Latest critical vulnerabilities
CVSS 9.0 and up.
- linuxfs/ntfs3: validate ef->size covers the record's name and value9.1 Critical
- linuxisofs: fix out-of-bounds page array access on empty zisofs block9.8 Critical
- linuxKVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation9.3 Critical
- nlnet labs unboundHeap buffer overflow and possible Remote Code Execution when digesting DNSKEY9.1 Critical
- arista networks eosSecurity Advisory 01639.4 Critical
- carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 moreRemote code execution via uploading a malicious IODD file9.8 Critical
- carlo gavazzi automation yl212cei8m1io, yl212cpn8m1io, yn115cei8rpio +12 more +14 moreAuthentication Bypass in _account_log9.8 Critical
- arista networks eosSecurity Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Request9.4 Critical
- jetmonsters jetformbuilder — dynamic blocks form builderJetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter9.8 Critical
- themetechmount truebooker – appointment booking and scheduler systemTrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX Action9.8 Critical
- No product listedkkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF). The cross-origin file...9.1 Critical
- No product listedAn issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498) allows a remote...9.8 Critical
- No product listedA Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1...9.8 Critical
- delinea secret server (on-prem)Authentication Bypass via SAML Response Manipulation9.5 Critical
- delinea secret server (on-prem)Reflected Cross-Site Scripting9.3 Critical
- delinea secret server (on-prem)Cryptographic Padding Oracle9.1 Critical
- myscada technologies mypromySCADA myPRO Manager Missing Authorization9.3 Critical
- wärtsilä fos-onboardWärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key9.3 Critical
- wärtsilä fos-onboardWärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key9.5 Critical
- zereight gitlab-mcp@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover9.8 Critical
- webpros solusvmAn insufficient check allowed for the overwrite of arbitrary files via a symlink.9.4 Critical
- zereight gitlab-mcp@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery9.6 Critical
- cotontiCotonti 1.0.0 Comments Plugin PHP Object Injection via ci Parameter9.3 Critical
- zereight gitlab-mcp@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport9.6 Critical
- google chromeImproper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote...9.6 Critical
- google chromeUse after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote...9.6 Critical
- google chromeUse after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote...9.6 Critical
- google chromeInteger overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...9.6 Critical
- digital watchdog va1g4 recorder, vg4 recorder, vmax a1 g4 dvr +2 more +4 moreMissing Authorization in Digital Watchdog VMAX DVR and NVR Product Lineups9.4 Critical
- digital watchdog va1g4 recorder, vg4 recorder, vmax a1 g4 dvr +2 more +4 moreUse of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups9.4 Critical
- shaneisrael fireshareFireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite9.8 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...10.0 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.1 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.1 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.1 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.1 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.8 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.6 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.8 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.1 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.1 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.1 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.9 Critical
- oracle hyperion financial managementVulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component:...9.1 Critical
- oracle hyperion data relationship managementVulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion ...9.1 Critical
- oracle hyperion data relationship managementVulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion ...9.1 Critical
- oracle mobile application serverVulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite ...9.8 Critical
- Show moreLoading…