Latest critical vulnerabilities
CVSS 9.0 and up.
- toools isquadMultiple Vulnerabilities in TOOOLS' iSquad9.3 Critical
- toools isquadMultiple Vulnerabilities in TOOOLS' iSquad9.3 Critical
- toools isquadMultiple Vulnerabilities in TOOOLS' iSquad9.3 Critical
- toools isquadMultiple Vulnerabilities in TOOOLS' iSquad9.3 Critical
- unknown ctn720-w1, lf-1541, mt7620n +13 more +15 moreZbtlink MQWrt infosrvd Command Injection9.3 Critical
- morequick mqac-7620, mqac-7620a, mqap-7620 +12 more +14 moreZbtlink MQWrt yunmgrd Cloud C2 Implant9.3 Critical
- hashthemes hash formWordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability9.8 Critical
- jonathan de jong beautiful taxonomy filtersWordPress Beautiful Taxonomy Filters plugin <= 2.4.6 - SQL Injection vulnerability9.3 Critical
- infinitum form geo controllerWordPress Geo Controller plugin <= 8.9.8 - PHP Object Injection vulnerability9.8 Critical
- wp manage ninja fluent boards proWordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Upload vulnerability9.1 Critical
- epaycoWordPress Epayco plugin <= 8.4.6 - SQL Injection vulnerability9.3 Critical
- acpt (pro) - custom post types plugin for wordpressWordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability9.8 Critical
- codepress it solutions llc visitor traffic real time statistics proWordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.17 - SQL Injection vulnerability9.3 Critical
- vmware spring security, vmware by broadcom spring security (oauth2 authorization server module) +1 moreSpring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata9.6 Critical
- unknown workeeraWorkeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Deletion via Candidate Profile Mass Assignment9.6 Critical
- joomlaeventmanager.net jem - joomla event manager extension for joomlaJoomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.19.4 Critical
- spring framework, vmware spring framework +1 moreSpring Framework maxInMemorySize Bypassed in Jaxb2Decoder9.8 Critical
- spring framework, vmware spring framework +1 moreSpring Framework Improper Path Limitation in XsltView9.8 Critical
- spring security, vmware spring security +1 moreSpring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces9.4 Critical
- spring framework, vmware spring framework +1 moreSpring Framework Server Sent Event stream corruption while rendering fragments9.8 Critical
- No product listedAn issue in Bilibili Desktop v.1.17.9 allows a remote attacker to execute arbitrary code via the...9.8 Critical
- No product listedThe static resource interface /api/static/{deployKey}/ of Yu AI Code Mother v4.3 is vulnerable to...9.8 Critical
- No product listedVeno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access...9.8 Critical
- No product listedArbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno...9.8 Critical
- No product listedVeno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php...9.1 Critical
- No product listedA vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to...9.8 Critical
- No product listedA vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an...9.8 Critical
litellmPyPILiteLLM vulnerable to server-side template injection in the /prompts/test endpoint9.8 Critical- No product listedAgno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection....9.8 Critical
- No product listedA Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare...9.8 Critical
- No product listedA Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare...9.8 Critical
- No product listedAn issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and...9.8 Critical
- No product listedAn issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a...9.8 Critical
- 1panel-dev kubepiKubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF10.0 Critical
- pleskImproper neutralization of special elements in Plesk allows remote authenticated users to...9.9 Critical
- samsung open source oneA vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from...9.3 Critical
- giteaGitea: Remote Code Execution via diffpatch Git Hook Installation9.8 Critical
- dell cloud disaster recoveryDell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of...9.1 Critical
- google cloud vertex ai search for commerceBucket Squatting in Vertex AI Search for Commerce9.3 Critical
- slackhq nebulaNebulaGraph through 3.8.0 Unauthenticated Read and Modification of Runtime Configuration9.3 Critical
- ilias-elearning e.v. iliasILIAS PHP Object Injection via Shibboleth Logout9.3 Critical
- senaite senaite.coreSENAITE.CORE: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') and Missing Authorization in senaite.core9.8 Critical
- google langfunEval Injection in google/langfun via default lf.query protocol9.2 Critical
- linuxblock: stop the timeout timer when releasing a never added disk9.8 Critical
- linuxmptcp: avoid combining some incoming suboptions9.8 Critical
- linuxmptcp: options: reset DSS fields in case of unexpected size9.8 Critical
- linuxmptcp: fastopen: only mark MPTFO subflows with SYN data9.4 Critical
- linuxlibceph: fix multiple unsafe decodes in decode_locker()9.8 Critical
- linuxlibceph: Avoid using invalid osd indices from primary_temp9.8 Critical
- linuxlibceph: fix OOB read in decode_watchers() via missing bounds check9.8 Critical
- Show moreLoading…