CRITICAL Severity CVEs

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Zeppelin. The attacker can inject sen

An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through 7

A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on

A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanage

A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload ser

An unauthenticated remote attacker who is aware of a MQTT topic name can send and receive messages, including GET/SET c

JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /chart/annotations/CategoryLineAnno

Apfloat v1.10.1 was discovered to contain a stack overflow via the component org.apfloat.internal.DoubleModMath::modPow(

JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDou

GPT Academic provides interactive interfaces for large language models. A vulnerability was found in gpt_academic versio

In TOTOLINK EX200 V4.0.3c.7314_B20191204, an attacker can obtain the configuration file without authorization through /c

TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the host

AbrhilSoft Employee's Portal before v5.6.2 was discovered to contain a SQL injection vulnerability in the login page.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate payload size in ipc response If in

Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this v

An issue was discovered in CandyCMS version 1.0.0, allows remote attackers to execute arbitrary code via the install.php

Incorrect Access Control vulnerability in ZLMediaKit versions 1.0 through 8.0, allows remote attackers to escalate privi

Unrestricted Upload of File with Dangerous Type vulnerability in Sukhchain Singh Auto Poster.This issue affects Auto Pos

Unrestricted Upload of File with Dangerous Type vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This

Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects

Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vu

IBM Personal Communications 14.0.6 through 15.0.1 includes a Windows service that is vulnerable to remote code execution

In afe_callback of q6afe.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local e

A path traversal vulnerability exists in the Java version of CData Connect < 23.4.8846 when running using the embedded J

A path traversal vulnerability exists in the Java version of CData API Server < 23.4.8844 when running using the embedde

Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a vulnerability

u-boot bug that allows for u-boot shell and interrupt over UART

Webhood is a self-hosted URL scanner used analyzing phishing and malicious sites. Webhood's backend container images in

Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute

MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading t

A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (V

A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an

There is a path traversal in Esri Portal for ArcGIS versions <= 11.2. Successful exploitation may allow a remote, authe

In the Linux kernel, the following vulnerability has been resolved: tls: fix use-after-free on failed backlog decryptio

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on socket dismantle when MP

SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow compone

By default the CloudStack management server honours the x-forwarded-for HTTP header and logs it as the source IP of an A

CSV Injection vulnerability in Addactis IBNRS v.3.10.3.107 allows a remote attacker to execute arbitrary code via a craf

SiYuan version 3.0.3 allows executing arbitrary commands on the server. This is possible because the application is vuln

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320

In the Linux kernel, the following vulnerability has been resolved: scsi: target: pscsi: Fix bio_put() for error case

In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker (who can pass enrollment verifi

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter.

Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This i

Improper Control of Generation of Code ('Code Injection') vulnerability in Cwicly Builder, SL. Cwicly allows Code Inject

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in VideoWhisper

: Improper Control of Generation of Code ('Code Injection') vulnerability in Soflyy Breakdance allows : Code Injection.T

Improper Control of Generation of Code ('Code Injection') vulnerability in Soflyy Oxygen Builder allows Code Injection.

Improper Control of Generation of Code ('Code Injection') vulnerability in Jack Arturo WP Fusion Lite wp-fusion-lite.Thi

Unrestricted Upload of File with Dangerous Type vulnerability in Themeisle Multiple Page Generator Plugin – MPG allows U