A vulnerability was identified in Belkin F9K1015 1.00.10. This issue affects the function formReboot of the file /goform
A vulnerability was determined in Belkin F9K1015 1.00.10. This vulnerability affects the function formWlEncrypt of the f
A vulnerability was found in Belkin F9K1015 1.00.10. This affects the function formCrossBandSwitch of the file /goform/f
A vulnerability has been found in Belkin F9K1015 1.00.10. Affected by this issue is the function formWISP5G of the file
A flaw has been found in Tenda i12 1.0.0.11(3862). Affected by this vulnerability is the function formwrlSSIDset of the
A vulnerability was detected in Belkin F9K1122 1.00.33. Affected is the function formWlanSetup of the file /goform/formW
A weakness has been identified in Tenda CH22 1.0.0.1. This affects the function formWrlExtraSet of the file /goform/WrlE
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate o
Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.Th
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injec
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injec
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injec
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injec
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injec
Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injec
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injec
Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database
Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attack
OpenDocMan 1.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database qu
Xlight FTP Server 3.9.1 contains a structured exception handler (SEH) overwrite vulnerability that allows local attacker
Advance Gift Shop Pro Script 2.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to exec
RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling (SEH) buffer overflow vulnerability in the Ec
C4G Basic Laboratory Information System 3.4 contains multiple SQL injection vulnerabilities that allow unauthenticated a
Ask Expert Script 3.0.5 contains cross-site scripting and SQL injection vulnerabilities that allow unauthenticated attac
eDirectory contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to bypass administrator
CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries
UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenti
PilusCart 1.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database quer
VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary com
River Past Video Cleaner 7.6.3 contains a structured exception handler buffer overflow vulnerability that allows local a
qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL c
News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate da
SuiteCRM 7.10.7 contains a time-based SQL injection vulnerability in the record parameter of the Users module DetailView
SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database querie
ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL
R i386 3.5.0 contains a local buffer overflow vulnerability in the GUI Preferences dialog that allows local attackers to
A vulnerability has been found in Fosowl agenticSeek 0.1.0. Impacted is the function PyInterpreter.execute of the file s
A vulnerability has been found in Song-Li cross_browser up to ca690f0fe6954fd9bcda36d071b68ed8682a786a. This affects an
A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an u
A weakness has been identified in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. This impacts an unknown function of the
A vulnerability was determined in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. The affected element is the function ind
A vulnerability was found in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. Impacted is an unknown function of the file /
A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform
A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects the function strcpy of the file
A security vulnerability has been detected in code-projects Simple Laundry System 1.0. Affected by this issue is some un
A weakness has been identified in code-projects Simple Laundry System 1.0. Affected by this vulnerability is an unknown
A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /
A weakness has been identified in code-projects Concert Ticket Reservation System 1.0. This affects an unknown part of t
A security flaw has been discovered in code-projects Concert Ticket Reservation System 1.0. Affected by this issue is so
Frequently Asked Questions
What does HIGH severity mean for CVEs?
CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption
How many high severity CVEs exist?
There are 143,102 CVE records rated HIGH in our database. Of these, 363 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize high severity vulnerabilities?
HIGH severity vulnerabilities should be patched immediately, especially if they are in the CISA KEV catalog or have a high EPSS score. Use CyberStrike to automatically detect and prioritize these vulnerabilities across your infrastructure.
Detect HIGH Vulnerabilities
CyberStrike scans your infrastructure and detects high severity vulnerabilities in real time.
Get Started