Latest critical vulnerabilities
CVSS 9.0 and up.
- linuxs390/vfio_ccw: Limit the number of channel program segments9.3 Critical
- linuxs390/vfio_ccw: Ensure first IDAW remains constant9.3 Critical
- linuxceph: avoid fs reclaim while using current->journal_info9.8 Critical
- linuxovpn: finish crypto callback cleanup before peer release9.8 Critical
- linuxsctp: validate cookie AUTH state before use9.8 Critical
- linuxriscv: lib: Fix ZBB strnlen reading past count boundary9.4 Critical
- linuxnetfilter: flowtable: publish GC-visible tuple last9.8 Critical
- linuxipvlan: inherit needed_headroom and needed_tailroom from phy_dev9.8 Critical
- linuxmacvlan: inherit needed_headroom and needed_tailroom from lowerdev9.8 Critical
- linuxnet: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG9.8 Critical
- kyvernoKyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system9.6 Critical
- tubitak bilgem software technologies research institute liderahenkUse of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk9.1 Critical
- google cloud bigquery data transfer serviceRemote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection9.4 Critical
- wedevs erp: complete hr, accounting & crm suite built for woocommerceERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment9.8 Critical
- ubiquiti inc unifi protect ai keyA malicious actor with access to the network could exploit an Improper Access Control...9.8 Critical
- ubiquiti inc unifi talk applicationA malicious actor with access to the network could exploit an Improper Input Validation...10.0 Critical
- ubiquiti inc unifi access applicationA malicious actor with access to the network and low privileges could exploit an Improper Access...9.9 Critical
- ubiquiti inc unifi enterprise audio/video bridgeA malicious actor with access to the network could exploit an Improper Input Validation...9.8 Critical
- ubiquiti inc unifi connect display cast proA malicious actor with access to the network and under certain conditions could exploit an...9.0 Critical
- @clerk express, ubiquiti inc cloud gateways, cloud keys +11 more +13 moreA malicious actor with access to the network could exploit an Improper Neutralization of CRLF...10.0 Critical
- @clerk express, ubiquiti inc cloud gateways, cloud keys +11 more +13 moreA malicious actor with access to the network and under certain conditions could exploit an...9.0 Critical
- getgrav gravGrav before 1.0.18 Authentication Bypass via Scoped API Key9.3 Critical
- getgrav gravGrav before 1.0.18 Authentication Bypass via Scoped API Key9.3 Critical
- ubiquiti inc unifi protect applicationA malicious actor with access to the network and low privileges could exploit an Improper Input...9.9 Critical
- ubiquiti inc unifi access applicationA malicious actor with access to the network and low privileges could exploit an Improper Input...9.9 Critical
- ubiquiti inc unifi access applicationA malicious actor with access to the network and low privileges could exploit an Improper Input...9.9 Critical
- ubiquiti inc cloud gateways, cloud keys, dream machines +10 more +12 moreA malicious actor with access to the network, low privileges and under certain conditions could...9.0 Critical
- tarscloud tarswebTarsWeb through 3.0.14 Authentication Bypass via Spoofed X-Forwarded-For and uid Parameter9.3 Critical
- ubiquiti inc unifi access applicationA malicious actor with access to the network and low privileges could exploit an Improper Input...9.9 Critical
- ubiquiti inc uid enterprise agentA malicious actor with access to the network and high privileges could exploit an Improper Input...9.1 Critical
- ubiquiti inc unifi network applicationA malicious actor with access to the network and high privileges could exploit an Improper Access...9.1 Critical
- ubiquiti inc unifi os serverA malicious actor with access to the network and high privileges could exploit an Improper Input...9.1 Critical
- ubiquiti inc unifi os serverA malicious actor with access to the network and high privileges could exploit an Improper Input...9.1 Critical
- ubiquiti inc unifi protect applicationA malicious actor with access to the network could exploit an Improper Input Validation...10.0 Critical
- ubiquiti inc cloud gateways, cloud keys, dream machines +10 more +12 moreA malicious actor with access to the network and low privileges could exploit an Improper Access...9.9 Critical
- ubiquiti inc unifi network applicationA malicious actor with access to the network and high privileges could exploit an Improper Input...9.1 Critical
- calcprogrammer1 openrgbOpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings9.3 Critical
- ubiquiti inc cloud gateways, cloud keys, dream machines +10 more +12 moreA malicious actor with access to the network and low privileges could exploit an Improper Access...9.9 Critical
- ubiquiti inc unifi protect applicationA malicious actor with access to the network and low privileges could exploit an Improper Input...9.9 Critical
- thinking software efenceThinking Software Technology｜EFence - Arbitrary File Upload9.3 Critical
- themefusion avada (fusion) builder, avada | website builder for wordpress & woocommerce +1 moreAvada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write9.8 Critical
- danfoss ic7-automation sp, ic7-hybrid, ic7-marine +2 moreDebug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software9.3 Critical
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure9.8 Critical
- No product listedIn AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering...9.8 Critical
- No product listedJeecgBoot v3.9.2 is vulnerable to Remote command execution. The CodeNode component of the AI Flow...9.8 Critical
- No product listedThe device metadata import interface /device/instance/{productId}/property-metadata/import of...9.1 Critical
- No product listeddisconf (Distributed Configuration Management Platform) 2.6.36 is vulnerable to Incorrect Access...9.8 Critical
- No product listedFuniture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select...9.8 Critical
- No product listedThe report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution....9.8 Critical
- No product listedZyplayer-Doc <=1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via WikiPageWebService...9.1 Critical
- Show moreLoading…