HIGH Severity CVEs

An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free in the mobile processo

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent

Directory Traversal vulnerability in WebLaudos 24.2 (04) allows a remote attacker to obtain sensitive information via th

In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to

A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability. A

MyBB is free and open source forum software. Prior to version 1.8.39, the upgrade component does not validate user input

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions

SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is v

A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds

An integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of catdoc 0.95. A specially cra

An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95.

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility vers

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input and LLM outpu

The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escal

Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used.

AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions

quic-go is an implementation of the QUIC protocol in Go. The loss recovery logic for path probe packets that was added i

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace D

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Ge

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver al

A security vulnerability in the /apis/dashboard.grafana.app/* endpoints allows authenticated users to bypass dashboard a

A vulnerability was found in Marwal Infotech CMS 1.0. It has been declared as critical. This vulnerability affects unkno

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Devi

A vulnerability was found in Aem Solutions CMS up to 1.0. It has been classified as critical. This affects an unknown pa

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to

Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can creat

A vulnerability was found in Mist Community Edition up to 4.7.1. It has been classified as critical. This affects the fu

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been rated as

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been declared

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been classifi

A vulnerability was found in SourceCodester Health Center Patient Record Management System 1.0. It has been declared as

The Newsletters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.9.9

A vulnerability, which was classified as critical, has been found in SourceCodester Health Center Patient Record Managem

The Offsprout Page Builder plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization plac

The WP-GeoMeta plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wp_aj

A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. Affected by this vulnerability is an unk

A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected i

A vulnerability was found in PHPGurukul Online Shopping Portal Project 1.0. It has been declared as critical. This vulne

A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been classified as critical. This a

A vulnerability was found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by thi

A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected b

A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affecte

A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. Th

A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability

An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to per

An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to ele

An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate pr

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects a

A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been rated as critical. Affec