 3.7 | Dec 27 | The Frontel protocol before 3 on RSI Video Technologies Videofied devices sets up AES encryption but sends all traffic in cleartext, which allows remote attackers to obtain… |
| CVE-2015-4000 | IO iOS Apple | 3.7 | May 21 | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows… |
| CVE-2015-2808 | UL Ubuntu Linux Canonical | 3.7 | Apr 1 | The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for… |
| CVE-2014-8134 | KE Kernel Linux | 3.3 | Dec 12 | The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirt_enabled setting for KVM guest kernels, which makes it easier… |
| CVE-2014-3566 | MO Mac OS X Apple | 3.4 | Oct 15 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain… |
| CVE-2014-4407 | IO iOS Apple | 3.3 | Sep 18 | IOKit in Apple iOS before 8 and Apple TV before 7 does not properly initialize kernel memory, which allows attackers to obtain sensitive memory-content information via an… |
| CVE-2013-2423 In wildKEV | UL Ubuntu Linux Canonical | 3.7 | Apr 17 | Oracle JRE Unspecified Vulnerability |
| CVE-2013-0431 RansomwareIn wildKEV | JR Jre Oracle | 3.7 | Jan 31 | Oracle JRE Sandbox Bypass Vulnerability |
| CVE-2010-1323 | KE Kerberos Mit | 3.7 | Dec 2 | MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers… |
| CVE-2010-1324 | K5 Kerberos 5 Mit | 3.7 | Dec 2 | MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain… |
| CVE-2008-5161 | OP Openssh Openbsd | 3.7 | Nov 19 | Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and… |
| CVE-2005-4780 | Product not mapped yet | 3.7 | Dec 31 | Cross-site scripting (XSS) vulnerability in Fidra Lighthouse CMS 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a… |
| CVE-2005-0254 | BI Biborb Guillaumegardey | 3.7 | May 2 | BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files… |
| CVE-2002-1869 | EV Eventsave Heysoft | 3.3 | Dec 31 | Heysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does not check whether the log file can be written to, which allows attackers to prevent events from being… |