Latest critical vulnerabilities
CVSS 9.0 and up.
- craftcms cmsCraft CMS before 5.10.11 Authentication Bypass via Admin Flag Inheritance9.2 Critical
- curlNegotiate ambient user conn reuse9.8 Critical
- curlHTTP/2 server push UAF9.1 Critical
- bdthemes sigmaforms pro – ai generated formsSigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field9.8 Critical
- ameliabooking booking for appointments and events calendar – ameliaBooking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'9.8 Critical
- team password manager password managerTeam Password Manager before 14.184.308 Authentication Bypass in Password Reset9.3 Critical
- phison electronics corporation ps3111-s11 controller firmwarePhison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands9.3 Critical
- bookstackapp bookstackBookStack before 26.05.4 Stored XSS via Drawing Upload9.3 Critical
- google chromeUse after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote...9.6 Critical
- google chromeImproper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a...9.8 Critical
- google chromeUse after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to...9.0 Critical
- google chromeIncorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote...9.6 Critical
- google chromeUse after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed...9.6 Critical
- google chromeUse after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote...9.6 Critical
- wwbn avideoWWBN AVideo Password Recovery Token Expiration Bypass9.3 Critical
- wwbn avideoWWBN AVideo Authentication Bypass via User-Agent Header9.3 Critical
- proxmox server solutions gmbh virtual environment (ve)Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter9.3 Critical
- mozilla thunderbirdUninitialized memory in MIME parsing9.1 Critical
- sonicwall sma1000, sma1000 appliances, sma6210 firmware +2 more +4 moreA Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due...10.0 Critical
- mozilla thunderbirdCalendar invitation attachments could launch local executables9.8 Critical
- predisPredis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections9.8 Critical
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreUnauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX9.8 Critical
- arubanetworks fabric composerUnauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon10.0 Critical
- arubanetworks fabric composerAuthentication Bypass in HPE Networking Fabric Composer API allows Administrative Access10.0 Critical
- arubanetworks fabric composerUnauthenticated Remote Code Execution in HPE Networking Fabric Composer9.0 Critical
- arubanetworks fabric composerAuthenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface9.0 Critical
- arubanetworks fabric composerAuthentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer9.6 Critical
- openai codex desktop, codex desktop (microsoft store package) +1 moreOpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree...9.8 Critical
- dell powerstore 1000t, powerstore 1200t, powerstore 3000t +10 more +12 moreDell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An...9.0 Critical
- tmt machine industry and trade ltd. co. talassoft industrial management softwareHardcoded Credentials in TMT Machine's Talassoft Industrial Management Software9.1 Critical
- pyramid solutions ethernet/ip adapter development kit (eadk), ethernet/ip adapter development kit with cip security (eadk-secure), ethernet/ip adapter dll kit (eipa) +5 more +7 moreStack-based Buffer Overflow in Pyramid Solutions NetStaX EtherNet/IP Stack9.3 Critical
- trtek technological products computer software hardware industry and trade limited company products's storeSQL Injection in TRtek Technological Products's Store9.8 Critical
- rockwell automation rslinx classic®RSLinx Classic® - Multiple Vulnerabilities9.2 Critical
- klemsan electrical electronics inc. kio (klemsan internet objects)Unauthenticated Remote Code Execution via Code Injection in Klemsan's KIO9.8 Critical
- manacle technologies multi-tenant erp systemInformation Disclosure Vulnerability in Manacle Technologies ERP System9.2 Critical
- teracity software technologies inc. e-osbSQL Injection in Teracity Sotware's Teracity E-OSB Platform9.8 Critical
- manacle technologies multi-tenant erp systemInsecure Direct Object Reference Vulnerability in Manacle Technologies ERP System9.2 Critical
- manacle technologies multi-tenant erp systemRemote Code Execution Vulnerability in Manacle Technologies ERP System10.0 Critical
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.159.8 Critical
- mozilla firefox, thunderbird +1 moreInternally found bugs fixed in Thunderbird 1559.8 Critical
- mozilla firefox, thunderbird +1 moreInteger overflow in the Graphics: ImageLib component9.8 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Navigation component9.8 Critical
- mozilla firefox, firefox mobile +1 moreOther issue in Firefox Focus for Android9.8 Critical
- mozilla firefox, thunderbird +1 moreOther issue in the Profile Backup component9.8 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Push Subscriptions component9.8 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Navigation component9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the DOM: Security component9.6 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the DOM: Navigation component9.6 Critical
- scriptsbundle nokri – job board wordpress themeNokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter9.8 Critical
- lutece coreCode injection in the Lutece Core9.4 Critical
- Show moreLoading…