HIGH Severity CVEs

In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in binderfs_evict_inode(

In the Linux kernel, the following vulnerability has been resolved: binder: fix yet another UAF in binder_devices Comm

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Do not double dequeue a configuration

The Sharable Password Protected Posts before version 1.1.1 allows access to password protected posts by providing a secr

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Pixelatin

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus iFrame Im

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Cool fade

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cybio Gallery Widg

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Truman Conta

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chatra Chatra Live

Whale browser before 4.32.315.22 allow an attacker to bypass the Same-Origin Policy in a dual-tab environment.

Improper neutralization of Livestatus command delimiters in autocomplete endpoint within the RestAPI of Checkmk versions

The Booking X plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the

The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the emdedSc() functi

The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm(

The Download Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in

The AI Engine plugin for WordPress is vulnerable to open redirect in version 2.8.4. This is due to an insecure OAuth imp

The WP Human Resource Management plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization

The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing

Next.js is a React framework for building full-stack web applications. From versions 15.0.4-canary.51 to before 15.1.8,

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. From versions 1.9.4 to before 3.4.0,

Short Description is a MediaWiki extension that provides local short description support. In version 4.0.0, short descri

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. From versions 1.9.4 to before 3.4.0,

An authenticated remote code execution vulnerability exists in Pandora FMS version 7.0NG and earlier. The net_tools.php

An authenticated command injection vulnerability exists in Pi-hole versions up to 3.3. When adding a domain to the allow

Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achi

Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authenti

Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the u

Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the

Improper Access Control vulnerability in Wikimedia Foundation Mediawiki - Scribunto Extension allows : Accessing Functio

The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads

Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the list parameter.

Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetQosBand function via the list parameter.

Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetFirewallCfg function via the firewallEn para

Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the SetSysTimeCfg function via the time parameter.

The JKDEVKIT plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in t

During startup, the device automatically logs in the EPC2 Windows user without requesting a password.

The hard drives of the device are not encrypted using a full volume encryption feature such as BitLocker. This allows an

The SMB server's login mechanism does not implement sufficient measures to prevent multiple failed authentication attemp

The MEAC300-FNADE4 does not implement sufficient measures to prevent multiple failed authentication attempts within a sh

The web application is susceptible to cross-site-scripting attacks. An attacker can create a prepared URL, which injects

The maxView Storage Manager does not implement sufficient measures to prevent multiple failed authentication attempts wi

The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its

In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid using multiple devices with different

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state

In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Unregister PMUs on probe failure Whe

In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap [ 2172.936997] --

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skb_linearize

In the Linux kernel, the following vulnerability has been resolved: f2fs: zone: fix to avoid inconsistence in between S