Latest critical vulnerabilities
CVSS 9.0 and up.
- xnau webdesign participants databaseWordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability9.8 Critical
- xnau webdesign participants databaseWordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability9.3 Critical
- wizlearn technologies pte. ltd. learning management systemAuthentication Bypass Vulnerability9.8 Critical
- creative labs sound blaster katana v2, v2x, seFirmware verification vulnerability9.6 Critical
- hwk-fr advanced custom fields: extended, unknown advanced custom fields: extended pro +1 moreAdvanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action9.0 Critical
- part-db part-db-serverPart-DB: Authenticated RCE via .phar attachment upload served from public/media9.6 Critical
- okta access gatewayCommand Execution via Admin Console Input in Okta Access Gateway9.1 Critical
- onphase formsAuthentication Bypass Leading to Server-Side Command Execution9.3 Critical
- kiloview e3 firmwareKiloview E3 NDI Encoder OS Command Injection9.4 Critical
- kiloview e3 firmwareKiloview E3 NDI Encoder OS Command Injection9.4 Critical
- kiloview e3 firmwareKiloview E3 NDI Encoder OS Command Injection9.4 Critical
- microsoft azure kubernetes configuration serviceAzure Kubernetes Configuration Service Elevation of Privilege Vulnerability10.0 Critical
- microsoft vm inspector for azure virtual machinesVM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability10.0 Critical
- microsoft entra application proxyAAD App Proxy Elevation of Privilege Vulnerability10.0 Critical
- microsoft azure pipelinesAzure Pipelines Remote Code Execution Vulnerability9.1 Critical
- intersystems iris for healthInterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information9.2 Critical
- arista velocloud orchestratorSecurity Advisory 01999.4 Critical
- lxc incusIncus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream9.4 Critical
- lxc incusIncus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes9.4 Critical
- lxc incusIncus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options9.0 Critical
- lepture mistuneMistune before 3.3.0 Path Traversal via include Directive9.2 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing9.3 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access9.3 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Authentication Bypass in the API allows Administrative Access of AOS-109.3 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access9.3 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-89.4 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-109.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Authentication Bypass leads to Unauthorized Access in AOS-89.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Authentication Bypass Leading to Remote Code Execution in AOS-109.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-89.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Authentication Bypass Leading to Remote Code Execution in AOS-89.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-89.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-109.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Adjacent Command Injection Vulnerability in AOS-109.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution9.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution9.6 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-109.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-89.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-89.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-89.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol9.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-89.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise9.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-109.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-109.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface9.8 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-1010.0 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Authentication Bypass Leading to Remote Code Execution in AOS-810.0 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-810.0 Critical
- hewlett packard enterprise (hpe) arubaos (aos)Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-810.0 Critical
- Show moreLoading…