High Severity Vulnerabilities

111.5K CVEs classified as high severity

HIGH
Total CVEs
111.5K
Vulnerabilities
Avg CVSS
8.8
High
Max CVSS
8.8
Highest
Min CVSS
8.8
Lowest

Browse by Severity

High Severity CVEs

Page 89 of 4645
CVSS:8.8(High)

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS:8.8(High)

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS:8.8(High)

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS:8.8(High)

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS:8.8(High)

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS:8.8(High)

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS:8.8(High)

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS:8.8(High)

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS:8.8(High)

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

CVSS:8.8(High)

A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. This issue only affects users that use Elastic Securi...

CVSS:8.8(High)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in kaptinlin Striking allows Path Traversal.This issue affects Striking: from n/a through 2.3.4.

CWE-222024
CVSS:8.8(High)

Missing Authorization vulnerability in Hercules Design Hercules Core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hercules Core: from n/a through 6.5.

CVSS:8.8(High)

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Book Landing Page.This issue affects Book Landing Page: from n/a through 1.2.3.

CVSS:8.8(High)

Cross Site Request Forgery (CSRF) vulnerability in Tribulant Newsletters.This issue affects Newsletters: from n/a through 4.9.7.

CVSS:8.8(High)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zoho Marketing Automation.This issue affects Zoho Marketing Automation: from n/a through 1.2.7.

CWE-892024
CVSS:8.8(High)

Cross-Site Request Forgery (CSRF) vulnerability in Ali2Woo Ali2Woo Lite.This issue affects Ali2Woo Lite: from n/a through 3.3.5.

CVSS:8.8(High)

Cross-Site Request Forgery (CSRF) vulnerability in blazethemes Digital Newspaper.This issue affects Digital Newspaper: from n/a through 1.1.5.

CVSS:8.8(High)

A vulnerability, which was classified as critical, was found in Campcodes House Rental Management System 1.0. This affects an unknown part of the file ajax.php. The manipulation of the argument id lea...

CWE-892024
CVSS:8.8(High)

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated technician user can upload a malicio...

CWE-732024
CVSS:8.8(High)

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an OS command injection vulnerability in an admin operation. A remote low privileged attacker could poten...

CWE-782024
CVSS:8.8(High)

Cross Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Automator Pro.This issue affects Uncanny Automator Pro: from n/a through 5.3.

CVSS:8.8(High)

Improper Control of Generation of Code ('Code Injection') vulnerability in Membership Software WishList Member X allows Code Injection.This issue affects WishList Member X: from n/a before 3.26.7.

CWE-942024
CVSS:8.8(High)

Improper Privilege Management vulnerability in Membership Software WishList Member X allows Privilege Escalation.This issue affects WishList Member X: from n/a before 3.26.7.

CVSS:8.8(High)

Cross-Site Request Forgery (CSRF) vulnerability in StylemixThemes MasterStudy LMS allows Cross Site Request Forgery.This issue affects MasterStudy LMS: from n/a through 3.2.1.