Latest critical vulnerabilities
CVSS 9.0 and up.
- irontec sngrepsngrep through 1.8.4 Stack Buffer Overflow via SIP Headers9.3 Critical
- stellarwp the events calendarThe Events Calendar <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution via Widget 'classes' Map Callable Invocation9.8 Critical
- stellarwp the events calendarThe Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution9.8 Critical
- unknown wp componentWP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Update9.8 Critical
- unknown wp images upload on piclectWP Images Upload on Piclect <= 1.0 - Unauthenticated Arbitrary File Upload9.8 Critical
- unknown masteriyo lmsMasteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injection9.9 Critical
- unknown ds ad rotatorDS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload9.8 Critical
- unknown webtotem backupsWebTotem Backups < 1.1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal9.6 Critical
- unknown code monkeys proposalsCode Monkeys Proposals <= 1.0.1 - Subscriber+ Arbitrary File Deletion via Path Traversal9.6 Critical
- unknown frontegg saml ssoFrontegg SAML SSO <= 1.0.1 - Unauthenticated Account Takeover via Unverified SAMLResponse9.8 Critical
- gitlab, gitlab community edition and enterprise edition +1 moreImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab10.0 Critical
- gitlabDeserialization of Untrusted Data in GitLab9.9 Critical
- confetti yaysonYayson: Prototype pollution in the Store/LegacyStore deserialization9.1 Critical
- cisa malcolmUse of default credentials in Malcolm9.2 Critical
- designcomputer mysql mcp serverMySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)10.0 Critical
- linuxtracing: Fix crash passing ERR_PTR to kthread_stop()9.8 Critical
- linuxNFSD: check truncate permission under inode lock9.1 Critical
- linuxNFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock9.8 Critical
- linuxnfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown9.8 Critical
- linuxnfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations9.8 Critical
- linuxnfsd: size fh_verify server sockaddr slot by xpt_locallen9.8 Critical
- linuxnfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()9.1 Critical
- linuxnfsd: don't free session slots that are still in use9.8 Critical
- linuxnfsd: drop the stateid, not the stateowner, on seqid_op replay retry9.8 Critical
- linuxnfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke9.8 Critical
- linuxnfsd: fix layout fence worker double-reference race9.8 Critical
- linuxnfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()9.8 Critical
- linuxnfsd: fix stale s2s_cp_stateids IDR entry for async COPY9.8 Critical
- linuxnfsd: fix UAF in async copy cancel and shutdown9.8 Critical
- linuxnfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget9.8 Critical
- linuxnfsd: gate nfs2 setacl by argp->mask9.1 Critical
- linuxnfsd: gate nfs3 setacl by argp->mask9.1 Critical
- linuxnfsd: initialize copy-notify stateid before publishing it9.8 Critical
- linuxNFSD: Prevent lock owner use-after-free during client teardown9.8 Critical
- linuxNFSD: Prevent client use-after-free during admin state revocation9.8 Critical
- linuxNFSD: Prevent client use-after-free during delegation revoke9.8 Critical
- linuxNFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup9.8 Critical
- linuxlibceph: reject buckets with mismatched CRUSH ids9.8 Critical
- linuxceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock9.8 Critical
- linuxceph: fix UAF in check_new_map() on session freed during unlock9.8 Critical
- linuxceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode9.8 Critical
- linuxceph: bound copied dentry name length in NFS export get_name9.8 Critical
- linuxceph: bound MDSCapAuth path and fs_name decode in handle_session()9.8 Critical
- linuxceph: bound num_export_targets array for mds info v2/v39.1 Critical
- linuxceph: bound xattr value length in __build_xattrs()9.1 Critical
- linuxaudit: avoid dropping live tree ref on fsnotify rule autoremove9.8 Critical
- linuxsmb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T29.8 Critical
- linuxsmb: client: clear ce->tgthint in free_tgts()9.8 Critical
- linuxksmbd: only rebind the reopened file's own oplock on durable reconnect9.8 Critical
- linuxsmb: client: fix ALIGN() overflow in symlink_data() error context loop9.1 Critical
- Show moreLoading…