CRITICAL Severity CVEs

The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after

An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and ear

An issue found in Earcms Ear App v.20181124 allows a remote attacker to execute arbitrary code via the uload/index-uplog

TripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20201123-184084 allows unsafe data inputs

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key g

A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR

A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes

In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks,

Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interf

An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv softw

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in a

An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_

Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter a

theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVi

SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection.

ECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr['id'] parameter at \default\helpers\inse

Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998.

User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where

User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where

User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a

User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a dif

User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a di

User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during password recovery, where a dif

User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during password recovery, where a d

User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a

User enumeration is found in PHP Jabbers Restaurant Booking Script v3.0. This issue occurs during password recovery, whe

User enumeration is found in PHPJabbers Document Creator v1.0. This issue occurs during password recovery, where a diffe

User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a d

User enumeration is found in PHPJabbers Callback Widget v1.0. This issue occurs during password recovery, where a differ

PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php.

PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php.

Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within t

Saho’s attendance devices ADM100 and ADM-100FP have insufficient authentication. An unauthenticated remote attacker can

SpotCam Co., Ltd. SpotCam Sense’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthen

SpotCam Co., Ltd. SpotCam FHD 2 has a vulnerability of using hard-coded uBoot credentials. An remote attacker can explo

SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthe

SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of using hard-coded Telnet credentials. An

weblogic-framework is a tool for detecting weblogic vulnerabilities. Versions 0.2.3 and prior do not verify the returned

Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perfo

Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function.

e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenti

IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion (LFI) vulnerability via the component /cale

A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transpo

The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and p

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list and bindnum at

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and p

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetNe

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter macFilterType and par

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/S