HIGH Severity CVEs

When a user invokes curl using a schemeless URL combined with `--proto-default` sftp (or scp), a disconnect occurs betwe

By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation

An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service agai

The AR for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi

The AR for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.4

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker on the same local n

WatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore featu

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated privileged u

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS ikestubd process could allow an authenticated privileged

WatchGuard Fireware OS contains a race condition leading to a use-after-free vulnerability in LDAP authentication for th

A null pointer dereference vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to create

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attac

A path traversal vulnerability in the WatchGuard Fireware OS Management Web UI allows a privileged authenticated attacke

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to exe

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allow an authenticated privileged

Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.

Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly verify the DER encoding o

Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify the length of the authen

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation wou

react-native-receive-sharing-intent contains a path traversal vulnerability that allows a co-resident malicious applicat

An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead

Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of s

Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of s

Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Not

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The pars

Dapr Sentry's OIDC discovery endpoint derives the issuer and jwks_uri of the /.well-known/openid-configuration document

LobeChat before 2.2.10-canary.18 contains a server-side request forgery vulnerability that allows authenticated attacker

Pathway through 0.31.1, fixed in commit d09722e, document store applies a caller-supplied glob pattern to indexed docume

Weaviate before 1.38.0 does not verify that a principal performing an RBAC role assignment holds the permissions granted

JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows unauthentica

Cockpit CMS through 2.14.0 contains a path traversal and local file inclusion vulnerability that allows unauthenticated

Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of s

The TinyPNG – JPEG, PNG & WebP image compression plugin for WordPress is vulnerable to arbitrary file deletion due to in

Eclipse Wakaama before snapshot/2026-05-26 contains an unbounded memory allocation vulnerability in the CoAP Block1 hand

The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientH

Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitr

A relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before 17.38.12 can be used by attack

In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnerability exists whereby an adversary who is authenti

In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulne

A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerabili

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability f

A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Acces

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Applicat

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability f

A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in U

A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper A

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodli

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (COR