Latest critical vulnerabilities
CVSS 9.0 and up.
- cisco secure firewall adaptive security appliance (asa) software, secure firewall management center (fmc), secure firewall threat defense (ftd) software +2 moreCisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Protection Mechanism Failure Vulnerabiliti…9.6 Critical
- cisco ise passive identity connector, identity services engine, identity services engine software +1 more +3 moreCisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities9.9 Critical
- cisco secure firewall management center (fmc)Cisco Secure Firewall Management Center Software Impersonated sftunnel Connection Vulnerability9.0 Critical
- cisco identity services engine softwareCisco Identity Services Engine Remote Code Execution Vulnerability9.9 Critical
- cisco identity services engine software, ise passive identity connector +1 moreCisco Identity Services Engine Command Injection Vulnerability9.1 Critical
- cisco identity services engine software, ise passive identity connector +1 moreCisco Identity Services Engine Command Injection Vulnerability9.1 Critical
- ruijie rg-ew3000gxRuijie RG-EW3000GX user_list_note admin os command injection9.4 Critical
- functional software, inc. sentry seerSentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment9.8 Critical
- ruijie rg-ew3000gxRuijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection9.4 Critical
- internlm lmdeployLMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy9.8 Critical
- dell objectscaleDell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data...10.0 Critical
- rabbitmq amqp091-goRabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr9.5 Critical
- rabbitmq amqp091-goRabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser9.4 Critical
- @fastify/proxy-addr@fastify/proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet9.1 Critical
- rabbitmq amqp091-goRabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow9.1 Critical
- checkpoint quantum security managementStack overflow in login process to the Security Management and Log Servers9.8 Critical
- advantech eki-1242eims, eki-1242ieims +1 moreNozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an...9.3 Critical
- wnc t-mobile 5g box iduAuthorized remote code execution via password change functionality in T-Mobile 5G Box IDU routers9.3 Critical
- wnc t-mobile 5g box iduUnauthorized remote code execution in T-Mobile 5G Box IDU routers9.4 Critical
- wnc t-mobile 5g box iduCommand Injection in T-Mobile 5G Box IDU router via ping functionality9.3 Critical
- linuxnet: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()9.3 Critical
- linuxfs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()9.8 Critical
- linuxceph: properly decrypt filenames in vmalloc() buffers9.8 Critical
- linuxNFSD: Prevent client use-after-free during export state revocation9.8 Critical
- linuxNFSD: Prevent client use-after-free during close_lru reaping9.8 Critical
- linuxNFSD: Prevent client use-after-free during blocked-lock reaping9.8 Critical
- linuxspi: Fix DMA mapping ownership on partial map failure9.8 Critical
- linuxscsi: target: iscsi: Reserve a terminator byte for the login payload9.1 Critical
- linuxceph: lock mutex in ceph_mds_check_access()9.8 Critical
- linuxnvme: add missing SRCU grace period in error path9.8 Critical
- linuxnvmet-auth: Synchronize timeout work during SQ teardown9.8 Critical
- linuxnvmet-tcp: fix out-of-bounds write when receiving an over-long PDU9.8 Critical
- linuxKVM: nVMX: Service local TLB flushes on failed nested VM-Enter9.3 Critical
- linuxKVM: arm64: Correctly handle end of VA space TLBI invalidation9.3 Critical
- linuxKVM: arm64: Make VNCR invalidation participate in MMU invalidation retry9.3 Critical
- linuxKVM: arm64: Remove VM-wide VNCR mapping counter9.3 Critical
- linuxKVM: arm64: Sign-extend VA for range-based TLBI invalidation9.3 Critical
- linuxscsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak9.8 Critical
- linuxscsi: qla2xxx: Hold qpair lock when sending NVMe LS reject9.8 Critical
- linuxscsi: qla2xxx: Avoid double completion in async IOCB timeout9.8 Critical
- linuxscsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read9.1 Critical
- arista networks eosSecurity Advisory 01749.5 Critical
- apache apache-airflow-providers-keycloak, apache software foundation airflow keycloak provider +1 moreApache Airflow Keycloak provider: Any realm client's credentials mint an Airflow session JWT9.8 Critical
- apache apache-airflow-providers-keycloak, apache software foundation airflow keycloak provider +1 moreApache Airflow Keycloak provider: Keycloak token cookies not bound to Airflow session identity9.1 Critical
- apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 moreApache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessions9.1 Critical
- apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 moreApache Airflow FAB provider: FAB password reset never invalidates sessions: string/int _user_id comparison is always false9.8 Critical
- linuxksmbd: fix tree connection use-after-free in smb2_tree_connect()9.8 Critical
- linuxext4: fix out-of-bounds read in ext4_read_inline_dir()9.1 Critical
- linuxfs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init9.8 Critical
- linuxxfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full9.8 Critical
- Show moreLoading…