Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

HIGH Severity CVEs

CVSS 7.0 – 8.9

CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption

143,102
Total
363
Known Exploited
Showing 73,421 of 143,102 total · Page 534/1469
8.8
CVE-2025-11444

A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function set

7.7
CVE-2025-10635

The Find Me On WordPress plugin through 2.0.9.1 does not sanitize and escape a parameter before using it in a SQL statem

7.3
CVE-2025-11434

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function

7.3
CVE-2025-11432

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file

7.2
CVE-2025-11204

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vu

7.3
CVE-2025-11430

A vulnerability was found in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function

8.1
CVE-2025-10494

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion d

8.1
CVE-2025-61787

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Versions prior to 2.5.3 and 2.2.15 are vulnerable to Command

7.3
CVE-2025-11424

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function

7.3
CVE-2025-11422

A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unk

8.6
CVE-2025-48981

An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet t

7.3
CVE-2025-11420

A vulnerability was detected in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages

7.3
CVE-2025-11416

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of

7.3
CVE-2025-11415

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknow

8.8
CVE-2025-11408

A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1. The affected element is an unknown functio

7.1
CVE-2025-6242

A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimod

7.5
CVE-2025-61910

The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A BP

8.5
CVE-2025-44824

Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to stop the Elasticsearch ser

7.5
CVE-2025-43727

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.

7.8
CVE-2025-11462

Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to

7.6
CVE-2025-61784

LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery (SSRF

8.6
CVE-2025-11192

A vulnerability in Extreme Networks’ Fabric Engine (VOSS) before 9.3 was discovered. When SD-WAN AutoSense is enabled on

7.5
CVE-2025-43914

Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS

7.4
CVE-2025-36156

IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow, caused

7.8
CVE-2023-53683

In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{rea

7.5
CVE-2023-53680

In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC() with ops->opnum == OP_

8.3
CVE-2023-53679

In the Linux kernel, the following vulnerability has been resolved: wifi: mt7601u: fix an integer underflow Fix an int

8.8
CVE-2023-53676

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_tar

8.8
CVE-2023-53675

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible desc_ptr out-of-bounds acce

7.8
CVE-2023-53674

In the Linux kernel, the following vulnerability has been resolved: clk: Fix memory leak in devm_clk_notifier_register(

8.8
CVE-2023-53673

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: call disconnect callback befo

7.8
CVE-2023-53669

In the Linux kernel, the following vulnerability has been resolved: tcp: fix skb_copy_ubufs() vs BIG TCP David Ahern r

7.1
CVE-2023-53668

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix deadloop issue on reading trace_pi

7.8
CVE-2023-53660

In the Linux kernel, the following vulnerability has been resolved: bpf, cpumap: Handle skb as well when clean up ptr_r

7.8
CVE-2023-53659

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix out-of-bounds when setting channels on re

7.8
CVE-2023-53652

In the Linux kernel, the following vulnerability has been resolved: vdpa: Add features attr to vdpa_nl_policy for nlatt

7.8
CVE-2023-53651

In the Linux kernel, the following vulnerability has been resolved: Input: exc3000 - properly stop timer on shutdown W

7.8
CVE-2023-53646

In the Linux kernel, the following vulnerability has been resolved: drm/i915/perf: add sentinel to xehp_oa_b_counters

7.8
CVE-2023-53645

In the Linux kernel, the following vulnerability has been resolved: bpf: Make bpf_refcount_acquire fallible for non-own

7.8
CVE-2023-53643

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: don't access released socket during error

7.3
CVE-2023-53640

In the Linux kernel, the following vulnerability has been resolved: ASoC: lpass: Fix for KASAN use_after_free out of bo

7.0
CVE-2023-53638

In the Linux kernel, the following vulnerability has been resolved: octeon_ep: cancel queued works in probe error path

7.8
CVE-2023-53636

In the Linux kernel, the following vulnerability has been resolved: clk: microchip: fix potential UAF in auxdev release

8.2
CVE-2023-53635

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: fix wrong ct->timeout value

8.8
CVE-2023-53630

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of pages when an access is p

7.8
CVE-2023-53627

In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Grab sas_dev lock when traversing t

7.8
CVE-2023-53626

In the Linux kernel, the following vulnerability has been resolved: ext4: fix possible double unlock when moving a dire

7.0
CVE-2023-53622

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2_show_options(

7.8
CVE-2023-53621

In the Linux kernel, the following vulnerability has been resolved: memcontrol: ensure memcg acquired by id is properly

7.8
CVE-2023-53619

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: Avoid nf_ct_helper_hash uses

Frequently Asked Questions

What does HIGH severity mean for CVEs?

CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption

How many high severity CVEs exist?

There are 143,102 CVE records rated HIGH in our database. Of these, 363 are listed in CISA's Known Exploited Vulnerabilities catalog.

How should I prioritize high severity vulnerabilities?

HIGH severity vulnerabilities should be patched immediately, especially if they are in the CISA KEV catalog or have a high EPSS score. Use CyberStrike to automatically detect and prioritize these vulnerabilities across your infrastructure.

Detect HIGH Vulnerabilities

CyberStrike scans your infrastructure and detects high severity vulnerabilities in real time.

Get Started