Latest critical vulnerabilities
CVSS 9.0 and up.
- linuxsctp: clear control chunk transport if it is being removed9.8 Critical
- linuxipvs: clear IPv4 options after rebasing tunnel ICMP errors9.8 Critical
- linuxnet: fix skb length accounting after generic XDP frag adjustment9.1 Critical
- linuxinet: frags: publish queues before arming timer9.8 Critical
- linuxtracing: Fix race between update_event_fields and, event_define_fields10.0 Critical
- linuxnet/x25: fix use-after-free of the socket by its timers9.8 Critical
- linuxnet: atlantic: free stranded TX buffers on ring deinit10.0 Critical
- linuxdibs: initialise dibs->lock in dibs_dev_alloc()9.8 Critical
- linuxxdp: reject clones that overrun skb_shared_info tailroom9.8 Critical
- linuxveth: fix skb length accounting after XDP frag adjustment10.0 Critical
- linuxtls: rx: restore msg_iter before TLS 1.3 optimistic retry9.8 Critical
- linuxsmb: client: Fix use-after-free in cifs_try_adding_channels()9.8 Critical
- linuxip6_tunnel: clear skb2->cb[] in ip6ip6_err()9.8 Critical
- linuxmm/filemap: __filemap_add_folio() restore index before retrying9.8 Critical
- linuxsctp: keep chunk->transport in step with the list it is queued on9.8 Critical
- linuxsctp: fix use-after-free of cached ASCONF chunk9.8 Critical
- linuxsctp: clear new_transport when removing a peer9.8 Critical
- westguard ws form lite – drag & drop contact form builderWS Form LITE <= 1.10.80 - Unauthenticated PHP Object Injection via Form Submission9.8 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.210.0 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.29.3 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.29.3 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.210.0 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.29.5 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.210.0 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.210.0 Critical
- No product listedPunk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them9.1 Critical
- No product listedPunk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret9.1 Critical
- trendnet tew-821dapTRENDnet TEW-821DAP NTP Timezone Configuration apply_time.cgi uci_safe_get stack-based overflow10.0 Critical
- mailgun for wordpress, unknown mailgun for wordpress +1 moreMailgun for WordPress <= 2.2.0 - Unauthenticated Server-Side Request Forgery (SSRF) via 'addresses' Array Keys9.8 Critical
- google cloud application integrationMissing Authorization in Application Integration QueryEngineTask9.3 Critical
- opensslAEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()9.1 Critical
- unknown smilepass selfie loginSmilePass Selfie Login <= 1.0.2 - Unauthenticated Authentication Bypass9.8 Critical
- unknown social login & sharing buttons with analytics by socleverSocial Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication Bypass9.8 Critical
- unknown wp social media loginWP Social Media Login <= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow9.8 Critical
- 4xmen xshopxShop: Unrestricted File Upload in File Attachment Module in Admin panel leads to Arbitrary Code Execution9.1 Critical
- jsonata-js jsonataJSONata: Arbitrary Code Execution via crafted JSONata expressions9.3 Critical
- jsonata-js jsonataJSONata: Arbitrary Code Execution via crafted JSONata expressions9.3 Critical
- jsonata-js jsonataJSONata: Arbitrary Code Execution via crafted JSONata expressions9.3 Critical
- xorbits inferenceXinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsing10.0 Critical
- phalcon cphalconPhalcon Volt compiler `join` filter compile-time PHP code injection (SSTI lead to RCE)9.2 Critical
- geotoolsGeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers9.8 Critical
- aws athena federated query neptune connectorCode Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector9.4 Critical
- omnigent-ai omnigentOmnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE9.0 Critical
- amazon freertos, freertos freertos-kernel +1 moreImproper input validation in FreeRTOS-Kernel timer command handling9.3 Critical
- linuxnet: ipv6: clear suppressed fib6 rule result9.8 Critical
- jet admin adminJet Admin tenant isolation failure9.2 Critical
- microsoft azure sql databaseAzure SQL Database Elevation of Privilege Vulnerability10.0 Critical
- paperclipai paperclipPaperclip before 0.3.1 Remote Code Execution via DNS Rebinding9.4 Critical
- lxc incusArbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root9.9 Critical
- lxc incusIncus vulnerable to root RCE via image backup.yaml symlink9.9 Critical
- Show moreLoading…