Critical-severity CVEs (page 91)

Page 91 of 100 — critical-severity CVEs, newest first, with CVSS scores and publication dates.

All critical-severity CVEs — newest first (page 91 of 100)
CVESeverityScorePublishedSummary
CVE-2025-25530Critical9.82025-02-11Buffer overflow vulnerability in Digital China DCBI-Netlog-LAB Gateway 1.0 due to the lack of length verification, which is related to saving parental control…
CVE-2025-1044Critical9.82025-02-11Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installati…
CVE-2025-24434Critical9.12025-02-11Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could r…
CVE-2025-21198Critical9.02025-02-11Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability
CVE-2025-1126Critical9.32025-02-11A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client.
CVE-2025-24973Critical9.32025-02-11Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Prior to version 12.25Q1.1, due to an improper implementation of…
CVE-2025-22467Critical9.92025-02-11A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code execution.
CVE-2024-47908Critical9.12025-02-11OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote…
CVE-2024-10644Critical9.12025-02-11Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with ad…
CVE-2024-12366Critical9.82025-02-11PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote Code Execution (RCE)…
CVE-2025-26410Critical9.82025-02-11The firmware of all Wattsense Bridge devices contain the same hard-coded user and root credentials. The user password can be easily recovered via password crac…
CVE-2025-0181Critical9.82025-02-11The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.8. This is due to the…
CVE-2025-0180Critical9.82025-02-11The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.7. This is due to the plugin not properly…
CVE-2025-1144Critical9.82025-02-11School Affairs System from Quanxun has an Exposure of Sensitive Information, allowing unauthenticated attackers to view specific pages and obtain database info…
CVE-2025-24016Critical9.92025-02-10Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe d…
CVE-2024-13011Critical9.82025-02-10The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'upload_publisher_profile_image'…
CVE-2025-0316Critical9.82025-02-08The WP Directorybox Manager plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.5. This is due to incorrect authent…
CVE-2024-55215Critical9.82025-02-07An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via the initialization interface /auth/register.
CVE-2024-57707Critical9.82025-02-07An issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and password components.
CVE-2025-1107Critical9.92025-02-07Unverified password change vulnerability in Janto, versions prior to r12. This could allow an unauthenticated attacker to change another user's password withou…
CVE-2025-25107Critical9.62025-02-07Cross-Site Request Forgery (CSRF) vulnerability in sainwp OneStore Sites onestore-sites allows Cross Site Request Forgery.This issue affects OneStore Sites: fr…
CVE-2025-25106Critical9.62025-02-07Cross-Site Request Forgery (CSRF) vulnerability in FancyWP Starter Templates by FancyWP starter-templates allows Cross Site Request Forgery.This issue affects…
CVE-2025-25101Critical9.62025-02-07Cross-Site Request Forgery (CSRF) vulnerability in MetricThemes Munk Sites munk-sites allows Cross Site Request Forgery.This issue affects Munk Sites: from n/a…
CVE-2025-1061Critical9.82025-02-07The Nextend Social Login Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.16. This is due to insufficient…
CVE-2025-0674Critical9.82025-02-07Multiple Elber products are affected by an authentication bypass vulnerability which allows unauthorized access to the password management functionality. Att…
CVE-2025-24786Critical10.02025-02-06WhoDB is an open source database management tool. While the application only displays Sqlite3 databases present in the directory `/db`, there is no path traver…
CVE-2025-22992Critical9.82025-02-06A SQL Injection vulnerability exists in the /feed/insert.json endpoint of the Emoncms project >= 11.6.9. The vulnerability is caused by improper handling of us…
CVE-2025-24981Critical9.32025-02-06MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. In affected versions unsafe parsing logic of the URL from m…
CVE-2024-36556Critical9.12025-02-06Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h, and Forever KidsWatch Call Me 2 KW60 R36CW_YDE_S4_A29_2_V1.0_2023.05.24_22.49…
CVE-2024-36555Critical9.82025-02-06Built-in SMS-configuration command in Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Forever KidsWatch Call Me 2 KW-60 R36…
CVE-2024-36554Critical9.82025-02-06Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Forever KidsWatch Call Me KW-60 R36CW_YDE_S4_A29_2_V1.0_2023.05.24_22.49.4…
CVE-2024-57430Critical9.82025-02-06An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the…
CVE-2024-57428Critical9.32025-02-06A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fields (event_img, se…
CVE-2024-39272Critical9.02025-02-06A cross-site scripting (xss) vulnerability exists in the dataset upload functionality of ClearML Enterprise Server 3.22.5-1533. A specially crafted HTTP reques…
CVE-2022-40916Critical9.82025-02-06Tiny File Manager v2.4.7 and below is vulnerable to session fixation.
CVE-2025-0982Critical10.02025-02-06Sandbox escape in the JavaScript Task feature of Google Cloud Application Integration allows an actor to execute arbitrary unsandboxed code via crafted JavaScr…
CVE-2024-51547Critical9.82025-02-06Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterprise: through 3.*; NE…
CVE-2024-51450Critical9.12025-02-06IBM Security Verify Directory 10.0.0 through 10.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specia…
CVE-2025-1066Critical9.82025-02-06OpenPLC_V3 contains an arbitrary file upload vulnerability, which could be leveraged for malvertising or phishing campaigns.
CVE-2024-57520Critical9.82025-02-05Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the action_createconfig function. NOTE: this is dispu…
CVE-2024-57077Critical9.12025-02-05The latest version of utils-extend (1.0.8) is vulnerable to Prototype Pollution through the entry function(s) lib.extend. An attacker can supply a payload with…
CVE-2020-36084Critical9.82025-02-05SQL Injection vulnerability in SourceCodester Responsive E-Learning System 1.0 allows remote attackers to inject sql query in /elearning/delete_teacher_student…
CVE-2025-20125Critical9.12025-02-05A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change n…
CVE-2025-20124Critical9.92025-02-05A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device. T…
CVE-2025-23114Critical9.02025-02-05A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. This issue occurs due to a fail…
CVE-2024-48445Critical9.82025-02-04An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary code via the rid, tid, et, and ts parameters.
CVE-2025-24964Critical9.62025-02-04Vitest is a testing framework powered by Vite. Affected versions are subject to arbitrary remote Code Execution when accessing a malicious website while Vitest…
CVE-2025-0960Critical9.82025-02-04AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a d…
CVE-2025-0364Critical9.82025-02-04BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticat…
CVE-2025-24677Critical9.92025-02-04Improper Control of Generation of Code ('Code Injection') vulnerability in wpspin Post/Page Copying Tool postpage-import-export-with-custom-fields-taxonomies a…
CVE-2025-22699Critical9.02025-02-04Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler Code traveler-code.This issue affects…
CVE-2024-9644Critical9.82025-02-04The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server. Authentication is…
CVE-2024-9643Critical9.82025-02-04The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authentication bypass due to hard-coded credentials in the administrative web server. An att…
CVE-2025-1020Critical9.82025-02-04Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s…
CVE-2025-1017Critical9.82025-02-04Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption a…
CVE-2025-1016Critical9.82025-02-04Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bug…
CVE-2025-1009Critical9.82025-02-04An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135…
CVE-2025-0890Critical9.82025-02-04**UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_201…
CVE-2025-22204Critical9.82025-02-04Improper control of generation of code in the sourcerer extension for Joomla in versions before 11.0.0 lead to a remote code execution vulnerability.
CVE-2025-24957Critical9.82025-02-03WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, `get_detalhes_socio.php` endpoint. T…
CVE-2025-24906Critical9.82025-02-03WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, `get_detalhes_cobranca.php` endpoint…
CVE-2025-24905Critical9.82025-02-03WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, `get_codigobarras_cobranca.php` endp…
CVE-2025-22978Critical9.82025-02-03eladmin <=2.7 is vulnerable to CSV Injection in the exception log download module.
CVE-2024-57968Critical9.92025-02-03Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsin…
CVE-2024-57450Critical9.82025-02-03ChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function.
CVE-2024-57099Critical9.82025-02-03ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in the classview parameter of the model ma…
CVE-2024-57098Critical9.82025-02-03Moss v0.1.3 version has an SQL injection vulnerability that allows attackers to inject carefully designed payloads into the order parameter.
CVE-2024-45569Critical9.82025-02-03Memory corruption while parsing the ML IE due to invalid frame content.
CVE-2025-20634Critical9.82025-02-03In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue bas…
CVE-2025-24891Critical9.62025-01-31Dumb Drop is a file upload application. Users with permission to upload to the service are able to exploit a path traversal vulnerability to overwrite arbitrar…
CVE-2024-57587Critical9.12025-01-31Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL comm…
CVE-2024-55062Critical9.82025-01-31Code Injection vulnerability in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary code to /api/licen…
CVE-2024-53356Critical9.82025-01-31Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC se…
CVE-2025-22957Critical9.82025-01-31A SQL injection vulnerability exists in the front-end of the website in ZZCMS <= 2023, which can be exploited without any authentication. This vulnerability co…
CVE-2024-53584Critical9.82025-01-31OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter.
CVE-2024-47857Critical9.82025-01-31SSH Communication Security PrivX versions between 18.0-36.0 implement insufficient validation on public key signatures when using native SSH connections via a…
CVE-2024-53537Critical9.12025-01-31An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager.
CVE-2024-53320Critical9.82025-01-31Qualisys C++ SDK commit a32a21a was discovered to contain multiple stack buffer overflows via the GetCurrentFrame, SaveCapture, and LoadProject functions.
CVE-2025-0929Critical9.82025-01-31SQL injection vulnerability in TeamCal Neo, version 3.8.2. This could allow an attacker to retrieve, update and delete all database information by injecting a…
CVE-2025-21673Critical9.82025-01-31In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCP_Server_Info::hostname When shutting down the server i…
CVE-2025-0493Critical9.82025-01-31The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Limited Local File Inclusion in all version…
CVE-2022-1736Critical9.82025-01-31Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default.
CVE-2025-0680Critical9.82025-01-30Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary dev…
CVE-2024-12248Critical9.82025-01-30Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order…
CVE-2025-0498Critical9.82025-01-30A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insec…
CVE-2025-0497Critical9.82025-01-30A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to stori…
CVE-2025-0477Critical9.82025-01-30An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak…
CVE-2024-13742Critical9.82025-01-30The iControlWP – Multiple WordPress Site Manager plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.4.5 via des…
CVE-2024-12822Critical9.82025-01-30The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing ca…
CVE-2025-21415Critical9.92025-01-29Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network.
CVE-2024-57665Critical9.82025-01-29JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerability is that the title parameter is control…
CVE-2025-0851Critical9.82025-01-29A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary location…
CVE-2024-57395Critical9.82025-01-29Password Vulnerability in Safety production process management system v1.0 allows a remote attacker to escalate privileges, execute arbitrary code and obtain s…
CVE-2024-54852Critical9.82025-01-29When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injection. Due to improper…
CVE-2025-20061Critical9.82025-01-29mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploited by an attacker t…
CVE-2025-20014Critical9.82025-01-29mySCADA myPRO does not properly neutralize POST requests sent to a specific port with version information. This vulnerability could be exploited by an attacker…
CVE-2024-48852Critical9.42025-01-29Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some information may be improperly disclosed through https access. This i…
CVE-2024-48849Critical9.42025-01-29Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauthorized HTTPS requests. This issue affec…
CVE-2025-23211Critical9.92025-01-28Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute com…
CVE-2025-23045Critical9.82025-01-28Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with an account on an affected CVAT i…