HIGH Severity CVEs

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Inje

All versions of the package files-bucket-server are vulnerable to Directory Traversal where an attacker can traverse the

All versions of the package private-ip are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provid

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DDNS Record

The Social Streams plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.

The Realty Portal – Agent plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within

A vulnerability has been found in Tenda AC23 16.03.07.52 and classified as critical. Affected by this vulnerability is t

A potential SQL injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. T

Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corr

Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corr

Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network d

ViewVC is a browser interface for CVS and Subversion version control repositories. In versions 1.1.0 through 1.1.31 and

pyLoad is a free and open-source Download Manager written in pure Python. In version 0.5.0b3.dev89, an authenticated pat

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of netwo

HAX CMS NodeJS allows users to manage their microsite universe with a NodeJS backend. Versions 11.0.9 and below were dis

yt-dlp is a feature-rich command-line audio/video downloader. In versions 2025.06.25 and below, when the --exec option i

DuraComm SPM-500 DP-10iN-100-MU transmits sensitive data without encryption over a channel that could be intercepted b

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suric

DuraComm SPM-500 DP-10iN-100-MU lacks access controls for a function that should require user authentication. This cou

DuraComm SPM-500 DP-10iN-100-MU is vulnerable to a cross-site scripting attack. This could allow an attacker to preven

Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these b

In some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability

Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebindin

Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Fire

Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunder

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability was fix

Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected

Thunderbird executed `javascript:` URLs when used in `object` and `embed` tags. This vulnerability was fixed in Firefox

An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can bypass manager approval via isAddedByApprover

An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can bypass manager approval by changing the user I

Cross-site Scripting (XSS) in aimhubio Aim 3.28.0 allows remote attackers to execute arbitrary JavaScript in victims bro

Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthor

Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker t

Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows rem

A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6. It has been rated as critical. Affected

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A mal

Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrit

Path Traversal in restore_run_backup() in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's fi

A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when pr

A denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality of Bloomber

A null pointer dereference vulnerability exists in the net_connectmsg Protocol Buffer Message functionality of Bloomberg

A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction he

A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2

Ai2 playground web service (playground.allenai.org) LLM chat through 2025-06-03 is vulnerable to Insecure Direct Object

A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function formSet

The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authentic

The Orion Login with SMS plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and includin

The Nginx Cache Purge Preload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and inc

WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command In

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu