HIGH Severity CVEs

A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, p

A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to

Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing.This issue affects

The vulnerability exists in the UPnP component of TL-WR841N v14, where improper input validation leads to an out-of-boun

Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affect

Fireshare facilitates self-hosted media and link sharing. In version 1.5.1, an authenticated path traversal vulnerabilit

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.8.3` throug

A flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing zero-

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 4.

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the

InvenTree is an Open Source Inventory Management System. Prior to version 1.2.6, certain API endpoints associated with b

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU u

The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can s

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative

The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format cod

Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authen

Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax

Ory Polis, formerly known as BoxyHQ Jackson, bridges or proxies a SAML login flow to OAuth 2.0 or OpenID Connect. Versio

Ory Keto is am open source authorization server for managing permissions at scale. Prior to version 26.2.0, the GetRelat

Zen C is a systems programming language that compiles to human-readable GNU C/C11. Prior to version 0.4.4, a stack-based

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Versions up to and

Daylight Studio FuelCMS v1.5.2 was discovered to contain a SQL injection vulnerability via the /controllers/Login.php co

Ory Hydra is an OAuth 2.0 Server and OpenID Connect Provider. Prior to version 26.2.0, the listOAuth2Clients, listOAuth2

Ory Kratos is an identity, user management and authentication system for cloud services. Prior to version 26.2.0, the Li

ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based o

goxmlsig provides XML Digital Signatures implemented in Go. Prior to version 1.6.0, the `validateSignature` function in

Firecrawl version 2.8.0 and prior contain a server-side request forgery (SSRF) protection bypass vulnerability in the Pl

Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separ

Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-cont

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics)

Kysely is a type-safe TypeScript SQL query builder. Prior to version 0.28.14, Kysely's `DefaultQueryCompiler.sanitizeStr

Kysely is a type-safe TypeScript SQL query builder. In versions 0.28.12 and 0.28.13, the `sanitizeStringLiteral` method

Briefcase is a tool for converting a Python project into a standalone native application. Starting in version 0.3.0 and

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics)

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to C++ UB (potential memo

OpenClaw before 2026.3.28 contains a path traversal vulnerability in media parsing that allows attackers to read arbitra

EVerest is an EV charging software stack. Prior to version 2026.02.0, ISO15118_chargerImpl::handle_session_setup uses v2

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible `std::map<std

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), SICORE Base syst

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have an out-of-bounds access (std::vector) that le

EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initi

EVerest is an EV charging software stack. Prior to version 2026.02.0, `HomeplugMessage::setup_payload` trusts `len` afte

EVerest is an EV charging software stack. Prior to version 2026.02.0, an off-by-one check in IsoMux certificate filename

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9,

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the `mu

The Fluent Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all vers

HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access to the source code or i

HCL Aftermarket DPC is affected by SQL Injection which allows attacker to exploit this vulnerability to retrieve sensiti

HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escalate his pri

River Past CamDo 3.7.6 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local att