HIGH Severity CVEs

cpp-httplib is a C++ header-only HTTP/HTTPS server and client library. Prior to version 0.20.1, the library fails to enf

Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address acc

A vulnerability classified as critical has been found in itsourcecode Content Management System 1.0. Affected is an unkn

A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been rated as critical. This issue affects the funct

A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been declared as critical. This vulnerability affect

A vulnerability was found in PHPGurukul Men Salon Management System 2.0. It has been classified as critical. This affect

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unk

A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of t

A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the com

Craft is a content management system. Versions of Craft CMS on the 4.x branch prior to 4.14.13 and on the 5.x branch pri

Incorrect access control in the component /user/list of production_ssm v0.0.1-SNAPSHOT allows attackers to access sensit

Incorrect access control in the component /api/user/manager of One v1.0 allows attackers to access sensitive information

Incorrect access control in the component /user/list of Shiro-Action v0.6 allows attackers to access sensitive informati

Incorrect access control in the component /scheduleLog/info/1 of PassJava-Platform v3.0.0 allows attackers to access sen

Incorrect access control in the doFilter function of kob latest v1.0.0-SNAPSHOT allows attackers to access sensitive inf

Incorrect access control in the /system/user/findUserList API of Xinguan v0.0.1-SNAPSHOT allows attackers to access sens

A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This issue

The External image replace plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat

Misskey is an open source, federated social media platform. Starting in version 12.0.0 and prior to version 2025.4.1, du

Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit he

Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced

Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file c

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method

BeyondTrust Privileged Remote Access (PRA) versions prior to 25.1 are vulnerable to a local authentication bypass. A loc

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.ph

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in ERPNEXT 14.82.1 and 14.74.3. The vulnerability allow

Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By us

In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidate packet poi

In the Linux kernel, the following vulnerability has been resolved: bpf: check changes_pkt_data property for extension

In the Linux kernel, the following vulnerability has been resolved: bpf: track changes_pkt_data property for global fun

A vulnerability was found in Mechrevo Control Console 1.0.2.70. It has been rated as critical. Affected by this issue is

A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. Affected by thi

A vulnerability classified as critical was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this v

A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is a

A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been rated as critical. This iss

A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been declared as critical. This

In thermal, there is a possible out of bounds write due to a race condition. This could lead to local escalation of priv

In scp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote informat

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if

A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the com

A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unkno

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is

A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. This issue affects some unknown processi

A vulnerability was found in code-projects Nero Social Networking Site 1.0. It has been classified as critical. This aff

A vulnerability was found in PHPGurukul e-Diary Management System 1.0 and classified as critical. Affected by this issue

In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.

Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer,