Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TotalSuite TotalCo
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dastan800 visualsl
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Claire Ryan Author
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in platcom WP-Asamble
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRUDLab CRUDLab Sc
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rachanaS Sponsered
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wppluginboxdev Sty
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vicente Ruiz Gálve
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bill Zimmerman voo
OpenMetadata <=1.4.1 is vulnerable to SQL Injection. An attacker can extract information from the database in function l
Omnissa UAG contains a Cross-Origin Resource Sharing (CORS) bypass vulnerability. A malicious actor with network access
There is a whitelist mechanism bypass in GameCenter ,successful exploitation of this vulnerability may affect service co
Phoneservice module is affected by code injection vulnerability, successful exploitation of this vulnerability may affec
The WP Editor plugin for WordPress is vulnerable to arbitrary file update due to missing file path validation in all ver
The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint
Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM dur
A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4
Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with
Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker
DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose p
Zulip is an open-source team collaboration tool. Zulip supports a configuration where account creation is limited solely
Omnissa Horizon Client for Windows contains an LPE Vulnerability. A malicious actor with local access where Horizon Clie
A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Managemen
A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the com
Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corr
Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potential
PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php.
A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unkno
A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is
A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function
A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. This issue affects some unknown processi
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v
Frequently Asked Questions
What does HIGH severity mean for CVEs?
CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption
How many high severity CVEs exist?
There are 143,102 CVE records rated HIGH in our database. Of these, 363 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize high severity vulnerabilities?
HIGH severity vulnerabilities should be patched immediately, especially if they are in the CISA KEV catalog or have a high EPSS score. Use CyberStrike to automatically detect and prioritize these vulnerabilities across your infrastructure.
Detect HIGH Vulnerabilities
CyberStrike scans your infrastructure and detects high severity vulnerabilities in real time.
Get Started