HIGH Severity CVEs

There is a possible escalation of privilege due to test/debugging code left in a production build. This could lead to ph

There is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of pri

Information disclosure

In TBD of TBD, there is a possible DoS due to a missing null check. This could lead to remote denial of service with no

Denial of service

Elevation of privilege

In wl_cfgscan_update_v3_schedscan_results() of wl_cfgscan.c, there is a possible out of bounds write due to an incorrec

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft e-Mutabakat allows Authentication By

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano allows Authentication Bypas

In wl_update_hidden_ap_ie() of wl_cfgscan.c, there is a possible out of bounds write due to improper input validation. T

A security flaw has been discovered in projectworlds Travel Management System 1.0. The impacted element is an unknown fu

A vulnerability was identified in projectworlds Travel Management System 1.0. The affected element is an unknown functio

Netty is an asynchronous event-driven network application framework for development of maintainable high performance pro

An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subjec

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2

A vulnerability was determined in projectworlds Travel Management System 1.0. Impacted is an unknown function of the fil

A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of t

Fuji Electric FRENIC-Loader 4 is vulnerable to a deserialization of untrusted data when importing a file through a speci

A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of

IBM Transformation Advisor 2.0.1 through 4.3.1 incorrectly assigns privileges to security critical files which could all

Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An atta

Adacore Ada Web Server (AWS) before 25.2 is vulnerable to a denial-of-service (DoS) condition due to improper handling o

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript cod

Incomplete validation of dunder attributes allows an attacker to escape from the Local Python execution environment sand

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass c

A vulnerability was identified in 1000projects Beauty Parlour Management System 1.0. This affects an unknown function of

Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or s

A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access.

Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes - TQL Edition ltl-freight-quotes

Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Daylight Edition ltl-freight-q

Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Day & Ross Edition ltl-freight

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Min

phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/userprofile.php via the

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/subcategory.php v

A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0. The vulnerability is due to lack

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobi

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft LimonDesk allows Authentication Bypa

DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepsee

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: fro

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), S

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) a

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject duplicate device on up

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypas

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script s

The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service (DoS) attacks due to eager

SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service

Improper input validation vulnerability in CertByte prior to SMR Apr-2023 Release 1 allows local attackers to launch pri

Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows lo