Latest critical vulnerabilities
CVSS 9.0 and up.
- No product listedIncorrect access control in the setWiFiEasyGuestCf function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the setStorageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the setUPnPCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the setAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the setWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the setScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the getRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the getSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the getPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedServer-side request forgery (SSRF) in the /har/test endpoint in QD 20220208 through 20250803....9.1 Critical
- No product listedInsecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers...9.8 Critical
- d-link dir-825mD-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflow9.4 Critical
- d-link dir-825mD-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflow9.4 Critical
- siyuan-note siyuanSiYuan before v3.8.1 Stored XSS via block name9.3 Critical
- siyuan-note siyuanSiYuan before v3.8.1 Stored XSS via confirmDialog9.3 Critical
- wwbn avideoAVideo Unauthenticated Stream Credential Disclosure via Forgeable Token9.2 Critical
- tenda hg10Tenda HG10 Boa Web Server formIPv6Routing buffer overflow10.0 Critical
- totolink a720rTOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption9.4 Critical
- tangiblewp myhome coreMyHome Core <= 4.4.5 - Authentication Bypass to Account Takeover via Activation Token9.8 Critical
- addify custom user registration fields for woocommerceCustom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout9.8 Critical
- jeremyevans rodauthRodauth before 2.46.0 Authentication Bypass via webauthn_login9.4 Critical
- coderaiser cloudcmdCloud Commander before 19.20.2 Directory Traversal via REST and Markdown9.3 Critical
- argoproj-labs argocd-mcpargocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP10.0 Critical
- omnivore-app omnivoreOmnivore before android-0.227.0 Authentication Bypass via Apple Sign-in9.3 Critical
- iot-ecology rust-iot-platformrust-iot-platform Authentication Bypass via Missing Request Guards9.3 Critical
- shinobi systems shinobiShinobi before commit 5a76c74f Arbitrary Database Query Execution via Hardcoded Child Node Key9.3 Critical
- bdthemes sigmaforms pro – ai generated formsSigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field9.8 Critical
- linuxnet: gro: properly validate BIG TCP aggregation criteria9.8 Critical
- unknown 爱采集数据采集和发布插件Icollect <= 1.0.0 - Unauthenticated Arbitrary File Read, SSRF and Path Traversal File Write via Default Publishing Password9.3 Critical
- totalprocessing total processing card payments for woocommerceTotal Processing Card Payments for WooCommerce <= 7.3 - Unauthenticated SSRF leading to Payment Bypass and Gateway Credential Disclosure9.1 Critical
- unknown uix usercenterUix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation9.8 Critical
- unknown memberheroSimple User Registration <= 6.9 - Unauthenticated Privilege Escalation to Administrator9.8 Critical
- ibm concertMultiple Vulnerabilities in IBM Concert Software9.1 Critical
- ibm langflow oss, langflow +1 moreLangflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement9.9 Critical
- ibm langflow oss, langflow +1 moreLangflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement9.8 Critical
- ibm administration runtime expert for iIBM Application Runtime Expert (ARE) for IBM i is vulnerable to a user gaining elevated privileges and sensitive information [, ].9.9 Critical
- pimcorePimcore: Remote Code Execution via DataObject Class-Definition Field Name9.9 Critical
- pimcorePimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column9.3 Critical
- plone plone.app.eventplone.app.event: Denial of service via iCalendar import9.1 Critical
- nousresearch hermes-agentHermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch Reference9.0 Critical
- plone plone.app.portletsplone.app.portlets: Denial of service via RSS feed portlet9.1 Critical
- jfrog artifactoryPotential authentication bypass leading to administrative access in Artifactory9.8 Critical
- shriyanss js-reconJS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values9.3 Critical
- yamcsYamcs: Authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)9.9 Critical
- yamcsYamcs: Remote Code Execution via instance-template argument YAML injection (createInstance)9.8 Critical
- yamcsYamcs: Authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs `executeSql`9.1 Critical
- Show moreLoading…