Latest critical vulnerabilities
CVSS 9.0 and up.
- mit moos-ivpMOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Ping9.3 Critical
- themoos essential-moosMOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration9.3 Critical
- themoos core-moosMOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write9.3 Critical
- themoos essential-moosMOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILE9.2 Critical
- moos-ivpMOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client Names9.3 Critical
- mit moos-ivpMOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOS9.3 Critical
- themoos core-moosMOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEAR9.3 Critical
- d-link dns-320 sharecenterD-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection9.4 Critical
- d-link dns-340lD-Link DNS-340L CGI dropbox.cgi os command injection9.4 Critical
- d-link dns-340lD-Link DNS-340L Add-On Center addon_center.cgi os command injection9.4 Critical
- maplibre maplibre-gl-jsMapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip10.0 Critical
- google chromeImproper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977...9.6 Critical
- google chromeOut of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a...9.6 Critical
- google chromeUse after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to...9.6 Critical
- google chromeIncomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker...9.1 Critical
- peppermint lab peppermintPeppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml9.3 Critical
- sciphi-ai r2rR2R 3.6.6 SQL Injection via Vector Index Creation Endpoint9.3 Critical
- geonetwork core-geonetworkGeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter9.1 Critical
- eyecix jobsearchWordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerability9.8 Critical
- bricksforgeWordPress Bricksforge plugin <= 3.1.8.8 - Privilege Escalation vulnerability9.8 Critical
- paolo geodirectoryWordPress GeoDirectory plugin <= 2.8.174 - SQL Injection vulnerability9.3 Critical
- e4j s.r.l. vikappointments services booking calendarWordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability9.3 Critical
- unknown mail mintWordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability9.8 Critical
- yith request a quote for woocommerce premiumWordPress YITH Request a Quote for WooCommerce Premium plugin < 4.46.0 - Broken Access Control vulnerability9.8 Critical
- avaiga taipyTaipy through 4.1.1 Cross-Site WebSocket Hijacking via Wildcard socket.io CORS9.3 Critical
- dianping catCAT through 3.1.0 Session Cookie Forgery via Unkeyed hashCode Checksum9.3 Critical
- mispMISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentials9.5 Critical
- tenda hg10Tenda HG10 Boa Web Server formLogin buffer overflow9.3 Critical
- eclipse foundation arrowheadIn Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the...9.5 Critical
- joodb.feenders.de joodatabase lite extension for joomlaJoomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.09.3 Critical
- j2commerce.com j2store extension for joomlaJoomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.69.5 Critical
- wwbn avideoWWBN AVideo Authentication Bypass via Non-Expiring video_id_hash9.3 Critical
- ocs inventory ng ocsreportsMultiple vulnerabilities in Ocsreports for OCS Inventory NG9.2 Critical
- ocs inventory ng ocsreportsMultiple vulnerabilities in Ocsreports for OCS Inventory NG9.4 Critical
- totolink cp450TOTOLINK CP450 cstecgi.cgi buffer overflow9.4 Critical
- delinea secret server (on-prem)Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability9.8 Critical
- red hat advanced cluster management for kubernetes 2, advanced cluster management for kubernetes 2.16, advanced cluster management for kubernetes 2.17 +2 moreSubmariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets9.1 Critical
- vbpf prevailPREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification9.3 Critical
- vbpf prevailPREVAIL: Context-write no-op in do_mem_store allows unsafe eBPF programs to pass verification9.3 Critical
- cisco ios xr softwareCisco IOS XR Software Security Hardening Release: September 20269.8 Critical
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Security Hardening Release: September 20269.8 Critical
- cisco nx-os softwareCisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability9.8 Critical
- as203038 looking-glassLooking Glass: Remote Code Execution via Unanchored Regular Expression in BGPASPath Input Validation9.8 Critical
- f5 nginx javascriptNGINX ngx_http_js_module vulnerablility9.2 Critical
- eclipse foundation aeriosIn the current development version of Eclipse aeriOS, which has not yet had an official release,...9.0 Critical
- unknown developer toolsDeveloper Tools <= 1.1.3 – Unauthenticated Arbitrary File Upload9.8 Critical
- unknown watchman-site7WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Console9.9 Critical
- unknown embed html5 gameEmbed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File Upload10.0 Critical
- paul ryan authorizerWordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerability9.8 Critical
- wc lovers wcfm marketplaceWordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerability9.3 Critical
- Show moreLoading…