Latest critical vulnerabilities
CVSS 9.0 and up.
- microsoft azure confidential ledgerAzure Confidential Ledger Remote Code Execution Vulnerability9.1 Critical
- microsoft entra provisioning serviceMicrosoft Entra Provisioning Service Elevation of Privilege Vulnerability9.9 Critical
- microsoft azure active directoryAzure Active Directory Elevation of Privilege Vulnerability9.9 Critical
- microsoft copilot cowork, power apps +1 moreCopilot Cowork Elevation of Privilege Vulnerability9.3 Critical
- microsoft teamsMicrosoft Teams Elevation of Privilege Vulnerability9.6 Critical
- craftcms cmsCraft CMS before 5.10.6 Authorization Bypass via structures/move-element9.3 Critical
- open-reception appointment-booking-softwareOpenReception vulnerable to unauthenticated staff crypto poisoning that breaks E2E recipient directory9.4 Critical
- open-reception appointment-booking-softwareOpenReception: WebAuthn passkey injection allows account takeover9.8 Critical
- open-reception appointment-booking-softwareOpenReception: Tenant admin self-promotes to GLOBAL_ADMIN9.9 Critical
- open-reception appointment-booking-softwareOpenReception has unauthenticated GLOBAL_ADMIN account creation post-bootstrap9.8 Critical
- google chromeUse after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...9.6 Critical
- google chromeUse after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote...9.6 Critical
- google chromeInsufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109...9.6 Critical
- google chromeUse after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...9.6 Critical
- google chromeOut of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...9.6 Critical
- google chromeUse after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote...9.6 Critical
- sophos endpoint for macos, home for macos +1 moreA privilege escalation vulnerability allows local users to execute arbitrary code as root via...9.3 Critical
- wgdashboardWGDashboard Server-Side Template Injection vulnerability9.8 Critical
- wgdashboardWGDashboard Remote Code Execution vulnerability9.8 Critical
- wgdashboardWGDashboard Server-Side Request Forgery Vulnerability9.8 Critical
- datalinkdc dinkyDinky Unauthenticated Arbitrary File Write via /download/uploadFromRsByLocal Gated Only by Hardcoded Default Token9.3 Critical
- contiki-ngContiki-NG MQTT Client Out-of-Bounds Write in PUBLISH Topic Parser via Persistent State Between TCP Segments9.2 Critical
- apple macosAn authentication issue was addressed with improved state management. This issue is fixed in...9.8 Critical
- wso2 api control plane, api manager, api manager publisher rest api v4 +4 more +6 moreArbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution9.1 Critical
- wso2 api control plane, api manager, carbon api management implementation +3 more +5 moreAccess Control Bypass via Publisher REST APIs in Multiple WSO2 Products Allows Cross-Tenant Operations9.0 Critical
- unknown google-maps-easy-pro, supsystic-gallery-pro, tables-generator-pro +2 moreSupsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server9.8 Critical
- unknown premium seoPremium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection)10.0 Critical
- monsterinsights pro, unknown monsterinsights pro +1 moreMonsterInsights Pro 10.2.0/10.2.2 - Backdoored via AWS S3 bucket compromise10.0 Critical
- ggml llama.cppllama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoints9.2 Critical
- ggml llama.cppllama.cpp b7492–b9060 Use-After-Free RCE via llama-server9.2 Critical
- ggml llama.cppllama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restore9.2 Critical
- efstratios goudelis ground stationGround Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL9.2 Critical
- apache apr-util, apache software foundation portable runtime utility +1 moreApache Portable Runtime Utility: apr-util XML stack recursion crash9.1 Critical
- apache software foundation portable runtime utility, apache apr-util +1 moreApache Portable Runtime Utility: SQL Injection in apr_dbd_oracle9.1 Critical
- webappick ctx feedWordPress CTX Feed plugin <= 6.6.42 - Remote Code Execution (RCE) vulnerability9.1 Critical
- brandexponents type hubWordPress Type Hub plugin <= 2.0.6 - Arbitrary File Upload vulnerability10.0 Critical
- shabti frontend admin by dynamiappsWordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Privilege Escalation vulnerability9.8 Critical
- nickboss wordpress file uploadWordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability9.3 Critical
- axiomthemes ai annWordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes agricolaWordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability9.8 Critical
- agora foundation agoraWordPress Agora theme <= 1.9 - PHP Object Injection vulnerability9.8 Critical
- ancorathemes adviceWordPress Advice theme <= 1.18.0 - PHP Object Injection vulnerability9.8 Critical
- ancorathemes adrenaWordPress Adrena theme <= 1.2.14 - PHP Object Injection vulnerability9.8 Critical
- ancorathemes accaliaWordPress Accalia theme <= 1.5.3 - PHP Object Injection vulnerability9.8 Critical
- ancorathemes abogadoWordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability9.8 Critical
- themerex abelleWordPress Abelle theme <= 1.22 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes a.williamsWordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes 69 clothingWordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability9.8 Critical
- mihche wpbruiser {no- captcha anti-spam}WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.1.43 - PHP Object Injection vulnerability9.8 Critical
- Show moreLoading…