Latest critical vulnerabilities
CVSS 9.0 and up.
- linuxamt: re-read skb header pointers after every pull9.8 Critical
- linuxsctp: auth: verify auth requirement when auth_chunk is NULL9.8 Critical
- linuxmedia: cx231xx: fix devres lifetime9.8 Critical
- linuxmedia: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()10.0 Critical
- linuxmptcp: fix stale skb->sk reference on subflow close9.8 Critical
- linuxsctp: close UDP tunnel sockets during netns teardown9.8 Critical
- linuxceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()9.8 Critical
- linuxlibceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE9.8 Critical
- linuxlibceph: Fix multiplication overflow in decode_new_up_state_weight()9.8 Critical
- linuxlibceph: refresh auth->authorizer_buf{,_len} after authorizer update9.8 Critical
- linuxlibceph: reject zero bucket types in crush_decode9.8 Critical
- linuxphonet: pep: fix use-after-free in pep_get_sb()9.8 Critical
- linuxnet/x25: fix use-after-free in x25_kill_by_neigh()9.8 Critical
- linuxnet: gro: fix double aggregation of flush-marked skbs9.8 Critical
- linuxila: reload IPv6 header after pskb_may_pull in checksum adjust9.8 Critical
- linuxmctp: serial: handle zero-length frames to prevent rx buffer overflow9.6 Critical
- linuxopenvswitch: fix GSO userspace truncation underflow9.8 Critical
- linuxtipc: clear sock->sk on the failed-insert path in tipc_sk_create()9.8 Critical
- linuxksmbd: fix path resolution in ksmbd_vfs_kern_path_create9.1 Critical
- dulldusk phpfmdulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access9.8 Critical
- dulldusk phpfmdulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Upload9.8 Critical
- alseambusher crontab-uialseambusher crontab-ui - Unauthenticated RCE via Newline Injection in env_vars Parameter9.8 Critical
- alseambusher crontab-uialseambusher crontab-ui - Unauthenticated RCE via Shell Injection in Imported Database hook Field9.8 Critical
- duhow xiaoai-patchduhow xiaoai-patch - OS Command Injection in /mute and /unmute Endpoints9.8 Critical
- nasa fprime-gdsNASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection9.8 Critical
- daptindaptin - Authentication Bypass via Null Owner Permission Check on usergroup Objects9.1 Critical
- cube-root directory-servecube-root directory-serve - Unauthenticated Path Traversal Arbitrary File Deletion9.1 Critical
- asyncfuncai deepwiki-opendeepwiki-open - Unauthenticated Path Traversal Leading to Arbitrary File Write and Delete9.8 Critical
- tencent apijsonTencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form Bypass9.8 Critical
- fosrl pangolinfosrl Pangolin - Access Token Scope Bypass Allows Cross-Resource Authentication9.6 Critical
- apache rangerApache Ranger: OS Command Injection via Username in UnixUserGroupBuilder9.8 Critical
- apache rangerApache Ranger: SQL Injection vulnerability in lookup functionality9.8 Critical
- apache rangerApache Ranger: Privilege Escalation via URL Parameter9.8 Critical
- apache rangerApache Ranger: Remote Code Execution via JDBC URL Injection9.8 Critical
- apache rangerApache Ranger: Remote Code Execution via Arbitrary Class Instantiation9.8 Critical
- apache rangerApache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator9.8 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.7.210.0 Critical
- tychesoftwares product input fields for woocommerceProduct Input Fields for WooCommerce < 2.0.2 - Unauthenticated Arbitrary File Upload9.8 Critical
- prosolution wp client, unknown prosolution wp client +1 moreProSolution WP Client < 2.0.6 - Unauthenticated Blind SQLi via 'jobID' Parameter9.1 Critical
- britcoder single sign on for tngSingle Sign On For TNG < 2.2.0 - Unauthenticated Arbitrary Password Reset9.8 Critical
- unknown foodboxbookerFoodBoxBooker < 1.0.7 - Unauthenticated Arbitrary Password Reset9.8 Critical
- shenzhen aitemi m300 wi-fi repeaterShenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf command injection9.3 Critical
- infinitewp client, unknown infinitewp client +1 moreInfiniteWP Client < 1.13.6 - Unauthenticated Administrator Account Takeover on Multisite9.8 Critical
- unknown wp directory kitWP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' Parameter9.1 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via openvpn function9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via macfilter9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via porTrigger function9.3 Critical
- msi radix axe6600MSI Radix AXE6600 v781521 Command Injection via portFw function9.3 Critical
- Show moreLoading…