CRITICAL Severity CVEs

Insecure permissions in the scheduled tasks feature of MineAdmin v3.x allows attackers to execute arbitrary commands and

In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists

Insufficiently Protected Credentials vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11

Fireshare facilitates self-hosted media and link sharing. Versions 1.2.30 and below allow an authenticated user, or unau

Parse Server is an open source backend that can be deployed to any infrastructure that runs Node.js. In versions prior t

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient f

The LazyTasks – Project & Task Management with Collaboration, Kanban and Gantt Chart plugin for WordPress is vulnerable

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.

xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate databa

Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authenticatio

In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Read vulnerability can be exploited by an attacker to

In AudioDecoder::HandleProduceRequest of audio_decoder.cc, there is a possible out of bounds write due to an incorrect b

A vulnerability was identified in UTT 进取 512W up to 3.1.7.7-171114. Affected is the function strcpy of the file /goform/

A vulnerability was determined in UTT 进取 512W up to 3.1.7.7-171114. This impacts the function strcpy of the file /goform

pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in serv

Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbi

Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbi

Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbi

Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbi

Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbi

Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbi

An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows att

An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attac

In versions of ScreenConnect™ prior to 25.8, server-side validation and integrity checks within the extension subsystem

The WP CarDealer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.16

Cybersecurity AI (CAI) is an open-source framework for building and deploying AI-powered offensive and defensive automat

Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool exe

Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 contain an undocumented r

Due to a lack of certificate validation, all traffic from the mobile application can be intercepted. As a result, an adv

The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over

The mobile application was found to contain stored credentials for the network it was developed on. If an attacker retri

The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was d

An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0. An exported activity can be spawned with the mob

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password

UBICOD Medivision Digital Signage 1.5.1 contains an authorization bypass vulnerability that allows normal users to escal

QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file deletion vulnerability in the QH.aspx endpoint t

QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated remote code execution vulnerability in the QH.aspx fi

Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateU

Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allo

A template injection vulnerability in the /vip/v1/file/save component of ChanCMS v3.3.4 allows attackers to execute arbi

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerabilit

A malicious actor can access camera configuration information, including account credentials, without authenticating whe

DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting ser

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify t

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL def

Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank passw

An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary d