Latest critical vulnerabilities
CVSS 9.0 and up.
- digiwin easyflow .netDigiWin｜EasyFlow .NET - Missing Authentication9.3 Critical
- digiwin easyflow .netDigiWin｜EasyFlow .NET - Insecure Deserialization9.3 Critical
- apache software foundation plc4xApache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade9.2 Critical
- liquid web / stellarwp givewpWordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability9.1 Critical
- containers podmanPodman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation10.0 Critical
- unknown zella themeZella Theme < 2.6.3 - Unauthenticated Arbitrary File Upload9.8 Critical
- zosmaai pi-llm-wikizosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injection9.4 Critical
- pexip infinityPexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation...9.8 Critical
- beenuar aisocAiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR9.4 Critical
- No product listedDevika v1.0 is vulnerable to Code Injection via the Runner.run_code function in src/agents/runner...9.8 Critical
- No product listedDevika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner...9.8 Critical
- No product listedDeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool...9.8 Critical
- No product listedDB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host.9.8 Critical
- No product listedagentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers...9.8 Critical
- No product listedIn DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can...9.8 Critical
- No product listedDB-GPT v0.7.5 and v0.8.0 contains directory traversal in python_file_upload (packages/dbgpt-app...9.1 Critical
- No product listedDB-GPT 0.8.0 contains directory traversal in skill_upload (packages/dbgpt-app/src/dbgpt_app...9.1 Critical
- No product listedbisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api...9.8 Critical
- No product listedbisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file ...9.1 Critical
- No product listedIn camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt...9.8 Critical
- No product listedIn camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced...9.8 Critical
- No product listedIn agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes...9.8 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 ping command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 set_time_zone command injection9.4 Critical
- watchguard fireware, fireware os +1 moreFireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution9.2 Critical
- modeltc lightllmLightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service9.3 Critical
- modeltc lightllmLightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service9.3 Critical
- the wikimedia foundation mediawiki - easytimeline extensionEasyTimeline should not serve image maps as application/xml9.8 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 set_syslog command injection9.4 Critical
- shopify tophat, toptech systems tms7 +1 moreToptech TMS7 and TopHAT Unrestricted Upload of File with Dangerous Type9.4 Critical
- shopify tophat, toptech systems tms7 +1 moreToptech TMS7 and TopHAT Files or Directories Accessible to External Parties10.0 Critical
- viidure dashcam android applicationUse of Hard-coded Credentials in Viidure Dashcam Android Application10.0 Critical
- finsys dockhandDockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints9.2 Critical
- google chromeUse after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...9.6 Critical
- google chromeUse after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to...9.6 Critical
- google chromeBuffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote...9.6 Critical
- anjvision yssd-rtmp-h5Initialization of a resource with an insecure default in Anjvision YSSD-RTMP-H59.3 Critical
- hewlett packard enterprise (hpe) instant onAuthentication Bypass in a Management Protocol of HPE Networking Instant ON APs9.6 Critical
- hewlett packard enterprise (hpe) instant onUnauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI Protocol9.6 Critical
- hewlett packard enterprise (hpe) instant onUnauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking Instant ON APS9.6 Critical
- hewlett packard enterprise (hpe) instant onUncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APs9.8 Critical
- hewlett packard enterprise (hpe) instant onUnauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APs9.8 Critical
- steveukx git-jssimple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection9.2 Critical
- simple-git project simple-git, steveukx git-js +1 moresimple-git unsafe-operation guard does not block trailer command configuration9.2 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.9.1 Critical
- eclipse foundation netx duoNetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it...9.3 Critical
- balbooa forms, balbooa.com balbooa forms extension for joomla +1 moreJoomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.49.5 Critical
- Show moreLoading…