Latest critical vulnerabilities
CVSS 9.0 and up.
- flowiseai flowiseFlowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation9.4 Critical
- hewlett packard enterprise (hpe) edgeconnect sd-wan orchestratorAuthentication bypass via spoofed HTTP headers Orchestrator REST API9.8 Critical
- hewlett packard enterprise (hpe) edgeconnect sd-wan orchestratorAuthentication bypass via spoofed HTTP headers Orchestrator REST API9.8 Critical
- flowiseai flowiseFlowise RCE via SQLite Record Manager Node9.4 Critical
- samsung open source oneA vulnerability allowing remote unauthenticated code execution on the agent host.10.0 Critical
- veeam service provider consoleA vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to...9.5 Critical
- veeam service provider consoleA vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management...9.0 Critical
- flowiseai flowiseFlowise: Remote Code Execution Vulnerability in CSVAgent9.4 Critical
- flowiseai flowiseFlowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified9.2 Critical
- microck opencode-studioOpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/music9.3 Critical
- flowiseai flowiseFlowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override9.4 Critical
- cinnamon kotaemonkotaemon 0.12.0 Unauthenticated Remote Code Execution via Insecure Deserialization9.3 Critical
- flowiseai flowiseFlowise Sandbox Escape to RCE9.0 Critical
- qualcomm ar8035 firmware, cologne firmware, cq7790 firmware +199 more +201 moreStack-based Buffer Overflow in WLAN Firmware9.6 Critical
- openmeterStored Clickhouse SQL Injection Through Customer Usage Attribution9.3 Critical
- flowiseai flowise, flowise-components +1 moreFlowise RCE via TypeORM DataSource9.0 Critical
- bos ip cameraPuwell IP Camera 2.x - 4.x Unauthenticated Access via TCP Port 234569.3 Critical
- bos ip cameraPuwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell9.3 Critical
- eclipse miloIn Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable...9.1 Critical
- bilin software and informatics consultancy inc. humanist digital human resourcesHardcoded Cryptographic Key in Bilin Software's HUMANIST Digital Human Resources9.1 Critical
- bilin software and informatics consultancy inc. humanist digital human resourcesUnrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources9.8 Critical
- bilin software and informatics consultancy inc. humanist digital human resourcesQuery Console SQL Injection Leading to Sensitive Data Disclosure in Bilin Software's HUMANIST Digital Human Resources9.8 Critical
- geovision inc. gv-as1620 (gv-cloud)Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-Cloud)9.1 Critical
- geovision inc. gv-as1620 (as-manager)Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-ASManager)9.1 Critical
- linux, linux kernel +1 moresctp: don't free the ASCONF's own transport in DEL-IP processing9.8 Critical
- unknown easy integration for dropboxEasy Dropbox Integration < 2.2.0 - Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX9.3 Critical
- unknown improve seoImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution9.8 Critical
- gl.inet gl-mt3000GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection9.3 Critical
- No product listedIncorrect access control in the Executive Services dynamic application start path component of...9.1 Critical
- No product listedH3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010...9.8 Critical
- gl.inet gl-mt3000GL.iNet GL-MT3000 modem.so glc set_upgrade command injection9.3 Critical
- gl.inet gl-mt3000GL.iNet GL-MT3000 modem.so glc remove_profile command injection9.3 Critical
- adobe campaign classic, campaign +1 moreAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)10.0 Critical
- adobe campaign classic, campaign +1 moreAdobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)9.8 Critical
- adobe campaign classic, campaign +1 moreAdobe Campaign Classic (ACC) | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)9.6 Critical
- adobe campaign classic, campaign +1 moreAdobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)10.0 Critical
- adobe campaign classic, campaign +1 moreAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)10.0 Critical
- adobe campaign classic, campaign +1 moreAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)9.9 Critical
- tenable, inc. sensor proxySensor Proxy Version 1.4.2 Fixes One Vulnerability9.3 Critical
- misskey-dev misskeyMisskey: JSON-LD signature validation + compaction may lead to improper activity handling9.2 Critical
- sequelizeSequelize: SQL Injection (Oracle DB)9.8 Critical
- emlogEmlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php9.1 Critical
- gl-inet gl-mt3000GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection9.3 Critical
- gl-inet gl-mt3000GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection9.3 Critical
- gl-inet gl-mt3000GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection9.3 Critical
- gl-inet gl-mt3000GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection9.3 Critical
- gl-inet gl-mt3000GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection9.3 Critical
- open-emr openemrOpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection9.4 Critical
- krayin laravel-crmKrayin CRM 2.2.4 Missing Authentication via install/api/admin-config-setup9.3 Critical
- gl.inet gl-mt3000GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection9.3 Critical
- Show moreLoading…