HIGH Severity CVEs

Incorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c allows remote attackers to caus

Kieback & Peter's DDC4000 series has an insufficiently protected credentials vulnerability, which may allow an unauthent

Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligne

An issue in the server_handle_regular function of the test_coap_server.c file within the FreeCoAP project allows remote

Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corru

Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corru

Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass s

An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate

A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose

Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a speci

Trend Micro Antivirus One versions 3.10.4 and below (Consumer) is vulnerable to an Arbitrary Configuration Update that c

Trend Micro VPN, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite under specific conditions that

An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code o

A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual en

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports param

An issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before 10.0.9, 9.0.0 before Patch 41,

An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper v

A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX service running on port 9696

Cross-site request forgery (CSRF) vulnerability in the content page editor in Liferay Portal 7.4.0 through 7.4.3.103, an

Cross-site request forgery (CSRF) vulnerability in the content page editor in Liferay Portal 7.3.2 through 7.4.3.107, an

Cross-site request forgery (CSRF) vulnerability in the My Account widget in Liferay Portal 7.4.3.75 through 7.4.3.111, a

A flaw was found in the libreswan client plugin for NetworkManager (NetkworkManager-libreswan), where it fails to proper

A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agents_modules_csv func

A post-authentication arbitrary file read vulnerability within the server plugins section in plugin edition feature. Thi

The TeploBot - Telegram Bot for WP plugin for WordPress is vulnerable to sensitive information disclosure due to missing

The Rover IDX plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0.0.2905.

The AWS ALB Route Directive Adapter For Istio repo https://github.com/awslabs/aws-alb-route-directive-adapter-for-istio

The Amazon.ApplicationLoadBalancer.Identity.AspNetCore repo https://github.com/awslabs/aws-alb-identity-aspnetcore#vali

A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution

A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attac

A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenti

In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tail call between progs attached to di

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Avoid null pointer deref during path

In the Linux kernel, the following vulnerability has been resolved: i3c: master: cdns: Fix use after free vulnerability

In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix use after free vulnerabi

In the Linux kernel, the following vulnerability has been resolved: driver core: bus: Fix double free in driver API bus

In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: fix panic with metadata_ds

In the Linux kernel, the following vulnerability has been resolved: ice: Fix increasing MSI-X on VF Increasing MSI-X v

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix macvlan leak by synchronizing access to m

In the Linux kernel, the following vulnerability has been resolved: net/sched: accept TCA_STAB only for root qdisc Mos

In the Linux kernel, the following vulnerability has been resolved: net: do not delay dst_entries_add() in dst_release(

In the Linux kernel, the following vulnerability has been resolved: ppp: fix ppp_async_encode() illegal access syzbot

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon before being destr

In the Linux kernel, the following vulnerability has been resolved: drm/xe/ct: prevent UAF in send_recv() Ensure we se

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Reference count the zone in thermal_

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Free tzp copy along with the thermal

In the Linux kernel, the following vulnerability has been resolved: net: Fix an unsafe loop on the list The kernel may

In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization (CWE-862) allows any use

Online Clinic Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /su