CRITICAL Severity CVEs

An SQL injection vulnerability in Friendica through the 2026.08-dev branch allows unauthenticated remote attackers to ex

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially craf

A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no v

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the graf

Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to u

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated re

SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol pars

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and 16.29.0, the validate_templat

A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, whic

A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass the Kuadrant AuthPolicy

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy allows an authenticated user to

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy allows an authenticated low-pri

Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.2 until 0.29.13, schedule.create and schedule.u

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, an authenticated user who can crea

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the apiCreateCertificate schema in pack

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy's backup and restore pipeline c

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the dockerImage field is interpolated w

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, swarm.getNodes, swarm.getNodeInfo, swar

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, application.saveBitbucketProvider store

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the backup.restoreBackupWithLogs tRPC s

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destina

Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.3 until 0.29.13, the incomplete fix for CVE-202

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the compose.update operation stores an

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the local branch of /docker-container-t

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy's WebSocket handlers (in-app te

Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes

Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint a

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the mariadb.ts, mongo.ts, mysql.ts, pos

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, packages/server/src/utils/providers/git

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the backup.listBackupFiles tRPC endpoin

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.8 and earlier, backup.create, backup.update, and

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy passes user-controlled values d

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, writeTraefikConfigRemote in packages/se

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the backup.restoreBackupWithLogs tRPC s

Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.x through 2.19

OpenCart extensions are uploaded as zip files with .ocmod.zip extensions. Upon installation, the OpenCart v4.2.0.0 exten

ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix stale skb->prev after async crypto steals

In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in

In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csum_partial() without vector fa

In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notificat

In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed pa

In the Linux kernel, the following vulnerability has been resolved: amt: re-read skb header pointers after every pull

In the Linux kernel, the following vulnerability has been resolved: sctp: auth: verify auth requirement when auth_chunk

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb->sk reference on subflow close

In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets during netns teardow

In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace

In the Linux kernel, the following vulnerability has been resolved: libceph: bound pg_{temp,upmap,upmap_items} length t

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication overflow in decode_new_