Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report.
There exists a Path Traversal vulnerability in Safearchive on Platforms with Case-Insensitive Filesystems (e.g., NTFS).
Memory corruption during GNSS HAL process initialization.
Memory corruption while processing GPU page table switch.
Memory corruption while processing voice packet with arbitrary data received from ADSP.
Memory corruption while processing GPU commands.
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
Memory corruption while handling session errors from firmware.
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
Memory corruption while station LL statistic handling.
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.
Memory corruption while handling IOCTL calls in JPEG Encoder driver.
Transient DOS while processing the CU information from RNR IE.
Transient DOS while parsing BTM ML IE when per STA profile is not included.
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
A vulnerability, which was classified as critical, was found in code-projects/anirbandutta9 Content Management System an
In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri
A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects a
A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability
A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by
A vulnerability classified as critical has been found in Codezips Free Exam Hall Seating Management System 1.0. Affected
A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been rated as critical. This
A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issu
A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unkn
A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknow
A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function fo
qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors.
The Okta Device Access features, provided by the Okta Verify agent for Windows, provides access to the OktaDeviceAccessP
Yealink Meeting Server before V26.0.0.67 allows attackers to obtain static key information from a front-end JS file and
Zusam is a free and open-source way to self-host private forums. Prior to version 0.5.6, specially crafted SVG files upl
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman
In DrayTek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman
Yealink Meeting Server before V26.0.0.67 is vulnerable to sensitive data exposure in the server response via sending HTT
An Insecure Direct Object Reference (IDOR) in the dashboard of SiSMART v7.4.0 allows attackers to execute a horizontal-p
An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX cal
TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration
A vulnerability was found in Tenda AC15 15.03.05.19 and classified as critical. This issue affects the function formSetD
A vulnerability has been found in Tenda AC15 15.03.05.19 and classified as critical. This vulnerability affects the func
Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incor
Missing Authorization vulnerability in Geek Code Lab Login As Users allows Exploiting Incorrectly Configured Access Cont
Missing Authorization vulnerability in MetaBox.Io Meta Box – WordPress Custom Fields Framework allows Exploiting Incorre
Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constraine
Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo
Missing Authorization vulnerability in YMC Filter & Grids allows Accessing Functionality Not Properly Constrained by ACL
Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly
Missing Authorization vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows Accessing Functionality Not Properl
Frequently Asked Questions
What does HIGH severity mean for CVEs?
CVSS 7.0–8.9 — serious vulnerabilities that can lead to significant data exposure, privilege escalation, or service disruption
How many high severity CVEs exist?
There are 149,356 CVE records rated HIGH in our database. Of these, 381 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize high severity vulnerabilities?
HIGH severity vulnerabilities should be patched immediately, especially if they are in the CISA KEV catalog or have a high EPSS score. Use CyberStrike to automatically detect and prioritize these vulnerabilities across your infrastructure.
Detect HIGH Vulnerabilities
CyberStrike scans your infrastructure and detects high severity vulnerabilities in real time.
Get Started