Latest critical vulnerabilities
CVSS 9.0 and up.
- No product listedThe front-end interface /superdiamond/preview/{projectCode}/{module}/{type} of super-diamond...9.8 Critical
nettyUbuntuThe Netty configuration distribution service (port 8283) of super-diamond-server <= 1.3.3 has no...9.8 Critical- No product listedIn DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller...9.8 Critical
- No product listedDWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '...9.8 Critical
- No product listedThe front-end interface /cms/category/list of MCMS <=6.2.0 is vulnerable to SQL injection. The...9.8 Critical
- No product listedA zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component...9.8 Critical
- No product listedAn issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src...9.3 Critical
stomperUbuntuStomper 5e2741e is vulnerable to Use-After-Free. When a client sends multiple CONNECT frames on...9.8 Criticalu-bootDebian,u-boot-nezhaUbuntu +1 moreAn issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists...9.8 Criticalu-bootDebian,u-boot-nezhaUbuntu +1 moreAn issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the...9.8 Critical- No product listedAn arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North...9.8 Critical
- No product listedCohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with...9.8 Critical
- No product listedAn issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and netlist...9.1 Critical
birdUbuntuBird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key...9.8 Critical- totolink n600rTOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow10.0 Critical
- macwarrior clipbucket-v5ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter9.2 Critical
- baptistearno typebot.ioTypeBot: Account takeover via brute-forceable 6-digit magic-link code9.1 Critical
- No product listedPunk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session9.1 Critical
- No product listedPunk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically9.8 Critical
- eosphoros-ai db-gptDB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename9.3 Critical
- nvidia openshellNVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an...9.9 Critical
- nvidia openshellNVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox...9.9 Critical
- google chromeUse after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeIncorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65...9.8 Critical
- google chromeOff-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...9.1 Critical
- google chromeUse after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...9.6 Critical
- google chromeMissing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote...9.1 Critical
- google chromeImproper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote...9.8 Critical
- google chromeUse after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeUse after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeUse after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeUse after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeUse after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeUse after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeIncorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a...9.6 Critical
- google chromeUse after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...9.6 Critical
- google chromeUse after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...9.6 Critical
- google chromeType confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeOut of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...9.6 Critical
- google chromeOut of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...9.6 Critical
- google chromeOut of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeOut of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeImproper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeUse after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- Show moreLoading…