In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix overflow when accumulating packets Ad
Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalk
LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Bina
Deserialization of Untrusted Data vulnerability in Apache Storm. Versions Affected: before 2.8.6. Description: When p
A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an
A flaw has been found in TOTOLINK A7000R up to 9.1.0u.6115. The affected element is the function setWiFiEasyGuestCfg of
A vulnerability was detected in code-projects Faculty Management System 1.0. Impacted is an unknown function of the file
A security vulnerability has been detected in code-projects Vehicle Showroom Management System 1.0. This issue affects s
An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests t
The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS porta
The Product Filter for WooCommerce by WBW WordPress plugin before 3.1.3 does not sanitize and escape a parameter before
A weakness has been identified in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unkno
A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. This affects an unknown part o
A vulnerability was identified in code-projects Lost and Found Thing Management 1.0. Affected by this issue is some unkn
A vulnerability was determined in code-projects Simple ChatBox up to 1.0. This affects an unknown part of the file /chat
A flaw has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setUpgradeUboot of the file upgra
Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 9
Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects E
A vulnerability was detected in Totolink A800R 4.1.2cu.5137_B20200730. This impacts the function setAppEasyWizardConfig
A vulnerability was identified in code-projects Vehicle Showroom Management System 1.0. Impacted is an unknown function
UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availabi
Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect avai
A vulnerability was determined in code-projects Vehicle Showroom Management System 1.0. This issue affects some unknown
A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown co
A flaw has been found in code-projects Vehicle Showroom Management System 1.0. Affected by this issue is some unknown fu
A vulnerability was detected in code-projects Vehicle Showroom Management System 1.0. Affected by this vulnerability is
A vulnerability was identified in tushar-2223 Hotel Management System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. Af
A vulnerability was detected in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromAdvSetWan of the
A security vulnerability has been detected in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function frmL7ImForm of the
A weakness has been identified in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromSetIpBind of the fi
A security flaw has been discovered in Tenda F451 1.0.0.7_cn_svn7958. This vulnerability affects the function fromqosset
A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. This affects the function fromSafeUrlFilter of the file
A flaw has been found in chatboxai chatbox up to 1.20.0. This impacts the function StdioClientTransport of the file src/
A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects an unknown function of the
In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-
MyT-PM 1.5.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL querie
Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint tha
eBrigade ERP 4.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL qu
Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom
Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or e
ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipul
Easy Video to iPod Converter 1.6.20 contains a local buffer overflow vulnerability in the user registration field that a
Newsbull Haber Script 1.0.0 contains multiple SQL injection vulnerabilities in the search parameter that allow authentic
CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries
R 3.4.4 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by injecting mali
ResourceSpace 8.6 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL q
Faleemi Desktop Software 1.8 contains a local buffer overflow vulnerability in the System Setup dialog that allows attac
HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code
RGui 3.5.0 contains a local buffer overflow vulnerability in the GUI preferences dialog that allows attackers to bypass
Frequently Asked Questions
What does HIGH severity mean for CVEs?
CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption
How many high severity CVEs exist?
There are 143,102 CVE records rated HIGH in our database. Of these, 363 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize high severity vulnerabilities?
HIGH severity vulnerabilities should be patched immediately, especially if they are in the CISA KEV catalog or have a high EPSS score. Use CyberStrike to automatically detect and prioritize these vulnerabilities across your infrastructure.
Detect HIGH Vulnerabilities
CyberStrike scans your infrastructure and detects high severity vulnerabilities in real time.
Get Started