HIGH Severity CVEs

Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions.

Unauthenticated Local File Inclusion in Reprizo <= 1.0.8 versions.

Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the render

Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the

Heap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to execute

Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised

Use after free in Browser in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the ren

Use after free in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the rende

Use after free in Tab Strip in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who convinced a user to e

Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the

Use after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to potentially

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromi

Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to perform OS-

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to

Heap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary c

Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to instal

Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbit

Use after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to execute arb

Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially

Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to potentially

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker wh

Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had comprom

The JetEngine plugin for WordPress is vulnerable to SQL injection in all versions up to and including 3.8.10.1. The list

Contributor PHP Object Injection in Avada <= 3.15.3 versions.

A vulnerability in `nltk.app.wordnet_app` up to version 3.9.3 allows unauthenticated remote shutdown of the local WordNe

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Privi

An authenticated OS command injection vulnerability exists in the BigPond Cable (BPA) WAN configuration module in TL-WR9

An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration handler in TL-WR940N v6 due t

In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This could lead to local e

In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to

In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could lead to local escala

In SettingsLib, there is a possible missing permission check due to a logic error in the code. This could lead to local

In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a managed

In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to a lo

In SettingsLib, there is a possible way to disable system components due to a logic error in the code. This could lead t

Unauthenticated Local File Inclusion in Truemag <= 4.3.14.2 versions.

Unauthenticated Local File Inclusion in Roneous <= 2.1.5 versions.

Unauthenticated Local File Inclusion in ITactics <= 1.0 versions.

Unauthenticated Local File Inclusion in Tipsy <= 1.1 versions.

Unauthenticated Local File Inclusion in Resurs <= 1.3 versions.

Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions.

Unauthenticated Local File Inclusion in Spike <= 1.2 versions.

Unauthenticated Local File Inclusion in Eros <= 1.3 versions.

Unauthenticated Local File Inclusion in Choreo <= 1.6 versions.

Unauthenticated Local File Inclusion in WineShop <= 3.17 versions.

Unauthenticated Local File Inclusion in Grecko <= 5.17 versions.

Unauthenticated Local File Inclusion in Snowy <= 1.13 versions.

Unauthenticated Local File Inclusion in Gita <= 1.11 versions.

Unauthenticated Local File Inclusion in Printo <= 1.11 versions.