Latest critical vulnerabilities
CVSS 9.0 and up.
- oray pugongying x5 proOray Pugongying X5 Pro API Authorization run_async_task improper authorization9.4 Critical
- giteaGitea public-only package token access to private OCI blobs9.1 Critical
- giteaGitea public-only token bypass through Actions runner registration9.1 Critical
- giteaGitea OAuth2 account auto-linking takeover through the sign-up form9.8 Critical
- wavlink wl-wn530be1-aWAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injection10.0 Critical
- wavlink wl-wn530hg4bWAVLINK WL-WN530HG4B wapi.cgi port_forward os command injection9.4 Critical
- wavlink wn579x3-dWAVLINK WN579X3-D wapi.cgi port_forward os command injection9.4 Critical
- wavlink wl-wn579a3-aWAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injection10.0 Critical
- d-link dir-505D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow10.0 Critical
- linuxnet: skbuff: propagate shared-frag marker in skb_zerocopy()9.8 Critical
- google androidIn SendInfo of UssiController.cpp, there is a possible way to corrupt memory via a dangling...9.8 Critical
- google androidIn GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of...9.8 Critical
- google androidIn oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free....9.8 Critical
- google androidIn png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This...9.8 Critical
- google androidIn multiple locations, there is a possible memory safety issue due to a use-after-free. This...9.8 Critical
- google androidIn onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap...9.8 Critical
- google androidIn IMG_vkCreateImageView of image_view.c, there is a possible way to trigger a use after free due...9.8 Critical
- google androidIn multiple functions of rmmi_utility.c, there is a possible way to trigger an out of bounds...9.8 Critical
- google androidIn multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check....9.8 Critical
- google androidIn NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling...9.8 Critical
- google androidIn chppProcessDiscoverAllResponse of system/chre/chpp/clients/discovery.c, there is a possible...9.8 Critical
- google androidIn handleEvent of gscan.cpp, there is a possible way to trigger an out of bounds write on the...9.8 Critical
- google androidIn multiple locations, there is a possible out-of-bounds write due to an integer overflow. This...9.8 Critical
- google androidIn __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out-of...9.8 Critical
- google androidIn EncodeLastScanBufferElement of data_manager.cc, there is a possible out-of-bounds write due to...9.8 Critical
- google androidIn AudioSession::SendInternalEvent of AudioSession.cpp, there is a possible Double Free due to a...9.8 Critical
- google androidIn multiple files, there is a possible out-of-bounds write due to a missing bounds check. This...9.8 Critical
- google androidIn multiple locations, there is a possible use-after-free due to a logic error in the code. This...9.8 Critical
- No product listedXS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder9.8 Critical
- apache software foundation minaApache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoder9.8 Critical
- anji-plus aj-reportAJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token9.3 Critical
- dromara jpomJpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Header9.3 Critical
- No product listedWebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages9.8 Critical
- No product listedWebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback9.8 Critical
- acadlix lms – ai quiz maker, online exam & course plugin for wordpressAcadlix LMS <= 1.1.9 - Unauthenticated Arbitrary File Deletion via 'delete_file_data.file_path' Parameter9.1 Critical
- wpazleen simpleform – form maker to chat apps with quiz, poll and multi lead notificationsSimpleForm <= 3.10.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename via Unknown File Key in simpleform_get_submit_data9.8 Critical
- wedevs project manager – ai powered project management, task management, kanban board & time trackerProject Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection9.8 Critical
- uncanny owl toolkit for learndash, uncannyowl uncanny toolkit for learndash +1 moreUncanny Toolkit for LearnDash <= 3.8.2 - Unauthenticated Authentication Bypass via 'email' Parameter9.8 Critical
- murgroland wp booking system – booking calendarWP Booking System <= 2.1.0.5 - Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion via wpbs_calendar_remove_note AJAX Action9.1 Critical
- popupbuilder popup builder – create highly converting, mobile friendly marketing popups.Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id' Parameters9.1 Critical
- addonsorg pdf invoice for woocommerce + drag and drop template builderPDF Invoice for WooCommerce + Drag and Drop Template Builder <= 7.1.1 - Unauthenticated PHP Object Injection to Remote Code Execution via 'customer_note' Checkout Field9.8 Critical
- pow-auth assentUnverified Sign in with Apple callback parameter can override verified ID token claims9.3 Critical
- @signalk resources-provider, signalk signalk-server +1 moreSignal K Server: Unauthenticated path traversal in resources-provider v2 API leads to JWT secret disclosure, admin impersonation and remote code execution9.8 Critical
- imgproxyimgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow9.3 Critical
- fctr-id okta-ai-agentTAKO AI Agent for Okta: Unauthenticated first-run administrator takeover9.8 Critical
- gojue molingMoLing: unauthenticated SSE and wildcard CORS expose tool sessions9.6 Critical
- mqttsnet thinglinksThingLinks TDengine TDS APIs vulnerable to unauthenticated SQL injection9.1 Critical
- mqttsnet thinglinksThingLinks vulnerable to authenticated remote code execution via Groovy script registration in ThingLinks9.9 Critical
pypa/gh-action-pypi-publishGitHub Actionspypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI9.3 Critical- deadtrickster ssl verify funssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary9.1 Critical
- Show moreLoading…