HIGH Severity CVEs

A vulnerability was found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this issue

CWE-918 Server-Side Request Forgery (SSRF)

CWE-434 Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f

A vulnerability classified as critical has been found in Eluktronics Control Center 5.23.51.41. Affected is an unknown f

A vulnerability classified as critical has been found in Metasoft 美特软件 MetaCRM up to 6.4.2. This affects an unknown part

A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this vulnera

A vulnerability, which was classified as critical, was found in code-projects Church Donation System 1.0. Affected is an

A vulnerability, which was classified as critical, has been found in code-projects Church Donation System 1.0. This issu

A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects

A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function fromVirtualSer of

A vulnerability was found in Tenda FH451 1.0.0.9. It has been rated as critical. This issue affects the function fromSet

A vulnerability has been found in Campcodes Online Movie Theater Seat Reservation System 1.0 and classified as critical.

A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this issue is the

eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Inst

A vulnerability, which was classified as critical, has been found in code-projects Church Donation System 1.0. This issu

A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects

A vulnerability classified as critical has been found in code-projects Church Donation System 1.0. This affects an unkno

A vulnerability was found in code-projects Church Donation System 1.0. It has been rated as critical. Affected by this i

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by thi

A vulnerability was found in Jinher OA 1.1. It has been rated as problematic. This issue affects some unknown processing

A vulnerability was found in Jinher OA 1.2. It has been declared as problematic. This vulnerability affects unknown code

The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import

The GI-Media Library plugin for WordPress is vulnerable to Directory Traversal in versions before 3.0 via the 'fileid' p

The Simple Backup plugin for WordPress is vulnerable to Arbitrary File Download in versions up to, and including, 2.7.10

The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 vi

In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child cla

An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CO

The V8 release used in Node.js v24.0.0 has changed how string hashes are computed using rapidhash. This implementation r

A vulnerability classified as critical was found in code-projects Food Ordering Review System 1.0. This vulnerability af

A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. This issue affects the functio

A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. This vulnerability affects the function fromSaf

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. This affects the function fromPptpUserSett

An issue in Perplexity AI GPT-4 v.2.51.0 allows a remote attacker to obtain sensitive information via the token componen

A vulnerability has been found in BossSoft CRM 6.0 and classified as critical. Affected by this vulnerability is an unkn

agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain a reflected cross-site scripting (XSS

StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl.

A vulnerability, which was classified as critical, was found in Tenda FH451 1.0.0.9. This affects the function fromPptpU

A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. Affected by this issue is the

Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to store credentials in plaintext.

A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function formWebTypeLibrar

A vulnerability was found in Tenda FH451 1.0.0.9. It has been rated as critical. This issue affects the function formSaf

Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a networ

A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. This affects an unknown part

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection

MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to version 0.1

mcp-package-docs is an MCP (Model Context Protocol) server that provides LLMs with efficient access to package documenta

apko allows users to build and publish OCI container images built from apk packages. Starting in version 0.27.0 and prio