CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 13:46 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-42883 | Product not mapped yet | 2.7 | Nov 11 | Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges uploads files to… |
| CVE-2025-64682 | HU Hub Jetbrains | 3.7 | Nov 10 | In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit |
| CVE-2025-64681 | HU Hub Jetbrains | 3.7 | Nov 10 | In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations |
| CVE-2025-12919 | EV Evershop Evershop | 3.7 | Nov 9 | A vulnerability was detected in EverShop up to 2.0.1 |
| CVE-2025-64481 | Product not mapped yet | 2.7 | Nov 7 | Datasette is an open source multi-tool for exploring and publishing data |
| CVE-2025-12854 | Product not mapped yet | 3.7 | Nov 7 | A vulnerability was identified in newbee-mall-plus up to 2.4.1 |
| CVE-2025-11219 | CH Chrome Google | 3.1 | Nov 6 | Use after free in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page |
| CVE-2025-64326 | WE Weblate Weblate | 3.5 | Nov 6 | Weblate is a web based localization tool |
| CVE-2025-21077 | EM Email Samsung | 3.3 | Nov 5 | Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege |
| CVE-2025-43442 | IO iOS Apple | 3.3 | Nov 4 | A permissions issue was addressed with additional restrictions |
| CVE-2025-43423 | IO iOS Apple | 2.0 | Nov 4 | A logging issue was addressed with improved data redaction |
| CVE-2025-43408 | MA macOS Apple | 2.4 | Nov 4 | This issue was addressed by restricting options offered on a locked device |
| CVE-2025-43395 | MA macOS Apple | 3.3 | Nov 4 | This issue was addressed with improved handling of symlinks |
| CVE-2025-43365 | IO iOS Apple | 2.8 | Nov 4 | A denial-of-service issue was addressed with improved input validation |
| CVE-2025-43350 | IO iOS Apple | 2.4 | Nov 4 | A permissions issue was addressed with additional restrictions |
| CVE-2025-43309 | IO iOS Apple | 2.4 | Nov 4 | A logic issue was addressed with improved checks |
| CVE-2025-12623 | Product not mapped yet | 3.1 | Nov 3 | A vulnerability was identified in fushengqian fuint up to 41e26be8a2c609413a0feaa69bdad33a71ae8032 |
| CVE-2025-64352 | EA Essential Addons For Elementor Wpdeveloper | 2.7 | Oct 31 | Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured Access Control… |
| CVE-2025-64350 | Product not mapped yet | 3.8 | Oct 31 | Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rank… |
| CVE-2025-23050 | Product not mapped yet | 3.1 | Oct 31 | QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero) |
| CVE-2025-10636 | Product not mapped yet | 3.5 | Oct 30 | The NS Maintenance Mode for WP WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
| CVE-2025-10931 | UA Umami Analytics Umami | 3.8 | Oct 30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Umami Analytics allows Cross-Site Scripting (XSS).This issue affects… |
| CVE-2025-11203 | Product not mapped yet | 3.5 | Oct 29 | LiteLLM Information health API_KEY Information Disclosure Vulnerability |
| CVE-2025-56558 | Product not mapped yet | 3.0 | Oct 29 | The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by a client that has the correct values of AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,… |
| CVE-2025-62794 | Product not mapped yet | 3.8 | Oct 28 | GitHub Workflow Updater is a VS Code extension that automatically pins GitHub Actions to specific commits for enhanced security |