Latest critical vulnerabilities
CVSS 9.0 and up.
- linuxipvs: reset full ip_vs_seq structs in ip_vs_conn_new9.8 Critical
- linuxdrbd: reject data replies with an out-of-range payload size9.8 Critical
- linuxipvs: fix more places with wrong ipv6 transport offsets9.8 Critical
- linuxipvs: reload ip header after head reallocation9.8 Critical
- linuxksmbd: use opener credentials for FSCTL mutations9.1 Critical
- rafasashi user session synchronizerUser Session Synchronizer <= 1.4.0 - Unauthenticated Authentication Bypass to Account Takeover via 'ussync-key', 'ussync-token', and 'ussync-ref' Parameters9.8 Critical
- 6storage rentals, sixstorage 6storage rentals +1 more6Storage Rentals <= 2.27.0 - Unauthenticated Account Takeover via 'email' Parameter9.8 Critical
- pietror91 rapisafe – secure multi file upload for contact form 7RapiSafe <= 1.0.4 - Unauthenticated Arbitrary File Deletion via 'rsmfcf7_session' and 'file_name' Parameters9.1 Critical
- laravel socialiteLaravel Socialite Facebook Provider Authentication Bypass via Nonce Replay9.2 Critical
- icagenda.com icagenda extension for joomlaJoomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.119.2 Critical
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities9.9 Critical
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities9.8 Critical
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities9.8 Critical
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities9.3 Critical
- mindsdb minds platformMindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()10.0 Critical
- haiwell iot cloud hmi gatewayHaiwell IoT Cloud HMI Gateway OS Command Injection10.0 Critical
- nceas metacatMetacat has an unauthenticated SQL injection vulnerability9.8 Critical
- tenable security centerCommand Injection9.4 Critical
- tenable security centerCommand Injection9.4 Critical
- emlogemlog allows unauthenticated reinstallation via `install.php?action=reinstall`.9.8 Critical
- tenable security centerRemote Code Execution9.4 Critical
- roskus prospero flow crmUse of hard-coded credentials in Prospero Flow CRM employee onboarding9.3 Critical
bip322crates.ioBIP-322 address ownership verification bypass for P2WPKH and P2SH-P2WPKH addresses9.1 Critical- filebrowserFileBrowser before 2.63.19 Case Sensitivity Authentication Bypass9.2 Critical
- siyuan-note siyuanSiYuan before v3.7.4 SQL Injection via backlink search9.9 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Publish-Boundary Bypass via WebSocket9.2 Critical
- wishlist member memberWishlist Member X <= 3.34.1 - Unauthenticated Account Takeover via 'mergewith' Parameter9.8 Critical
- openchoreoOpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs9.6 Critical
- openchoreoOpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation9.0 Critical
- budibase serverBudibase before 3.40.0 SQL Injection via Unauthenticated Webhook9.0 Critical
- budibase serverBudibase before 3.40.0 Arbitrary File Write via Path Traversal9.4 Critical
- openwrt luciOpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass9.4 Critical
- openwrt luciluci-app-openvpn Path Traversal RCE via instance_name29.4 Critical
- filebrowserfilebrowser through 2.63.16 Privilege Escalation via Signup9.3 Critical
- freepbx ucp, sangoma freepbx +1 moreFreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection9.3 Critical
- tenda ch, cp, tx3 +2 moreTenda CH/CP/TX3 SSH hard-coded password9.2 Critical
- freepbx missedcall, sangoma freepbx +1 moreFreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover9.3 Critical
- fosowl agenticseekAgenticSeek Unauthenticated RCE via /query API Endpoint9.3 Critical
- ibm langflow oss, langflow +1 moreInsufficient Authentication Brute Force Protection on Login Endpoint9.1 Critical
- ibm documentation offlineIBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution9.8 Critical
- hashicorp toolingVault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath9.6 Critical
- triggerdotdev trigger.devTrigger.dev: Cross-project deployment worker registration can modify another project's deployment state9.9 Critical
- tenda ch10, ch7, ch7g +7 more +9 moreTenda CH7 ATE Module Kylin HandleCmd command injection9.3 Critical
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by an authenication bypass9.4 Critical
- cyberpanelCyberPanel < 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminal9.3 Critical
- gitea open source git serverTwo SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)9.1 Critical
- gitea open source git serverTeam-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting9.1 Critical
- No product listedForm::Processor::Field::HtmlArea versions from 0.06 through 1.162360 for Perl allow attacker selected method dispatch and resource exhaustion via an HTML::Tidy diagnostic that validate passes to add_e…9.1 Critical
libhtml-formhandler-perlDebian,perl-HTML-FormHandlerMageia +1 moreHTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request data…9.1 Critical- wpmanageninja fluent forms proFluent Forms Pro 6.2.7 Embedded Malicious Code via Tampered Plugin Build9.3 Critical
- Show moreLoading…