Latest critical vulnerabilities
CVSS 9.0 and up.
- free5gcfree5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints9.3 Critical
- klever-io klever-goKlever-Go: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)9.6 Critical
- klever-io klever-goKlever-Go: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)9.6 Critical
- cinnamon kotaemonKotaemon Missing Ownership Check in Conversation Functions9.1 Critical
- argoproj argo-rolloutsArgo Rollouts Dashboard Unauthenticated Mutating Operations9.3 Critical
- redpanda-data redpandaRedpanda Admin API Unauthenticated Superuser Access via Default Configuration9.3 Critical
- kubeflow pipelinesKubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true10.0 Critical
- papercut mf/ng, mf, ng +1 more +3 morePaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector9.4 Critical
- budibase serverBudibase before 3.41.3 Remote Code Execution via Plugin eval()9.4 Critical
- liquid web / stellarwp givewpWordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability10.0 Critical
- eclipse foundation lyo, the eclipse foundation eclipse lyo +1 moreOAuth 1.0 session-fixation chain via unauthenticated provisional-consumer registration and insecure v1_0Allowed default9.1 Critical
- synology chat serverAn improper neutralization of input during web page generation ('Cross-site Scripting')...9.0 Critical
- linuxipvs: do not propagate one-packet flag to synced conns9.8 Critical
- linuxnet: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller9.8 Critical
- linuxidpf: bound interrupt-vector register fill to the allocated array9.3 Critical
- linuxKVM: s390: pci: Fix NULL dereference on AIBV allocation failure9.3 Critical
- linuxvxlan: re-fetch eth header after route_shortcircuit()9.8 Critical
- linuxntfs: validate resident attribute lists and harden the validator9.8 Critical
- linuxntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find()9.8 Critical
- linuxperf sched: Fix register_pid() overflow, strcpy, and BUG_ON9.3 Critical
- linuxperf tools: Use perf_env__get_cpu_topology() in machine__resolve()9.1 Critical
- linuxnetfilter: nf_conntrack_expect: use conntrack GC to reap expectations9.8 Critical
- linuxRDMA/hns: Fix warning in poll cq direct mode10.0 Critical
- linuxnetfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag9.8 Critical
- linuxnet/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen9.8 Critical
- linuxnet: airoha: fix foe_check_time allocation size9.8 Critical
- linuxnet: lwtunnel: Drop skb metadata before LWT encapsulation9.8 Critical
- linuxACPI: processor_idle: Mark LPI enter functions as __cpuidle10.0 Critical
- linuxqede: fix out-of-bounds check for cqe->len_list[]9.8 Critical
- linuxtracing/probes: Remove WARN_ON_ONCE from parse_btf_arg10.0 Critical
- linuxnetfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read9.1 Critical
- linuxbatman-adv: dat: acquire ARP hw source only after skb realloc9.8 Critical
- wpmudev wpmu dev dashboardWPMU DEV Dashboard <= 5.0.1 - Authentication Bypass to Administrator via SSO HMAC Canonicalization Confusion9.8 Critical
- nippon institute of agroinformatics ltd. soy cmsSOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be...9.3 Critical
- getpocket pocketPocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. ...9.2 Critical
- green-computing numailGreen-Computing｜NUMail - OS Command Injection9.3 Critical
- No product listedIncorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the getPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu...9.1 Critical
- No product listedIncorrect access control in the getSyslogCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the getDiagnosisCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the getParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the getPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the getWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu...9.1 Critical
- No product listedIncorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the getWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the startSlaveReboot function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can use a Sieve script with the editheader extension to...9.1 Critical
- Show moreLoading…