HIGH Severity CVEs

Incorrect access control in the component content://com.handcent.messaging.provider.MessageProvider/ of Handcent NextSMS

Cross-Site Request Forgery (CSRF) vulnerability in Maeve Lander PayPal Responder allows Stored XSS.This issue affects Pa

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Prism I.T. Systems

WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption dur

Cross-Site Request Forgery (CSRF) vulnerability in Essential Marketer Essential Breadcrumbs essential-breadcrumbs allows

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Anzar Ahmed Ni Woo

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Software installed and run as a non-privileged user may conduct improper GPU system calls to achieve unauthorised reads

Software installed and run as a non-privileged user may conduct improper GPU system calls to allow unprivileged access t

Incorrect access control in the component l_0_0.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive informa

Zulip from 8.0 to 8.3 contains a memory leak vulnerability in the handling of popovers.

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things (IoT)

ibm.ibm_zhmc is an Ansible collection for the IBM Z HMC. The Ansible collection "ibm.ibm_zhmc" writes password-like prop

zhmcclient is a pure Python client library for the IBM Z HMC Web Services API. In affected versions the Python package "

check-jsonschema is a CLI and set of pre-commit hooks for jsonschema validation. The default cache strategy uses the bas

In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to ad

moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger mult

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a locally authenticated non-administrative user

Certain models of routers from Billion Electric has an OS Command Injection vulnerability, allowing remote attackers wit

Certain models of routers from Billion Electric has a Plaintext Storage of a Password vulnerability. Remote attackers wi

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper han

Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27,

Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated atta

Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated rem

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of th

In Click Studios Passwordstate before build 9920, there is a potential permission escalation on the edit folder screen.

DreamMaker from Interinfo has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi E

Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsub

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi E

A vulnerability classified as critical has been found in code-projects Concert Ticket Ordering System 1.0. Affected is a

A vulnerability was found in PHPGurukul Complaint Management system 1.0. It has been classified as critical. Affected is

A vulnerability was found in PHPGurukul Complaint Management system 1.0 and classified as critical. This issue affects s

A vulnerability has been found in PHPGurukul Complaint Management system 1.0 and classified as critical. This vulnerabil

A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management system 1.0. This affects

The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerabili

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnera

A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the f

A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function form

In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in bcm_proc_show() BUG: KASAN: s

Cross-Site Request Forgery (CSRF) vulnerability in Jason Grim Custom Shortcode Sidebars custom-shortcode-sidebars allows

Cross-Site Request Forgery (CSRF) vulnerability in Jamie O Idealien Category Enhancements idealien-category-enhancements

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in harshtohit111 Fenc

Cross-Site Request Forgery (CSRF) vulnerability in wpwox Footer Flyout Widget footer-flyout-widget allows Stored XSS.Thi

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Path Traversal: '.../...//' vulnerability in softpulseinfotech SP Blog Designer sp-blog-designer allows PHP Local File I

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in