A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. Affected is an
A vulnerability was found in FreeFloat FTP Server 1.0.0. It has been classified as critical. This affects an unknown par
A vulnerability was found in FreeFloat FTP Server 1.0.0 and classified as critical. Affected by this issue is some unkno
A vulnerability has been found in FreeFloat FTP Server 1.0.0 and classified as critical. Affected by this vulnerability
A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0.0. Affected is an unknown funct
A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0.0. This issue affects some
A vulnerability classified as critical was found in PHPGurukul Student Record System 3.20. This vulnerability affects un
A vulnerability classified as critical has been found in D-Link DCS-5020L 1.01_B2. This affects the function websReadEve
A vulnerability was found in Kashipara Responsive Online Learing Platform 1.0. It has been rated as critical. Affected b
A vulnerability was found in projectworlds Responsive E-Learning System 1.0. It has been declared as critical. Affected
A vulnerability was found in PHPGurukul Employee Record Management System 1.3. It has been classified as critical. Affec
A vulnerability was found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This issue aff
A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vuln
A vulnerability, which was classified as critical, was found in SourceCodester Online Hospital Management System 1.0. Th
A vulnerability classified as critical has been found in 1000 Projects Daily College Class Work Report Book 1.0. Affecte
Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path.
A vulnerability, which was classified as critical, has been found in Wondershare Filmora 14.5.16. Affected by this issue
An unauthenticated remote attacker can access a URL which causes the device to reboot.
An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of r
A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been declared as critical. This
A vulnerability, which was classified as critical, was found in Econtrata up to 20250516. Affected is an unknown functio
A vulnerability was found in H3C GR-5400AX up to 100R008 and classified as critical. Affected by this issue is the funct
A vulnerability has been found in Sangfor 零信任访问控制系统 aTrust 2.3.10.60 and classified as critical. Affected by this vulner
A vulnerability, which was classified as critical, was found in ScriptAndTools Real-Estate-website-in-PHP 1.0. Affected
A vulnerability was found in Teledyne FLIR AX8 up to 1.46.16. This vulnerability affects the function setDataTime of the
A vulnerability classified as critical has been found in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N a
The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing
A vulnerability has been found in Emlog Pro 2.5.11 and classified as critical. This vulnerability affects unknown code o
OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-
OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-
In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could
When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions pr
A vulnerability has been identified in SiPass integrated (All versions < V2.95.3.18). Affected server applications conta
Marked prior to version 0.3.17 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to catastrophi
A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part o
A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is
A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Affected by this vulnerability is an unkno
A vulnerability classified as critical has been found in FreeFloat FTP Server 1.0. Affected is an unknown function of th
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catkin ReDi Restau
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpjobportal WP Job Porta
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal Quick C
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Soft8Soft LLC Verg
Missing Authorization vulnerability in Smackcoders Inc., Lead Form Data Collection to CRM wp-leads-builder-any-crm allow
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michel - xiligroup
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelCockpit Funn
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arc
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LETSCMS MLM Softwa
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in
Frequently Asked Questions
What does HIGH severity mean for CVEs?
CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption
How many high severity CVEs exist?
There are 143,102 CVE records rated HIGH in our database. Of these, 363 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize high severity vulnerabilities?
HIGH severity vulnerabilities should be patched immediately, especially if they are in the CISA KEV catalog or have a high EPSS score. Use CyberStrike to automatically detect and prioritize these vulnerabilities across your infrastructure.
Detect HIGH Vulnerabilities
CyberStrike scans your infrastructure and detects high severity vulnerabilities in real time.
Get Started