Latest critical vulnerabilities
CVSS 9.0 and up.
- linksys e1700Linksys E1700 setLinksysIpv6 os command injection9.4 Critical
- linksys e1700Linksys E1700 setDMZ os command injection9.4 Critical
- linksys e1700Linksys E1700 Static Route addStaticRoute os command injection9.4 Critical
- linksys e1700Linksys E1700 setVlan stack-based overflow9.4 Critical
- linksys e1700Linksys E1700 Mac Filter ssid1MACFilter stack-based overflow10.0 Critical
- apache software foundation skywalking banyandbApache SkyWalking BanyanDB: Canopy does not enforce readonly-role restrictions on the /monitoring/* proxy9.1 Critical
- otrs ag ((otrs)) community edition, otrs gmbh (former otrs ag) otrs +1 moreAuthentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication9.4 Critical
- otrs ag otrsInsufficient Session Revocation for JWT Authentication9.1 Critical
- trendnet tew-751dr, tew-752dru, tew733gr +2 moreTRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection10.0 Critical
- scisharp botsharpBotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key9.3 Critical
- agnaistic agnaiAgnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Compose9.3 Critical
- safecam x300TOZED X300 IPPingDiagnostics process_ping os command injection10.0 Critical
- openspug spugOpenSpug File Transfer transfer os command injection9.4 Critical
- unknown insurifyInsurify <= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg_popup9.1 Critical
- unknown quick quotesQuick quotes <= 1.0.0 - Unauthenticated Integer-Value Option Update9.1 Critical
- unknown insurifyInsurify <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite via saveemailtemplatedesign9.1 Critical
- unknown ai content generator marketingAI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion9.8 Critical
- unknown freeton wpFreeton WP <= 1.0.0 - Unauthenticated Account Takeover via 'secod' Parameter9.8 Critical
- unknown mindstien quick loginMindstien Quick Login <= 1.0 - Unauthenticated Administrator Account Takeover via 'mql_pass' Parameter9.8 Critical
- unknown click5 crm add-on to contact form 7click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Options Update9.8 Critical
- unknown click5 crm add-on to gravity formsclick5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Arbitrary Options Update9.8 Critical
- unknown click5 crm add-on to wpformsclick5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Update9.8 Critical
- unknown click5 crm add-on to ninja formsclick5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Arbitrary Options Update9.8 Critical
- unknown fundiin cho woocommerceFundiin <= 3.4.0 - Unauthenticated Payment Gateway Settings Update and Credential Disclosure9.1 Critical
- unknown anton extensionsAnton Extensions <= 1.2.2 - Unauthenticated Arbitrary File Upload to RCE9.8 Critical
- wukongopensource wukong hrmWukong_HRM through commit 186115e Authentication Bypass via ParamAspect9.3 Critical
- ancorathemes buzz stone | magazine & viral blog wordpress themeWordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes photoliaWordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability9.8 Critical
- ancorathemes qweryWordPress Qwery theme <= 3.6.1 - PHP Object Injection vulnerability9.8 Critical
- themerex jacquelineWordPress Jacqueline theme <= 2.22 - PHP Object Injection vulnerability9.8 Critical
- themerex allianceWordPress Alliance theme <= 3.11 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes kickerWordPress Kicker theme <= 2.2.1 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes originalWordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability9.8 Critical
- ancorathemes anestaWordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability9.8 Critical
- axiomthemes fc unitedWordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability9.8 Critical
- themerex shiftcvWordPress ShiftCV theme <= 3.0.14 - PHP Object Injection vulnerability9.8 Critical
- themerex windsorWordPress Windsor theme <= 2.10 - PHP Object Injection vulnerability9.8 Critical
- themerex education centerWordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerability9.8 Critical
- ancorathemes drone mediaWordPress Drone Media theme <= 2.2.0 - PHP Object Injection vulnerability9.8 Critical
- wpfunnels creator lmsWordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability9.9 Critical
- themerex asia gardenWordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability9.8 Critical
- themerex n7 | golf club sports & eventsWordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability9.8 Critical
- themerex invetexWordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability9.8 Critical
- themerex law officeWordPress Law Office theme <= 3.20 - PHP Object Injection vulnerability9.8 Critical
- themerex wineshopWordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability9.8 Critical
- themerex equadioWordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability9.8 Critical
- themerex junoWordPress Juno theme <= 2.25 - PHP Object Injection vulnerability9.8 Critical
- boldthemes avalaWordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability9.8 Critical
- the4 kallesWordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability9.8 Critical
- themerex yacht rentalWordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability9.8 Critical
- Show moreLoading…