A vulnerability has been found in Edimax BR-6675nD 1.12. Impacted is the function formWanTcpipSetup of the file /goform/
A vulnerability was detected in Edimax BR-6675nD 1.12. This vulnerability affects the function formsetPPPoE of the file
A weakness has been identified in Besen BS20 EV Charging Station up to 20260426. Affected by this issue is some unknown
A vulnerability was found in H3C Magic B0 up to 100R002. This affects the function Edit_BasicSSID_5G of the file /goform
A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function frmL7ImForm of the file /gof
A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /
A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to v
A flaw has been found in Edimax BR-6675nD 1.12. Affected by this issue is the function formPPTPSetup of the file /goform
A vulnerability was detected in Edimax BR-6675nD 1.12. Affected by this vulnerability is the function formPPPoESetup of
A security vulnerability has been detected in Edimax BR-6675nD 1.12. Affected is the function formL2TPSetup of the file
A flaw has been found in ItzCrazyKns Vane up to 1.12.1. This vulnerability affects unknown code of the file src/app/api/
A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This impacts the function execute_code of t
A vulnerability was determined in NousResearch hermes-agent up to 5157f5427f19488b31c6fdebbacd15d798ce7f63. This affects
A vulnerability was found in NousResearch hermes-agent 2026.4.23. The impacted element is the function _scan_context_con
A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/a
A security flaw has been discovered in Edimax EW-7438RPn 1.28a. Affected by this issue is the function formwlencrypt24g
A vulnerability has been found in SourceCodester Hospitals Patient Records Management System 1.0. This affects an unknow
A flaw has been found in SourceCodester Hospitals Patient Records Management System 1.0. The impacted element is an unkn
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.23. Impacted is an unknown function
A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows an
A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This affects the function check_all_command
A vulnerability was found in Edimax EW-7438RPn up to 1.31. Affected by this vulnerability is an unknown functionality of
In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known toke
A flaw has been found in Edimax EW-7438RPn up to 1.31. This impacts the function formWirelessTbl of the file /goform/for
A vulnerability was detected in Edimax EW-7438RPn up to 1.31. This affects the function formWizSurvey of the file /gofor
A security vulnerability has been detected in Edimax EW-7438RPn up to 1.31. The impacted element is an unknown function
D-Link DIR601 2.02NA contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve se
SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that allows local
Audiograbber 1.83 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by expl
Redaxo CMS Mediapool Addon 5.5.1 and older contains an arbitrary file upload vulnerability that allows authenticated use
WordPress Ultimate Form Builder Lite plugin version 1.3.7 and below contains an SQL injection vulnerability that allows
Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unauthenticated attacker
Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipu
WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to
WordPress Form Maker Plugin 1.12.24 and below contains SQL injection vulnerabilities that allow authenticated attackers
10-Strike Network Scanner 3.0 contains a local buffer overflow vulnerability in the host name field that allows attacker
10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key i
Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate
Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL querie
Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL querie
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coa
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through f
A security flaw has been discovered in Edimax BR-6428NS 1.10. This affects the function formWirelessTbl of the file /gof
A vulnerability was identified in Edimax BR-6428NS 1.10. The impacted element is the function formWanTcpipSetup of the f
The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and information di
The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability
The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability
The WishList Member plugin for WordPress is vulnerable to Missing Authorization leading to Sensitive Information Disclos
The WishList Member plugin for WordPress is vulnerable to Privilege Escalation via Missing Authorization in versions up
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne
Frequently Asked Questions
What does HIGH severity mean for CVEs?
CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption
How many high severity CVEs exist?
There are 143,102 CVE records rated HIGH in our database. Of these, 363 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize high severity vulnerabilities?
HIGH severity vulnerabilities should be patched immediately, especially if they are in the CISA KEV catalog or have a high EPSS score. Use CyberStrike to automatically detect and prioritize these vulnerabilities across your infrastructure.
Detect HIGH Vulnerabilities
CyberStrike scans your infrastructure and detects high severity vulnerabilities in real time.
Get Started