Latest critical vulnerabilities
CVSS 9.0 and up.
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Sandbox Escape via Type Hierarchy9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute Traversal9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolation9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Authentication Bypass via Bearer Token9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.0 HMAC Authentication Bypass via Environment Variable9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Weak Key Derivation via HKDF9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Plugin Import Guard Bypass9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Logging Bug and Race Condition9.3 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Stored XSS via assets endpoint9.4 Critical
- siyuan-note siyuanSiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure9.2 Critical
- siyuan-note siyuanSiYuan kernel Path Traversal via database_clean MCP tool9.3 Critical
- google cloud secops (chronicle soar)Authenticated Blind SQL Injection in Google Cloud SecOps SOAR Dashboard Widget Query Service9.4 Critical
- efm iptime a3004tEFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication10.0 Critical
- No product listedAn issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute...9.8 Critical
- No product listedBuffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute...9.8 Critical
- No product listedTenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to...9.8 Critical
- No product listedAn issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via...9.8 Critical
- No product listedAn issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the...9.8 Critical
- No product listedAn issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files...9.8 Critical
- No product listedAn issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint...9.8 Critical
- No product listedzuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup...9.8 Critical
- No product listedA heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter...9.8 Critical
- No product listedSQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code9.8 Critical
- No product listedFile Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute...9.8 Critical
- No product listedAn issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a...9.1 Critical
- No product listedSQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote...9.1 Critical
- No product listedA blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via...9.8 Critical
- No product listedAn issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company...9.8 Critical
- No product listedAn issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code...9.8 Critical
- No product listedAn issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate...9.8 Critical
- No product listedThe CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL...9.8 Critical
- No product listedMahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a...9.8 Critical
- No product listedMahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via...9.8 Critical
- No product listedMahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under...9.1 Critical
- No product listedBuffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to...9.8 Critical
- No product listedBuffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to...9.8 Critical
- No product listedA Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine...9.8 Critical
- edimax ew-7478apcEdimax EW-7478APC formWlSiteSurvey buffer overflow9.4 Critical
- edimax ew-7478apcEdimax EW-7478APC formWanTcpipSetup stack-based overflow9.4 Critical
libnet-oauth-perlDebian,perl-Net-OAuthMageia +1 moreNet::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token9.8 Criticallemonldap-ngDebianLemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO sessio…9.8 Critical- siyuan-note siyuanSiYuan kernel before 3.7.4 Unthrottled Brute-Force via API Token9.3 Critical
- phoca.cz phoca cart extension for joomlaJoomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.69.3 Critical
- reputeinfosystems contact form, survey, quiz & popup form builder – arformsContact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injection9.8 Critical
- unknown wpvivid — backup, migration & stagingWPvivid Backup & Migration < 0.9.131 - Unauthenticated Path Traversal via send_to_site_connect9.1 Critical
- nicu micle simple jwt loginSimple JWT Login < 3.6.8 - Unauthenticated Account Takeover via Missing Google id_token Audience Validation9.1 Critical
- solacewp solace extraSolace Extra <= 1.6.0 - Missing Authorization to Unauthenticated Site Content Deletion and Unauthorized Demo Import via action-import-zip AJAX Action9.1 Critical
- prosolution wp clientProSolution WP Client <= 2.0.8 - Unauthenticated Arbitrary File Deletion via 'newfilename' and 'filename' Parameters9.1 Critical
- prosolution wp clientProSolution WP Client <= 2.0.10 - Unauthenticated Arbitrary File Upload via Content-Disposition Header Filename Override9.8 Critical
- Show moreLoading…