Cross-Site Request Forgery (CSRF) vulnerability in ref CheckBot checkbot allows Stored XSS.This issue affects CheckBot:
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Amir Helzer Absolu
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in
Path Traversal: '.../...//' vulnerability in bslthemes Tastyc tastyc allows PHP Local File Inclusion.This issue affects
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in validas Wireless B
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in
A vulnerability, which was classified as critical, was found in PHPGurukul Credit Card Application Management System 1.0
A vulnerability, which was classified as critical, has been found in 1000 Projects Daily College Class Work Report Book
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in
Cross-Site Request Forgery (CSRF) vulnerability in aseem1234 Best Posts Summary best-posts-summary allows Stored XSS.Thi
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cnilsson iCafe Lib
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in
A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used b
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.
The issue was addressed with improved checks. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoi
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruno Cavalcante G
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fyrewurks Tiki Tim
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tijaji Tijaji tija
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Takimi Themes CarZ
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in duwasai Flashy all
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jinwen Js O3 Lite
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in twh offset writing
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in asmedia allows Ref
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fyrewurks polka do
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Asmedia Tuaug4 all
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mythemes my white
A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been declared as critical. A
A vulnerability was found in projectworlds Online Food Ordering System 1.0. It has been classified as critical. Affected
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia Autom
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in davidfcarr RSVPMar
Cross-Site Request Forgery (CSRF) vulnerability in awcode AWcode Toolkit awcode-toolkit allows Stored XSS.This issue aff
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bunny.net bunny.ne
Cross-Site Request Forgery (CSRF) vulnerability in affmngr Affiliates Manager Google reCAPTCHA Integration affiliates-ma
Tiiwee X1 Alarm System TWX1HAKV2 allows Authentication Bypass by Capture-replay, leading to physical Access to the prote
Multiple Code Injection vulnerabilities in EasyVirt DC NetScope <= 8.7.0 allows remote authenticated attackers to execut
A vulnerability was found in SourceCodester Stock Management System 1.0 and classified as critical. This issue affects s
A vulnerability has been found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as
A vulnerability, which was classified as critical, has been found in projectworlds Online Lawyer Management System 1.0.
A vulnerability classified as critical was found in projectworlds Online Lawyer Management System 1.0. Affected by this
A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0. Affected is an unknown fu
A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transfor
A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. This issue affects som
A vulnerability was found in projectworlds Online Lawyer Management System 1.0. It has been declared as critical. This v
A vulnerability was found in PHPGurukul Online Marriage Registration System 1.0. It has been classified as critical. Thi
A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1 and classified as critical. Affected by th
A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Af
Server-side request forgery vulnerability exists in a-blog cms multiple versions. If this vulnerability is exploited, a
A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.
A vulnerability classified as critical has been found in PHPGurukul Auto Taxi Stand Management System 1.0. Affected is a
V-SFT v6.2.5.0 and earlier contains an issue with stack-based buffer overflow in VS6MemInIF!set_temp_type_default functi
Frequently Asked Questions
What does HIGH severity mean for CVEs?
CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption
How many high severity CVEs exist?
There are 143,102 CVE records rated HIGH in our database. Of these, 363 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize high severity vulnerabilities?
HIGH severity vulnerabilities should be patched immediately, especially if they are in the CISA KEV catalog or have a high EPSS score. Use CyberStrike to automatically detect and prioritize these vulnerabilities across your infrastructure.
Detect HIGH Vulnerabilities
CyberStrike scans your infrastructure and detects high severity vulnerabilities in real time.
Get Started