Latest critical vulnerabilities
CVSS 9.0 and up.
- shabti frontend admin by dynamiappsFrontend Admin by DynamiApps <= 3.29.9 - Unauthenticated Privilege Escalation via 'item_id' Parameter9.8 Critical
- tenda ac10Tenda AC10 httpd R7WebsSecurityHandler improper authentication9.3 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Cross-Site Scripting via unicode2Emoji9.4 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Stored XSS via Attribute-View Field Names9.4 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Stored XSS via select option color9.4 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Authentication Bypass via HTTP Basic Auth9.3 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Stored Cross-Site Scripting via Column Width9.4 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Remote Code Execution via Template Calculation9.4 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Remote Code Execution via Menu Metadata9.4 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Remote Code Execution via PDF Annotations9.4 Critical
- pandora-analysis pandoraPath Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora10.0 Critical
- jackdewey link libraryLink Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter9.1 Critical
- sc0ttkclark pods – custom content types and fieldsPods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router9.8 Critical
- lb-link x-proLB-LINK X-PRO easycwmp hard-coded credentials9.2 Critical
- lb-link x-proLB-LINK X-PRO shadow hard-coded credentials9.2 Critical
- abeverley dancer2::plugin::auth::extensibleDancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in _default_email_password_reset and _default_welcome_send9.8 Critical
- linuxiommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE9.3 Critical
- linuxntfs: harden runlist realloc size calculations9.8 Critical
- linuxnetfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()9.8 Critical
- linuxKVM: arm64: vgic: Fix race between LPI release and re-registration9.3 Critical
- linuxscsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer9.8 Critical
- linuxrtase: fix double free of multi-frag skb on DMA map failure9.8 Critical
- linuxnet: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()10.0 Critical
- linuxksmbd: use memcmp() to compare ClientGUIDs9.1 Critical
- linuxKVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs9.3 Critical
- linuxKVM: s390: pci: Fix memory accounting for pinned/unpinned pages10.0 Critical
- linuxigbvf: Fix leak in TX DMA error cleanup9.8 Critical
- linuxnet/smc: fix socket use-after-free during link group termination9.8 Critical
- linuxnet: bridge: stop fast-leave after deleting a port group9.8 Critical
- linuxum: vector: fix use-after-free in vector_mmsg_rx()9.8 Critical
- linuxveth: convert frag_list skbs before running XDP9.1 Critical
- linuxvxlan: use neigh_ha_snapshot() in route_shortcircuit()10.0 Critical
- linuxvxlan: use pskb_network_may_pull() for transmit path header pulls9.8 Critical
- linuxvxlan: use pskb_network_may_pull() in route_shortcircuit()9.8 Critical
libdbi-perlDebian,perl-dbiAlpaquita,perl-DBI-debuginfoRed Hat +1 more +3 moreDBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse9.1 Criticallibdbi-perlDebian,perl-DBIAzure Linux +1 moreDBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse9.8 Critical- themetechmount truebooker – appointment booking and scheduler systemTrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter9.8 Critical
- cozmoslabs user profile builder – beautiful user registration forms, user profiles & user role editorUser Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter9.8 Critical
- linuxiommu/vt-d: Clear Present bit before tearing down scalable-mode context entry9.3 Critical
- linuxrxrpc: serialize kernel accept preallocation with socket teardown9.8 Critical
- linuxrxrpc: Don't move a peeked OOB message onto the pending queue9.8 Critical
- linuxrxrpc: Fix UAF in rxgk_issue_challenge()9.8 Critical
- linuxrxrpc: Fix double unlock in rxrpc_recvmsg()9.8 Critical
- linuxafs: Fix netns teardown to cancel the preallocation charger9.8 Critical
- linuxvxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().9.8 Critical
- linuxdlm: fix add msg handle in send_queue ordered9.8 Critical
- linuxipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD9.8 Critical
- linuxRDMA/srpt: fix integer overflow in immediate data length check9.8 Critical
- linuxnvme-multipath: fix flex array size in struct nvme_ns_head9.8 Critical
- linuxmd/raid10: reset read_slot when reusing r10bio for discard9.8 Critical
- Show moreLoading…