HIGH Severity CVEs

EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command cou

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. Impacted is an unknown function

A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59

A vulnerability has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f90

A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Af

A vulnerability was detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042

A security vulnerability has been detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd

A weakness has been identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f90

IBM Security Verify Access 10.0.0 through 10.0.9, 11.0.0, IBM Verify Identity Access Container 10.0.0 through 10.0.9, an

A vulnerability was identified in yousaf530 Inferno Online Clothing Store up to 827dd42bfbe380e8de76fdc67958c24cf1246208

A vulnerability was determined in UTT HiPER 2620G up to 3.1.4. Impacted is the function strcpy of the file /goform/fNTP.

A vulnerability was found in UTT 进取 518G up to V3v3.2.7-210919-161313. This issue affects some unknown processing of the

A vulnerability has been found in UTT 进取 518G up to V3v3.2.7-210919-161313. This vulnerability affects the function sub_

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the compon

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. This affects an unknown part of

A vulnerability was identified in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknow

A security vulnerability has been detected in code-projects E-Banking System 1.0. This affects an unknown function of th

A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown process

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an un

A weakness has been identified in Campcodes Online Apartment Visitor Management System 1.0. This impacts an unknown func

The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to authorization bypass in versions less than,

A vulnerability was determined in code-projects E-Commerce Website 1.0. The affected element is an unknown function of t

Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may a

Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may

Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect servi

In modem, there is a possible system crash due to improper input validation. This could lead to remote escalation of pri

In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authenticati

cel-rust is a Common Expression Language interpreter written in Rust. Starting in version 0.10.0 and prior to version 0.

A vulnerability was determined in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/setNotUpgr

A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of

A vulnerability has been found in code-projects Online Job Search Engine 1.0. The affected element is an unknown functio

Emlog is an open source website building system. Emlog Pro versions 2.5.19 and earlier are vulnerable to Cross‑Site Requ

Sinatra is a domain-specific language for creating web applications in Ruby. In versions prior to 4.2.0, there is a deni

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JOSE implem

Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, `Rack::Request#POST` reads the

A HTML injection vulnerability exists in Perfex CRM v3.3.1. The application fails to sanitize user input in the "Bill To

A flaw has been found in code-projects Online Job Search Engine 1.0. Impacted is an unknown function of the file /postjo

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing o

An authenticated stored XSS vulnerability exists in the Bagisto 2.3.6 admin panel's product creation path, allowing an a

NVIDIA Display Driver contains a vulnerability where an uncontrolled DLL loading path might lead to arbitrary denial of

NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to use a race condition to esca

NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful ex

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a

quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving

Publii CMS v0.46.5 (build 17089) allows persistent Cross-Site Scripting (XSS) via unsanitized input in configuration fie

Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into in

A use after free vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially craft

An out-of-bounds read vulnerability exists in VS6ComFile!CSaveData::delete_mem of V-SFT v6.2.7.0 and earlier. Opening sp