Critical vulnerabilities, curated daily for security professionals
Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability - Active in CISA KEV catalog.
Fortinet FortiWeb SQL Injection Vulnerability - Active in CISA KEV catalog.
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability - Active in CISA KEV catalog.
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability - Active in CISA KEV catalog.
Google Chromium ANGLE and GPU Improper Input Validation Vulnerability - Active in CISA KEV catalog.
CrushFTP Unprotected Alternate Channel Vulnerability - Active in CISA KEV catalog.
The Melapress Login Security plugin for WordPress is vulnerable to Authentication Bypass due to missing authorization within the get_valid_user_based_on_token() function in versions 2.1.0 to 2.1.1. Th...
tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has be...
A vulnerability classified as critical has been found in Tenda AC10 16
A vulnerability, which was classified as critical, has been found in Tenda CH22 1
A vulnerability was found in D-Link DIR-513 up to 1
A vulnerability has been found in TOTOLINK X15 1
A vulnerability was found in TOTOLINK X15 1
A vulnerability was found in TOTOLINK X15 1
A vulnerability was found in TOTOLINK X15 1
A vulnerability was found in TOTOLINK X15 1
HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends
The Kallyas theme for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the delete_font() function in all versions up to, and including, 4
A sandbox escape vulnerability was identified in huggingface/smolagents version 1
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to time-based SQL Injection via the dist parameter in all versions up to, and including, 2
The MinimogWP – The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to price manipulation in all versions up to, and including, 3
The kallyas theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4
A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2
A vulnerability was found in 1000 Projects ABC Courier Management System 1
A vulnerability classified as critical has been found in Engeman Web up to 12
A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1
A vulnerability has been found in code-projects Online Ordering System 1
A vulnerability was found in code-projects Online Ordering System 1
A vulnerability was found in code-projects Online Ordering System 1
A vulnerability was found in code-projects Online Ordering System 1
A vulnerability was found in code-projects Exam Form Submission 1
A vulnerability classified as critical has been found in code-projects Exam Form Submission 1
A vulnerability classified as critical was found in code-projects Exam Form Submission 1
A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1
A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1
A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1
LinuxServer