Latest critical vulnerabilities
CVSS 9.0 and up.
- No product listedThe management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not...10.0 Critical
- No product listedThe websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper...9.1 Critical
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities9.8 Critical
- giteaGitea OAuth2 refresh token grant accepts access tokens9.1 Critical
- @backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 moreBackstage: Sensitive information exposure in Scaffolder9.6 Critical
- handlebars-lang handlebars.jsHandlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)9.8 Critical
- arista networks wi-fi access pointsSecurity Advisory 01979.0 Critical
- arista networks wi-fi access pointsSecurity Advisory 01939.4 Critical
- arista networks cloudvision cueSecurity Advisory 01929.3 Critical
- arista networks cloudvision cueSecurity Advisory 01909.3 Critical
- handlebars-lang handlebars.jsHandlebars: JavaScript Injection via Own Property Check Bypass9.2 Critical
- arista networks cloudvision portalSecurity Advisory 01859.3 Critical
- giteaGitea WebAuthn bypass during OAuth and OIDC sign-in9.8 Critical
- giteaGitea fork workflow approval bypass through maintainer-triggered events9.8 Critical
- giteaGitea review and execution mismatch through duplicate tree entries9.1 Critical
- giteaGitea built-in SSH server authentication bypass through key case folding9.1 Critical
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager9.8 Critical
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent9.8 Critical
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface9.9 Critical
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Authentication Bypass Vulnerabilities in ClearPass Policy Manager9.8 Critical
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface9.1 Critical
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager9.8 Critical
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager9.8 Critical
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access9.8 Critical
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution9.8 Critical
- hewlett packard enterprise (hpe) clearpass policy manager (cppm)Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager9.8 Critical
- hewlett packard enterprise (hpe) aos-switch (aos-s)Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S9.1 Critical
- hewlett packard enterprise (hpe) aos-switch (aos-s)Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-S9.3 Critical
- hewlett packard enterprise (hpe) aos-switch (aos-s)Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-S9.6 Critical
- hewlett packard enterprise (hpe) aos-switch (aos-s)Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S9.8 Critical
- hewlett packard enterprise (hpe) aos-switch (aos-s)Authentication Bypass Vulnerability in the Management Interface of AOS-S9.8 Critical
- hewlett packard enterprise (hpe) aos-switch (aos-s)Authentication Bypass in the Web Management Interface of AOS-S9.8 Critical
- multiversx labs s.r.l. multisig-improvedCVE-2026-1065119.8 Critical
- google chromeUse after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...9.6 Critical
- google chromeIncomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a...9.1 Critical
- google chromeIncorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a...9.1 Critical
- google chromeInformation leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...9.6 Critical
- google chromeInteger overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to...9.6 Critical
- google chromeIncorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...9.6 Critical
- google chromeOut of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to...9.6 Critical
- google chromeIncomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to...9.6 Critical
- google chromeImproper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a...9.6 Critical
- google chromeIncorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a...9.6 Critical
- google chromeIncorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote...9.6 Critical
- google chromeUse after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote...9.6 Critical
- google chromeUse after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote...9.6 Critical
- google chromeMissing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed...9.6 Critical
- Show moreLoading…