Latest critical vulnerabilities
CVSS 9.0 and up.
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)10.0 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)9.0 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)10.0 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)9.1 Critical
- adobe coldfusion 2023, coldfusion 2025 +1 moreColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)9.3 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)9.9 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)9.6 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)9.6 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)9.9 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)10.0 Critical
- xorbitsai xoscarXorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool9.3 Critical
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by an authentication bypass9.1 Critical
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty Improper Access Control9.1 Critical
- omnispace agora projectOmnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage9.1 Critical
- omnispace agora projectOmnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover9.1 Critical
- omnispace agora projectOmnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies9.1 Critical
- omnispace agora projectOmnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()9.1 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Incorrect Authorization (CWE-863)10.0 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)9.6 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)9.3 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Incorrect Authorization (CWE-863)9.9 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Incorrect Authorization (CWE-863)10.0 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Incorrect Authorization (CWE-863)10.0 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)9.3 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)9.3 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Improper Input Validation (CWE-20)9.1 Critical
- adobe experience manager, experience manager 6.5 +1 moreAdobe Experience Manager | Improper Input Validation (CWE-20)9.9 Critical
- omnispace agora projectOmnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php9.3 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)9.9 Critical
- linuxfoundation vitessVitess vttablet /twopcz reflected XSS9.8 Critical
- finsys dockhandDockhand before 1.0.45 Authentication Bypass via Static-Asset Check10.0 Critical
- finsys dockhandDockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation9.2 Critical
- microsoft .net 10.0 runtime, .net 11.0 runtime, .net 8.0 runtime +11 more +13 moreMicrosoft QUIC Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreMicrosoft OpenSSH for Windows Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Error Reporting Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Text Shaping Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Partition Management Driver Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows Domain Name Service Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreMicrosoft Windows Search Component Elevation of Privilege Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Schannel Spoofing Vulnerability9.0 Critical
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Text Shaping Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreNetwork Policy Server (NPS) Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 moreMicrosoft QUIC Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Message Queuing Queue Manager Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows OLE Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 moreWindows BitLocker Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreActive Directory Federation Services (AD FS) Spoofing Vulnerability9.1 Critical
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Outlook Remote Code Execution Vulnerability9.8 Critical
- Show moreLoading…