HIGH Severity CVEs

A vulnerability has been found in Nixdorf Wincor PORT IO Driver up to 1.0.0.1. This affects the function sub_11100 in th

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the PP

The Event Tickets and Registration plugin for WordPress is vulnerable to payment bypass in all versions up to, and inclu

The 10WebMapBuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Plugin Settings Change in vers

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for

DataEase is an open source data visualization and analytics platform. In versions 2.10.13 and earlier, the /de2api/datas

DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC driver bypass vuln

DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC URL injection vuln

A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local f

OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects aft

In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the parsi

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bou

In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an ou

Agentflow developed by Flowring has an Use of Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remot

Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers t

MinIO is a high-performance object storage system. In all versions prior to RELEASE.2025-10-15T17-29-55Z, a privilege es

A vulnerability was identified in NucleoidAI Nucleoid up to 0.7.10. The impacted element is the function extension.apply

MAS (Matrix Authentication Service) is a user management and authentication service for Matrix homeservers, written and

Bagisto is an open source laravel eCommerce platform. When product data that begins with a spreadsheet formula character

An out-of-bounds write in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (

The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updat

Envoy is a cloud-native, open source edge and service proxy. Prior to 1.36.1, 1.35.5, 1.34.9, and 1.33.10, large request

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an insecure hashing algorithm vulnerability. The product

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a relative path traversal vulnerability in get_file_conte

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an absolute path traversal vulnerability in get_file_cont

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain authenticated OS command injection vulnerabilities in mul

IBM MQ 9.1, 9.2, 9.3, 9.4 LTS and 9.3, 9.4 CD is vulnerable to a denial of service, caused by improper enforcement of th

A vulnerability exists in the QuickJS engine's BigInt string parsing logic (js_bigint_from_string) when attempting to cr

An integer overflow vulnerability exists in the QuickJS regular expression engine (libregexp) due to an inconsistent rep

A type confusion vulnerability exists in the handling of the string addition (+) operation within the QuickJS engine.

A Use-After-Free (UAF) vulnerability exists in the QuickJS engine's standard library when iterating over the global list

In quickjs, in js_print_object, when printing an array, the function first fetches the array length and then loops over

Strapi is an open-source headless content management system. In versions from 5.0.0 to before 5.5.2, the lookup operator

A Host Header Injection vulnerability exists in the password reset functionality of CraftMyCMS 4.0.2.2. The system uses

Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality (forgot_send.cgi). The reset l

FelixRiddle dev-jobs-handlebars 1.0 uses absolute password-reset (magic) links using the untrusted `req.headers.host` he

The following versions of Spring Cloud Gateway Server Webflux may be vulnerable to the ability to expose environment var

Aggie 2.6.1 has a Host Header injection vulnerability in the forgot password functionality, allowing an attacker to rese

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet For

** UNSUPPORTED WHEN ASSIGNED ** Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This

Mattermost versions 10.11.x <= 10.11.1, 10.10.x <= 10.10.2, 10.5.x <= 10.5.10 fail to verify a user has permission to jo

Mattermost versions 10.11.x <= 10.11.1, 10.10.x <= 10.10.2, 10.5.x <= 10.5.10 fail to verify a user has permission to jo

Insecure direct object reference (IDOR) vulnerability in Sergestec's Exito v8.0. This vulnerability allows an attacker t

Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dua

Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment.

The Classified Pro theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability che

Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the

ASDA-Soft Stack-based Buffer Overflow Vulnerability

ASDA-Soft Stack-based Buffer Overflow Vulnerability

The issue was addressed with improved authentication. This issue is fixed in macOS Sequoia 15.6. A local attacker may be