HIGH Severity CVEs

A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulne

Discourse is an open-source discussion platform. The visibility of posts typed `whisper` is controlled via the `whispers

Cross-Site Scripting (XSS) vulnerability in CADClick v1.13.0 and before allows remote attackers to inject arbitrary web

SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensi

Discourse is an open-source discussion platform. Versions prior to 3.5.0.beta6 are vulnerable to cross-site scripting wh

The Everest Forms (Pro) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path vali

Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. If exploited, an arbitrary

Cyberduck and Mountain Duck improper handle TLS certificate pinning for untrusted certificates (e.g., self-signed), sinc

Cyberduck and Mountain Duck improperly handle TLS certificate pinning for untrusted certificates (e.g., self-signed), un

An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP requ

An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language (PJL) command that will cr

An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP

IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user to gain elevated privileges due to an unqualified library call in IBM Fa

IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL s

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an

A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. This issue affects some

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical.

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. A critical XML External Entit

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to a server-side request forgery vulnerability

Netbox Community 4.1.7 is vulnerable to Cross Site Scripting (XSS) via the maintenance banner` in maintenance mode.

An issue in Realtek RTL8762EKF-EVB RTL8762E SDK v1.4.0 allows attackers to cause a Denial of Service (DoS) via sending a

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code i

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code i

A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an unknown

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. This iss

Incorrect Permission Assignment for Critical Resource in the TeamViewer Client (Full and Host) of TeamViewer Remote and

Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.

Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4, 10.1.0.0 through 10.1.

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.2.0.3 could allow an unauthen

A vulnerability was found in Netgear WNCE3001 1.0.0.50. It has been classified as critical. This affects the function ht

Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory corruption a

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not hav

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was inval

The executable file warning did not warn users before opening files with the `terminal` extension. *This bug only affec

A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. An authenticated user with lo

A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is

An unauthenticated remote attacker can enumerate valid user names from an unprotected endpoint.

An low privileged remote attacker in possession of the second factor for another user can login as that user without kno

An unauthenticated remote attacker can obtain limited sensitive information and/or DoS the device due to missing authent

A denial-of-service issue in the dns implemenation could cause an infinite loop.

WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5721, there is a signed vs. unsigned integer

SysmonElixir is a system monitor HTTP service in Elixir. Prior to version 1.0.1, the /read endpoint reads any file from

Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.46, Kanboard allows

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets

A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passe

A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The app