HIGH Severity CVEs

An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a mali

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to arbitrary PHP Code Injection due to missing

The eHRD CTMS from Sunnet has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to bypas

In the Linux kernel, the following vulnerability has been resolved: uprobe: avoid out-of-bounds memory access of fetchi

A vulnerability was found in Tenda AC1206 up to 20241027. It has been classified as critical. This affects the function

A vulnerability has been found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as critical. Affec

A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an

A vulnerability, which was classified as critical, has been found in Codezips Pet Shop Management System 1.0. This issue

Ironman PowerShell Universal 5.x before 5.0.12 allows an authenticated attacker to elevate their privileges and view job

CycloneDX cdxgen through 10.10.7, when run against an untrusted codebase, may execute code contained within build-relate

A vulnerability classified as critical has been found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. Affected

A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been rated as critical. This

Useragent is a user agent parser for Node.js. All versions as of time of publication contain one or more regular express

Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more r

CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that

Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerabl

insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to unauthoriz

The The Uix Shortcodes – Compatible with Gutenberg plugin for WordPress is vulnerable to arbitrary shortcode execution i

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to privilege escalation via account take

The WordPress Post Grid Layouts with Pagination – Sogrid plugin for WordPress is vulnerable to Local File Inclusion in a

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager that allows a user of the guest OS to access gl

NVIDIA vGPU software contains a vulnerability in the GPU kernel driver of the vGPU Manager for all supported hypervisors

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability which could allow a privileged attacker to esca

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular use

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular use

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular use

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular use

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular use

The User Toolkit plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.3. Th

funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\a

funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin.

Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield.

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.

Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.

Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartPar

An arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows attackers to execute ar

MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active

Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or ge

An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js file.

A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. (Jix

CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product. The vulnerability could allow

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfi

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWi

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Du

Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The `/postLoca

Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The `/postLocal`

Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset password