Latest critical vulnerabilities
CVSS 9.0 and up.
- randombit botanBotan: Integer overflow when reporting block size in FFI can cause memory corruption9.2 Critical
- monkeytypegame monkeytypeMonkeytype: fork PR can execute code with elevated GITHUB_TOKEN9.3 Critical
- elated-themes frappeFrappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload9.4 Critical
- zitadelZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie9.1 Critical
- progress software ws ftp serverOS Command Injection in Progress WS_FTP Server9.9 Critical
- progress software ws ftp serverVirtual Folder Path Confinement Bypass in Progress WS_FTP Server9.1 Critical
- progress software ws ftp serverCommand Injection via FTP Notification Variables in Progress WS_FTP Server9.0 Critical
- progress software ws ftp serverHost Administrator Path Containment Bypass in Progress WS_FTP Server9.1 Critical
- progress software ws ftp serverPrivilege Escalation via Missing Authorization in WS_FTP Manager9.1 Critical
- progress software ws ftp serverImproper Authentication in Progress WS_FTP Server10.0 Critical
- rt-labs p-netOut-of-bounds write when parsing AR Vendor Block requests9.3 Critical
- opentext advanced authentication serverLogon bypass (trust of attacker-controlled completed-methods list)9.2 Critical
- zoho flow flowWordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability9.8 Critical
- themerex gunslingerWordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability9.8 Critical
- themerex good homesWordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability9.8 Critical
- themerex gamicWordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability9.8 Critical
- themerex gamezoneWordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability9.8 Critical
- themerex emojinationWordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerability9.8 Critical
- themerex edge decorWordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability9.8 Critical
- themerex coinpressWordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerability9.8 Critical
- themerex bonbonWordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability9.8 Critical
- themerex avventureWordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability9.8 Critical
- themerex filmaxWordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerability9.8 Critical
- themerex orpheusWordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability9.8 Critical
- themerex nutsWordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability9.8 Critical
- themerex muziconWordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerability9.8 Critical
- themerex motorixWordPress Motorix theme <= 1.11 - PHP Object Injection vulnerability9.8 Critical
- themerex missionWordPress Mission theme <= 1.22 - PHP Object Injection vulnerability9.8 Critical
- themerex meals & wheelsWordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability9.8 Critical
- themerex marcellWordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability9.8 Critical
- themerex le truffeWordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability9.8 Critical
- themerex legal stoneWordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability9.8 Critical
- eyal fitoussi geo my wordpressWordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability9.8 Critical
- ajax load more ajaxloadmore cacheWordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability10.0 Critical
- themerex ozistiWordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability9.8 Critical
- themerex preservationWordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability9.8 Critical
- themerex printyWordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability9.8 Critical
- themerex quirkyWordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability9.8 Critical
- themerex rexcoinWordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability9.8 Critical
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities9.8 Critical
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities9.8 Critical
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities9.9 Critical
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities9.9 Critical
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities9.9 Critical
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities9.8 Critical
- agnoAgno through 3.1.11 Code Execution via PandasTools Unsafe Reflection9.2 Critical
- yamaha corporation nwr100Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection...9.3 Critical
- stylemixthemes motorsWordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability9.3 Critical
- apache software foundation qpid proton cApache Qpid Proton C: Potential authentication bypass: regular AMQP frames can be sent as SASL frames9.8 Critical
- apache software foundation qpid proton cApache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash9.8 Critical
- Show moreLoading…