HIGH Severity CVEs

An issue in bytecodealliance wasm-micro-runtime before v.b3f728c and fixed in commit 06df58f allows a remote attacker to

An attacker with local access the to medical office computer can escalate his Windows user privileges to "NT AUTHORITY\

An attacker with local access to the medical office computer can access restricted functions of the Elefant Service too

An attacker with local access the to medical office computer can escalate his Windows user privileges to "NT AUTHORITY\

Attackers with local access to the medical office computer can escalate their Windows user privileges to "NT AUTHORITY\

An unauthenticated attacker with access to the local network of the medical office can query an unprotected Fast Health

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entit

Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Comput

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. This issue af

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been classified as critical. This aff

A vulnerability was found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this issue

In the Linux kernel, the following vulnerability has been resolved: udf: refactor inode_bmap() to handle error Refacto

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a check for memory allocation __

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a bug while setting up Level-2 PB

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix reader locking when changing the s

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix address emission with tag-based KAS

In the Linux kernel, the following vulnerability has been resolved: maple_tree: correct tree corruption on spanning sto

In the Linux kernel, the following vulnerability has been resolved: posix-clock: Fix missing timespec64 check in pc_clo

In the Linux kernel, the following vulnerability has been resolved: x86/entry_32: Clear CPU buffers after register rest

In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: Switch to device-managed dmam_alloc_c

In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabl

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Stop the active perfmon before being destr

In the Linux kernel, the following vulnerability has been resolved: net: explicitly clear the sk pointer, when pf->crea

In the Linux kernel, the following vulnerability has been resolved: mptcp: handle consistently DSS corruption Bugged p

In the Linux kernel, the following vulnerability has been resolved: secretmem: disable memfd_secret() if arch cannot se

In the Linux kernel, the following vulnerability has been resolved: fbdev: sisfb: Fix strbuf array overflow The values

In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: Remove use_count guard in stop_

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix race when converting group handle

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix access to uninitialized variable i

Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denia

A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issu

A vulnerability was found in code-projects E-Health Care System 1.0. It has been rated as critical. Affected by this iss

changedetection.io is a free open source web page change detection tool. The validation for the file URI scheme falls sh

XStream is a simple library to serialize objects to XML and back again. This vulnerability may allow a remote attacker t

The Inshot com.downloader.privatebrowser (aka Video Downloader - XDownloader) application through 1.3.5 for Android allo

The ASD com.rocks.video.downloader (aka HD Video Downloader All Format) application through 7.0.129 for Android allows a

The Goodwy com.goodwy.dialer (aka Right Dialer) application through 5.1.0 for Android enables any application (with no p

Nomad Community and Nomad Enterprise ("Nomad") volume specification is vulnerable to arbitrary cross-namespace volume cr

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require (anti-)CSRF tok

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. Affected by t

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected b

Combodo iTop is a web based IT Service Management tool. An attacker can request any `route` we want as long as we specif

Password Pusher is an open source application to communicate sensitive information over the web. A cross-site scripting

An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a crafted data channel pack

devtron is an open source tool integration platform for Kubernetes. In affected versions an authenticated user (with min

A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an

An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Clients can authenticate themselves to the d

An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to

An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. There is no CSRF protection.

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. With the SNMPv1 public community, all value