HIGH Severity CVEs

eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management

Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to d

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker

In JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose sensitive resources

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 121

A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1

A vulnerability has been identified in SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions). The

A vulnerability has been identified in Teamcenter V14.1 (All versions), Teamcenter V14.2 (All versions), Teamcenter V14.

A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC Series (P2 Ethernet) (All v

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC 5 6MD85 (CP300) (All ve

A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Up

An authenticated attacker is able to use the Plugin Manager of the web interface of the Wattsense Bridge devices to uplo

In affected versions of Octopus Server the preview import feature could be leveraged to identify the existence of a targ

The Zox News - Professional WordPress News & Magazine Theme plugin for WordPress is vulnerable to unauthorized data modi

Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in

SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a public

The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an aut

The User Account and Authentication service (UAA) for SAP HANA extended application services, advanced model (SAP HANA X

A vulnerability, which was classified as critical, was found in Lumsoft ERP 8. Affected is the function DoUpload/DoWebUp

Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allo

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by t

Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final

A vulnerability has been found in Pix Software Vivaz 6.0.10 and classified as critical. This vulnerability affects unkno

A host header injection vulnerability exists in the NPM package of perfood/couch-auth <= 0.21.2. By sending a specially

A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4

Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the

A stack overflow vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an authenticated remote a

Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing an unauthorized rem

A default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the

Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. An attacker can send a specially crafted HTTP POS

Tenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow. An attacker with access to the web management portal can e

A hardcoded credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access t

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.

A vulnerability in mintplex-labs/anything-llm prior to version 1.3.1 allows for path traversal due to improper handling

An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute

An arbitrary file upload vulnerability in the component /userPicture of Timo v2.0.3 allows attackers to execute arbitrar

OneBlog v2.3.6 was discovered to contain a template injection vulnerability via the template management department.

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources d

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan

In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write sysca

A vulnerability exists in the VideONet product included in the listed System 800xA versions, where VideONet is used.  A

Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and

Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to

OS Command Injection vulnerability in Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This vulnerability

The Super Store Finder plugin for WordPress is vulnerable to SQL Injection via the ‘ssf_wp_user_name’ parameter in all v

A vulnerability, which was classified as critical, was found in CoinRemitter 0.0.1/0.0.2 on OpenCart. This affects an un

A vulnerability, which was classified as critical, has been found in Dreamvention Live AJAX Search Free up to 1.0.6 on O

Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into

Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into