HIGH Severity CVEs

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability a

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been classified as critical. This affects an un

The Frontend File Manager Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capabi

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this issue is s

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this vulne

A vulnerability, which was classified as critical, was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected is an unkn

The Droip plugin for WordPress is vulnerable to unauthorized modification and access of data due to a missing capability

The Droip plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the make_g

A vulnerability was found in Tenda AC20 16.03.08.05. It has been declared as critical. Affected by this vulnerability is

The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sa

This Medium severity ACE (Arbitrary Code Execution) vulnerability was introduced in version 4.2.8 of Sourcetree for Mac.

HCL iAutomate is affected by a sensitive data exposure vulnerability. This issue may allow unauthorized access to sensi

HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if intercepted

HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to exec

An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially c

A cross-site scripting (xss) vulnerability exists in the LoginWordPress loginForm cancelUri parameter functionality of W

A race condition vulnerability exists in the aVideoEncoder.json.php unzip functionality of WWBN AVideo 14.4 and dev mast

Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/saveParentControlInfo. The manipulation of

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to a privilege escalation caused by an invalid database authority check.

The Dataverse Integration plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks

The hiWeb Export Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu

SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vuln

fastapi-guard is a security library for FastAPI that provides middleware to control IPs, log requests, detect penetratio

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.23.18 and below, RooCode d

authentik is an open-source Identity Provider that emphasizes flexibility and versatility, with support for a wide set o

LibHTP is a security-aware parser for the HTTP protocol and its related bits and pieces. In versions 0.5.50 and below, t

Kyverno is a policy engine designed for cloud native platform engineering teams. In versions 1.14.1 and below, a Denial

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and th

An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18

An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18

During the AWS Client VPN client installation on Windows devices, the install process references the C:\usr\local\window

Out of bounds read vulnerability due to improper bounds checking in NI LabVIEW in fontmgr may result in information disc

Out of bounds read vulnerability due to improper bounds checking in NI LabVIEW in lvre!UDecStrToNum that may result in i

A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication

A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to

A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker t

IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 is vulnerable to a stack-based buffer overflow, caused b

IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 is vulnerable to a stack-based buffer overflow, caused b

In Pluck CMS 4.7.20-dev, an authenticated attacker can upload or create a crafted PHP file under the albums module direc

An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of

An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of

A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending sp

A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending sp

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics Magi

Improper Authentication vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics Magi

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Inje

Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Ser

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Inje