CRITICAL Severity CVEs

A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allo

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploite

Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attacker

WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attacke

WAVLINK WN701AE M01AE_V240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows

ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 5.5.1 Revision 199 and below is vulnera

ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 2.0 to Version 5.5.1 Revision 199 are v

Unrestricted Upload of File with Dangerous Type vulnerability in roninwp Revy revy allows Upload a Web Shell to a Web Se

Missing Authorization vulnerability in N-Media Simple User Registration wp-registration allows Accessing Functionality N

A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF05). The affected application do not pr

Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member allows Cod

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Marka WordPress

The product is vulnerable to pass-the-hash attacks in combination with hardcoded credentials of hidden user levels. This

An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django

The SV100 Companion plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege e

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow vi

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow vi

In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing

whapa v1.59 is vulnerable to Command Injection via a crafted filename to the HTML reports component.

DTStack Taier 1.4.0 allows remote attackers to specify the jobName parameter in the console listNames function to cause

Oxide control plane software before 5 allows SSRF.

STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as

Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and un

Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a clien

Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher p

Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default cred

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default cred

Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in

Absolute File Traversal vulnerabilities allows access and modification of un-intended resources.  Affected products:

Dangerous File Upload vulnerabilities allow upload of malicious scripts.  Affected products: ABB ASPECT - Enterprise v

Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. 

Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that cou

Unauthorized Access vulnerabilities allow Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.08.02;

Improper Input Validation vulnerability allows Remote Code Execution.  Affected products: ABB ASPECT - Enterprise v3.0

Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportuni

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp FAT Servic

An issue in INOVANCE AM401_CPU1608TPTN allows a remote attacker to execute arbitrary code via the ExecuteUserProgramUpgr

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix incorrect page refcounting Th

Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8.

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromWizardHandle modules) allows

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_che

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (setDoublePppoeConfig->guest_ip_ch

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 (fromAdvSetLanip(overflow arg:lanM

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

Insecure deserialization in Hodoku v2.3.0 to v2.3.2 allows attackers to execute arbitrary code.

An unauthenticated attacker can trigger a stack based buffer overflow in the DP Service (TCP port 3500). This vulnerabil

Synapse is an open-source Matrix homeserver. In Synapse versions before 1.120.1, enabling the dynamic_thumbnails option

In prop2cfg of btif_storage.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lea