Latest critical vulnerabilities
CVSS 9.0 and up.
- labredescefetrj wegiaWeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php9.8 Critical
- databasusDatabasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force9.2 Critical
- dgraph-io dgraphDgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service9.2 Critical
- stirling-tools stirling-pdfStirling-PDF: Remote Code Execution via H29.1 Critical
- d-link dir-868lD-Link DIR-868L HNAP CGI cgibin system os command injection10.0 Critical
- e107inc e107e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chain9.8 Critical
- e107inc e107e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username10.0 Critical
- eclipse foundation vert.xIn Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this cache should reflect entirely the…9.1 Critical
- getredash redashRedash: DuckDB query runner allows arbitrary file read/write via unrestricted external access9.3 Critical
- eclipse foundation netx duoWhen a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet. Both the length and the con…9.3 Critical
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled9.3 Critical
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured9.3 Critical
- hestiacpHestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking9.9 Critical
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used9.3 Critical
- nasa fprimeF´: Unvalidated Port Index in GenericHub9.3 Critical
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled9.3 Critical
- juniper networks junos osJunos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured9.3 Critical
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service9.2 Critical
- juniper networks junos osJunos OS: MX Series: Certificate-based IKE packets cause root-level code execution9.3 Critical
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise9.3 Critical
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used9.3 Critical
- juniper networks junos osJunos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used9.2 Critical
- juniper networks junos os evolvedJunos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled9.3 Critical
- lantronix xpress-dr, xpress-dr-i +1 moreLantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 307189.3 Critical
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised9.3 Critical
- juniper networks junos osJunos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled9.3 Critical
- juniper networks junos osJunos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used9.2 Critical
- juniper networks junos osJunos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication9.2 Critical
- juniper networks junos osJunos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used9.2 Critical
- juniper networks junos osJunos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution9.2 Critical
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution9.3 Critical
- juniper networks junos osJunos OS: Unauthorized root command execution when J-Web is enabled9.3 Critical
- juniper networks junos osJunos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled9.3 Critical
- juniper networks junos osJunos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used9.2 Critical
- kedacore kedaKEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication9.9 Critical
- juniper networks junos os evolvedJunos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used9.3 Critical
- juniper networks junos os evolvedJunos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used9.2 Critical
- cisco secure email, secure email gateway, asyncos +2 moreCisco Secure Email Gateway Arbitrary File Write Vulnerability9.8 Critical
- dokkuDokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS9.0 Critical
- zulipZulip: OpenID Connect authentication ignores the email_verified claim9.1 Critical
- dell terraform provider for redfishDell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate...9.0 Critical
- f5 nginx open source, nginx plus +1 moreNGINX ngx_http_core_module vulnerability9.2 Critical
- f5 nginx open source, nginx plus +1 moreNGINX map directive and regex matching vulnerability9.2 Critical
- f5 nginx open source, nginx plus +1 moreNGINX ngx_http_core_module vulnerability9.2 Critical
- giteaGitea Org-mode file disclosure and code execution9.8 Critical
- anshulkharb thumbnailThumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths9.3 Critical
- shahkashani stillsStills before 25.24.2 OS Command Injection via Media File Names9.3 Critical
- beganovich snappdfBeganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl()9.2 Critical
- arsalandotme video-stitchVideo-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()9.3 Critical
- chetanxpro nodejs-whispernodejs-whisper through 0.3.1 OS Command Injection via convertToWavType9.3 Critical
- Show moreLoading…