HIGH Severity CVEs

Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization

Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Execution with Unnecess

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been declared as critical. Affec

A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unkno

An unauthenticated attacker can create a malicious link which they can make publicly available. When an authenticated vi

Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module

The Ikhgur mn.ikhgur.khotoch (aka Video Downloader Pro & Browser) application through 1.0.42 for Android allows an attac

The com.video.downloader.all (aka All Video Downloader) application through 11.28 for Android allows an attacker to exec

The com.superfast.video.downloader (aka Super Unlimited Video Downloader - All in One) application through 5.1.9 for And

GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSo

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of he

Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing f

Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing f

Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing f

D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution (RCE) vulnerability via the ping_addr paramete

UsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability.

A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknow

If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a sta

If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a sta

If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a sta

In the Linux kernel, the following vulnerability has been resolved: fork: only invoke khugepaged, ksm hooks if no error

The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this

The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privil

The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privil

The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privil

The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privil

The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privil

Webopac from Grand Vice info does not properly validate uploaded file types, allowing remote attackers with regular priv

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopalkumar315 Gboy

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in richteam Share But

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in fruitcakestudios H

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sophia M Williams

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wplsquared L Squar

Insufficient validation performed on the REST API License file in Paxton Net2 before 6.07.14023.5015 (SR4) enables use o

Wi-Fi Alliance wfa_dut (in Wi-Fi Test Suite) through 9.0.0 allows OS command injection via 802.11x frames because the sy

A vulnerability classified as critical was found in Tenda AC10 16.03.10.13. Affected by this vulnerability is the functi

Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not

In Faust 2.23.1, an input file with the lines "// r visualisation tCst" and "//process = +: L: abM-^Q;" and "process = r

An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforal

An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding

An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the f

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handl

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pa

A vulnerability has been found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this

A vulnerability, which was classified as critical, was found in Tenda AC10 16.03.10.13. Affected is the function FUN_004

A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0.

The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrendere

A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been rated as critical. Affected by this issue is the fun

A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been declared as critical. Affected by this vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in colinph970 AmaDisc