HIGH Severity CVEs

The patient prescription viewing functionality in his_doc_view_single_patient.php of rickxy Hospital Management System v

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub_4F55C function. Th

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg function.

Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGus

Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the deviceId parameter of the saveParentControlI

TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the addEffect parameter of the urld

TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode

Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the wpapsk_crypto parameter of the wlSetExternPa

Dell Display and Peripheral Manager, versions prior to 2.1.2.12, contains an Execution with Unnecessary Privileges vulne

Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management module (delete

A Cross-Site Request Forgery (CSRF) vulnerability in the SourceCodester Client Database Management System 1.0 allows an

In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure

In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation

A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknow

A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticat

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in co

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in co

Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing o

A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function save_user/update_user o

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file

EIP Plus developed by Hundred Plus has an Arbitrary File Uplaod vulnerability, allowing privileged remote attackers to u

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to in

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to in

A security flaw has been discovered in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. Impacted is the func

The Alex Reservations: Smart Restaurant Booking plugin for WordPress is vulnerable to arbitrary file uploads due to miss

The Mail Mint plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the pr

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to PHP Object

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Limited Code Injection in all

The Smart Auto Upload Images plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valid

The Asgaros Forum plugin for WordPress is vulnerable to SQL Injection via the '$_COOKIE['asgarosforum_unread_exclude']'

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 an

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 8.9.0

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 7.14.

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 7.14.

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 7.

Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker

Improper Authorization in Elastic Cloud Enterprise can lead to Privilege Escalation where the built-in readonly user can

A Local File Inclusion (LFI) vulnerability has been identified in tQuadra CMS 4.2.1117. The issue exists in the "/styles

IBM Db2 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) under specific configurations co

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerabili

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions 4.2.

Apollo Router Core is a configurable Rust graph router written to run a federated supergraph using Apollo Federation 2.

AstrBot Project v3.5.22 contains a directory traversal vulnerability. The handler function install_plugin_upload of the

A Broken Object Level Authorization (BOLA) vulnerability was discovered in the tRPC project mutation APIs (update, delet

A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The remote attackers can the

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can then exploit

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hiberna

(conda) Constructor is a tool that enables users to create installers for conda package collections. In versions 3.12.2

The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Privilege Escala