Critical severity vulnerabilities
23,847 CVEs scored 9.0 to 10.0 on CVSS. Critical vulnerabilities can usually be exploited remotely, without a login, to take over the affected system. Patch these first.
- 9.9 Critical severity
Cisco Secure Firewall Adaptive Security…: Improper Access Control
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has cond
- 9.1 Critical severity
Cisco Identity Services Engine Software: Improper Neutralization of Special Elements in Data Query Logic
A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. This vulnerability is due to insufficient validation of user-supplied input in REST API calls. An attacker could exploit this vulne
- 10.0 Critical severity
Altium Enterprise Server: Missing Authentication for Critical Functionality
A server-side request forgery (SSRF) vulnerability exists in the UnifiedLogin service of Altium Enterprise Server. An unauthenticated network attacker can cause the server to issue outbound HTTP requests to a destination of the attacker's choosing, including i
- 9.3 Critical severity
HP AC Print & Scan: Improper Control of Generation of Code
HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.
- 9.3 Critical severity
HP AC Print & Scan: Improper Control of Generation of Code
HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.
- 10.0 Critical severity
Cisco Identity Services Engine Software: Authentication Bypass by Spoofing
A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web service being exposed with insufficient authorizat
- 9.1 Critical severity
Cisco Secure Firewall Management Center (FMC): Deserialization of Untrusted Data
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privileges. This vulnerability is due to unsecured deserialization of untrusted data over the sft
- 9.9 Critical severity
Cisco Secure Firewall Adaptive Security…: Improper Neutralization
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has cond
- 9.9 Critical severity
Cisco Secure Firewall Adaptive Security…: Improper Check or Handling of Exceptional Conditions
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has cond
- 9.8 Critical severity
Cisco Nexus Dashboard: Missing Authentication for Critical Functionality
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple int
- 9.9 Critical severity
Cisco Nexus Dashboard: Improper Neutralization of Special Elements used in a Command
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multipl
- 9.9 Critical severity
Cisco Secure Firewall Management Center (FMC): Missing Authorization
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands as root. This vulnerability exists because a registered sf
- 9.9 Critical severity
Cisco Nexus Dashboard: Improper Access Control
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multipl
- 9.8 Critical severity
Cisco Secure Firewall Management Center (FMC): Deserialization of Untrusted Data
A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to ins
- 9.1 Critical severity
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco…
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review
- 9.1 Critical severity
Cisco Identity Services Engine Software: Deserialization of Untrusted Data
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid high-privileged administrative creden
- 9.1 Critical severity
Cisco Identity Services Engine Software: Incorrect Resource Transfer Between Spheres
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review
- 10.0 Critical severity
Cisco Identity Services Engine Software: Improper Access Control
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review
- 9.1 Critical severity
Cisco Identity Services Engine Software: Improper Neutralization of Special Elements used in a Command
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid high-privileged administrative creden
- 10.0 Critical severity
Cisco Identity Services Engine Software: Improper Neutralization of Special Elements in Output Used by a Downstream Component
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Heap-based Buffer Overflow
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Heap-based Buffer Overflow
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Heap-based Buffer Overflow
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Integer Underflow (Wrap or Wraparound)
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Improper Neutralization of Special Elements used in an OS Command
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Improper Validation of Array Index
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Improper Neutralization of Special Elements used in an OS Command
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): UNIX Symbolic Link (Symlink) Following
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Heap-based Buffer Overflow
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Out-of-bounds Write
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 10.0 Critical severity
EOS: Improper Control of Generation of Code
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full adminis
- 9.8 Critical severity
Apache MyFaces: Server-Side Request Forgery
Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, or 4.1.4, which fix this issue.
- 9.1 Critical severity
kubero: Missing Authentication for Critical Functionality
Kubero through 3.1.1 fails to apply authentication guards to the notifications API endpoints, allowing unauthenticated attackers to read webhook secrets and service URLs. Attackers can retrieve stored credentials and register malicious webhooks to intercept pi
- 9.1 Critical severity
Covenant: Missing Authentication for Critical Functionality
Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire ope
- 9.6 Critical severity
Shuffle: Authorization Bypass Through User-Controlled Key
Shuffle through 2.2.1 contains a cross-tenant privilege escalation vulnerability in the HandleApiGeneration endpoint that allows administrators to reset and read API keys of non-administrator users in other organizations. Attackers with admin privileges in one
- 9.1 Critical severity
RG-EW3000GX: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg_config/admin of the component user_list_note Module. Performing a manipulation of the argument Name results in os command
- 9.6 Critical severity
Concrete CMS: Improper Neutralization of Input During Web Page Generation
Concrete CMS below 9.5.4 did not validate the user timezone value (uTimezone) on write and rendered it without output encoding on the Dashboard user management page, where Date::getTimezoneDisplayName() returns any non-IANA value unchanged. A stored cross-site
- 9.0 Critical severity
Cisco Secure Firewall Management Center (FMC): Improper Authorization
A vulnerability in the internal configuration of the Apache JServ Protocol (AJP) connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to impersonate a peer device. This vulnerability is due to incorrect initialization of
- 9.6 Critical severity
Cisco Secure Firewall Adaptive Security…: Protection Mechanism Failure
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has cond
- 9.9 Critical severity
Cisco Identity Services Engine Software: Deserialization of Untrusted Data
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have at le