CRITICAL Severity CVEs

MTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon. An attacker can execute arbitrary SQL sta

Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to write any file on the system w

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in ZkTeco-base

The Salon booking system plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and includ

An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sig

Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.

Quanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable

A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via th

A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Properly link new fs rules into the tree

Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a

Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be cha

In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell me

In the Linux kernel, the following vulnerability has been resolved: dma-direct: Leak pages on dma_set_decrypted() failu

In the Linux kernel, the following vulnerability has been resolved: udp: do not accept non-tunnel GSO skbs landing in a

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in smb2_reconnect_server() Th

In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from par

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_opl

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_lea

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in is_valid_oplock_b

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_network_n

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_signal_cifsd

Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for

QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, an

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulner

A remote code execution (RCE) vulnerability exists in the berriai/litellm project due to improper control of the generat

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The

In the Linux kernel, the following vulnerability has been resolved: crypto: safexcel - Add error handling for dma_map_s

An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to exec

An arbitrary file upload vulnerability in the component \modstudent\controller.php of Pisay Online E-Learning System usi

Unrestricted Upload of File with Dangerous Type vulnerability in JumpDEMAND Inc. ActiveDEMAND allows Using Malicious Fil

Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "

Improper Control of Generation of Code ('Code Injection') vulnerability in WPCustomify Customify Site Library allows Cod

Improper Privilege Management vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager allows Privile

Improper Privilege Management vulnerability in 8theme XStore Core allows Privilege Escalation.This issue affects XStore

Improper Privilege Management vulnerability in Astoundify Simple Registration for WooCommerce allows Privilege Escalatio

Improper Privilege Management vulnerability in CodeRevolution Demo My WordPress allows Privilege Escalation.This issue a

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Sizam Design Rehub allow

Improper Privilege Management vulnerability in Wholesale WholesaleX allows Privilege Escalation.This issue affects Whole

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Automatic Automatic a

Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects

Improper Privilege Management vulnerability in WebWizards SalesKing allows Privilege Escalation.This issue affects Sales

Improper Privilege Management vulnerability in Glowlogix WP Frontend Profile allows Privilege Escalation.This issue affe

Improper Privilege Management vulnerability in powerfulwp Local Delivery Drivers for WooCommerce allows Privilege Escala

Improper Privilege Management vulnerability in IOSS WP MLM Unilevel allows Privilege Escalation.This issue affects WP ML

Improper Privilege Management vulnerability in Saleswonder Team WebinarIgnition allows Privilege Escalation.This issue a

Unrestricted Upload of File with Dangerous Type vulnerability in Copymatic Copymatic – AI Content Writer & Generator.Thi

Improper Privilege Management vulnerability in HasThemes HT Mega allows Privilege Escalation.This issue affects HT Mega:

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LWS LWS Affiliation allo