Latest critical vulnerabilities
CVSS 9.0 and up.
- sauter ecos504, ecos505, modu612-lc +2 more +4 moreTOCTOU Vulnerability in file exchange9.3 Critical
- cobham satcom vsat7090 maritime satellite routerCobham SATCOM VSAT7090 Maritime Satellite Router JSON Parsing mail-report.sh c_set_reports_decode command injection9.4 Critical
- wplegalpages wplp cookie consent – cookie banner & consent management for gdpr, ccpa & google consent modeWPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint9.8 Critical
- pleskA critical local privilege escalation via OS command injection vulnerability has been discovered...9.0 Critical
exiv2DebianUpdated exiv2 package fixes security vulnerabilities9.8 Criticalexiv2DebianUpdated exiv2 package fixes security vulnerabilities9.8 Critical- google androidIn multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper...9.8 Critical
- google androidIn multiple locations, there is a possible use-after-free due to a logic error in the code. This...9.8 Critical
- google androidIn IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the...9.8 Critical
- No product listedAn issue in fast-note-sync-service <=2.13.7 allows a remote attacker to escalate privileges via...9.8 Critical
- No product listedBuffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd. Tenda A18 v.15.13...9.8 Critical
- No product listedIncorrect access control in the sendToMasterQosConfig function of TOTOLINK T6 4.1.5cu...9.8 Critical
- No product listedIncorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu...9.8 Critical
- No product listedIncorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu...9.8 Critical
- No product listedIncorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu...9.8 Critical
- No product listedIncorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the meshInfoKick function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.8 Critical
- No product listedIncorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the keepAlive function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.8 Critical
- No product listedIncorrect access control in the recv_mesh_info_sync function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
exiv2DebianUpdated exiv2 package fixes security vulnerabilities9.8 Critical- google androidIn handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to...9.8 Critical
- redport optimizer wxa-203, optimizer wxa-213, optimizer wxa-223 +2 moreRedPort Optimizer wXa-223 System Clock datetime.php exec command injection9.4 Critical
- qvidium opera11QVidium Opera11 CGI Script net_tr.cgi command injection10.0 Critical
- dokployDokploy Settings application.ts writeTraefikConfigInPath path traversal9.4 Critical
- silk themes newspapers xWordPress Newspapers X theme 1.0.46-1.0.48 - Backdoor vulnerability10.0 Critical
- tickeraWordPress Tickera plugin <= 3.6.0.2 - PHP Object Injection vulnerability9.8 Critical
- hashthemes hash formWordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability10.0 Critical
- unknown throws spam awayWordPress Throws SPAM Away plugin <= 3.8.2 - SQL Injection vulnerability9.3 Critical
- autorius e-goi smart marketing sms and newsletters formsWordPress Smart Marketing SMS and Newsletters Forms plugin <= 5.1.24 - SQL Injection vulnerability9.3 Critical
- passionate programmer peter wp data accessWordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability9.3 Critical
- msi dragon centerMSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow9.3 Critical
- mcphubMCPHub: Authenticated non-admin user achieves RCE via POST /api/servers (missing authorization on stdio command/args)9.9 Critical
- ieungsoft ultra ramdisk proieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privileges management9.3 Critical
- ebyte na111-m firmwareEbyte NA111-M Use of a Broken or Risky Cryptographic Algorithm9.3 Critical
- ebyte na111-m firmwareEbyte NA111-M Weak Authentication9.3 Critical
- profilepress membership team profilepressProfilePress WordPress Plugin < 4.17.2 Unauthenticated Arbitrary Plugin Installation RCE9.2 Critical
- wp legal pages cookie notice for gdpr, ccpa & eprivacy consentWordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerability10.0 Critical
- digitální a informační agentura (dia) eobčanka-identifikaceCommand Injection vulnerability in eObčanka-Identifikace9.3 Critical
- tenda ac18Tenda AC18 Telnet telnet missing authentication10.0 Critical
- tenda ac1206Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication10.0 Critical
- tenda ac1206Tenda AC1206 Web UI telnet TendaTelnet missing authentication10.0 Critical
- d-link dns-340l, dns-345 +1 moreD-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injection9.4 Critical
- Show moreLoading…