Latest critical vulnerabilities
CVSS 9.0 and up.
- canove whaticket-communityWhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup9.3 Critical
- langchatLangChat through commit 2a6285a Missing Authentication on REST API Controllers9.3 Critical
- databufflabs databuffDataBuff ai-apm-web through 0.1.10 Hard-Coded Default Admin Credentials9.3 Critical
- databufflabs databuffDataBuff ai-apm-web through 0.1.10 Authentication Bypass via Hardcoded HMAC Secret9.3 Critical
- wimoor-erp wimoorWIMOOR through commit ec86736 Authentication Bypass via Forged X-USERINFO Header9.1 Critical
- suyuan32 simple-admin-coreSimple Admin Core through 1.8.7 Hard-Coded JWT Secret Authentication Bypass9.3 Critical
- rachelos we-mp-rssWeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint9.3 Critical
- xiaochong0302 course-tencent-cloudCourse-tencent-cloud through 2.0.1 Verification Code Brute Force Account Takeover9.1 Critical
- thecosy icecmsIceCMS through 4.1.5 Missing Authentication via /User Administrative Endpoints9.3 Critical
- chaskiqChaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutation9.2 Critical
- l429609201 misaka danmu serverMisaka Danmu Server through 2.8.9 Authentication Bypass via Config-History Rollback9.3 Critical
- fastapiadminFastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints9.3 Critical
- openbmb staffdeckOpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret9.2 Critical
- webreaper damselflyWebreaper Damselfly through 4.5.3 Missing Authentication on REST API Controllers9.3 Critical
- aws freertos-plus-tcpImproper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling9.2 Critical
- freertos freertos-kernelNumeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel9.3 Critical
- freertos freertos-kernelIncorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel9.3 Critical
- riot-os riotRIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read9.8 Critical
- riot-os riotRIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID9.6 Critical
- riot-os riotRIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access9.1 Critical
- devolutions server, mariadb +1 moreMariaDB: Use-after-free with a large number of SYS_REFCURSOR's9.9 Critical
- devolutions server, mariadb +1 moreMariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections9.9 Critical
- finsys dockhandDockhand: Unauthenticated container exec via WebSocket upgrade9.6 Critical
- countly countly-servercountly-server: Stored XSS in feedback upload enables app-admin to compromise global admin session context9.0 Critical
- j4care dcm4chee-arc-lightJ4Care dcm4che Missing Authentication for Critical Function9.3 Critical
- guangzhou juan iot technology co., ltd. eseecloud app, eseecloud firmware +1 moreGuangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials9.3 Critical
- arcadia technology, llc crafty controllerImproper Encoding or Escaping of Output in Crafty Controller9.6 Critical
- apache software foundation kylinApache Kylin: Missing authentication on certain cache API endpoints9.8 Critical
- apache software foundation kylinApache Kylin: Redis unsafe Java deserialization9.8 Critical
- apache software foundation kylinApache Kylin: Missing authorization and path-confinement on system meta dump9.1 Critical
- sgl-project sglangSGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter9.2 Critical
- tsg profleetSQL injection in TSG Profleet9.3 Critical
- theme-one the gridWordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability10.0 Critical
- halfdata green popupsWordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability9.3 Critical
- sunshinephotocart sunshine photo cart – client photo gallery & photo proofing for photographersSunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter9.8 Critical
- elextensions elex wordpress helpdesk & customer ticketing systemELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment9.8 Critical
- jeff farthing theme my loginTheme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter9.8 Critical
- joedolson my calendar – accessible event managerMy Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute9.8 Critical
- properfraction mailoptin – popup, optin forms & email newsletters for mailchimp, hubspot, aweber etc.MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter9.8 Critical
- kitae-park mang boardMang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter9.8 Critical
- wheelsWheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled ...9.8 Critical
- No product listedAn untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute...10.0 Critical
- No product listedBuffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote...9.8 Critical
- google chromeImproper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote...9.6 Critical
- magicblack maccmsMacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force9.1 Critical
- juggleimJuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console9.3 Critical
- coleam00 archonArchon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API9.3 Critical
- openhealthforall openhealthOpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] Route9.2 Critical
- bmc helix network managementBMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configuration9.5 Critical
- jooan ja-a12Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials9.3 Critical
- Show moreLoading…