Latest critical vulnerabilities
CVSS 9.0 and up.
- No product listedA remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function (...9.8 Critical
- No product listedA remote code execution (RCE) vulnerability in the UniscriptExecutionService.execute() function (...9.8 Critical
- No product listedA SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to...9.8 Critical
- No product listedAn issue in gray-matter All versions (verified on 4.0.3) allows the JavaScript engine in lib...9.8 Critical
- No product listedIncorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 allows remote...9.8 Critical
- No product listedCuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery (SSRF) in core/modules/media.php --...9.1 Critical
- netcore nbr200v2Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection10.0 Critical
- netcore nbr200v2Netcore NBR200V2 LAN IP Configuration network_tools command injection9.4 Critical
- netcore nbr200v2Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection9.4 Critical
- d-link dir-868lD-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow10.0 Critical
- ordasoft.com ordasoft joomla gallery extension for joomla, ordasoft joomla gallery free extension for joomla +1 moreJoomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.79.4 Critical
- ordasoft.com ordasoft joomla gallery extension for joomla, ordasoft joomla gallery free extension for joomla +1 moreJoomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.79.3 Critical
- ordasoft.com ordasoft joomla gallery extension for joomla, ordasoft joomla gallery free extension for joomla +1 moreJoomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.79.4 Critical
- vanderbilt redcapAn unauthenticated Remote Code Execution vulnerability was found in the survey passthrough...9.8 Critical
- comfast cf-n1-sComfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow10.0 Critical
- nivocartNivoCart through 2.4.0 Predictable Administrator Password Reset Token9.2 Critical
- oisf suricataSuricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected...9.4 Critical
- oisf suricataSuricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup...9.4 Critical
- d-link r95D-Link R95 DHMAPI ssi system os command injection9.4 Critical
- openpanel-dev openpanelOpenPanel js-runtime through 2.3.0 JavaScript Template Sandbox Escape RCE9.4 Critical
- totolink a3002muTotolink A3002MU formWsc command injection9.4 Critical
- unknown botiga proBotiga Pro < 1.6.5 - Unauthenticated Arbitrary Blog Options Update via Templates Builder REST Route9.8 Critical
- totolink a3002muTotolink A3002MU formWlWds buffer overflow10.0 Critical
- brechtvds wp recipe makerWP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content9.1 Critical
- wpmudev forminator forms – contact form, payment form & custom form builderForminator Forms <= 1.57.2 - Unauthenticated Arbitrary Shortcode Execution via 'current_url' Parameter9.1 Critical
- gravity forms formsGravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Field9.8 Critical
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +8 more +10 moreOpenshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint9.3 Critical
- totolink a3002muTotolink A3002MU formWlEncrypt buffer overflow10.0 Critical
- totolink a3002muTotolink A3002MU formWlAc buffer overflow9.4 Critical
- totolink a3002muTotolink A3002MU formSchedule buffer overflow9.4 Critical
- cotontiCotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNG9.2 Critical
- 1panel-dev cordyscrmCordysCRM SSE Notification Stream Hijack via `/sse/subscribe`9.3 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.9.8 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.9.9 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.9.9 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.9.1 Critical
- pgpartman pg partmanpg_partman has privilege escalation through SQL injection in create_partition_time()9.9 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.9.9 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.9.0 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.9.8 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.9.6 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.9.8 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.9.8 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.9.9 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.9.8 Critical
- ibm sterling file gatewayIBM Sterling File Gateway is Vulnerable to Authentication Bypass9.1 Critical
- modeltc lightllmLightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint9.3 Critical
- hongjing e-hrHongjing e-HR < 8.2 SQL Injection via /servlet/codesettree9.3 Critical
- axdsan mnemosyneMnemosyne has JWT signature verification bypass sync server that allows authentication bypass9.1 Critical
- icinga icinga2Icinga 2: Improper access control for JSON-RPC update certificate messages9.8 Critical
- Show moreLoading…