MEDIUM Severity CVEs

Lack of escaping leads to an XSS vulnerability in the generic image output layout.

Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.

Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.

Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.

Lack of validation leads to an XSS vulnerability in the MFA management views.

An improper access check allows privileged users to overwrite media files without editing permissions.

AWS Research and Engineering Studio (RES) is an open-source solution that enables researchers and engineers to create an

A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined config

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vecto

Ghostfolio's PUT /api/v1/portfolio/holding/:dataSource/:symbol/tags endpoint fails to verify Access.permissions field wh

An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `DomainNameValidator` does not prohibit newlin

An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `django.contrib.gis.gdal.GDALRaster` over-read

A heap-buffer-overflow flaw was found in 389 Directory Server (389-ds-base). When normalizing a Distinguished Name (DN)

This vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on t

The Dhara flash translation layer disk driver (drivers/disk/ftl_dhara.c) implemented the dhara_nand_ callbacks so that,

In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the

The Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like `AIRFLOW__SECRET

A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the t

The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based `shoul

The encryption algorithm used to protect the configuration of user accounts, stored in the built-in user directory of Pc

Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.

EEPROM firmware on Raspberry Pi 5 and Compute Module 5 devices produced non-random KASLR and RNG seed values. This resul

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Armiya Information

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Armiya Information

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Armiya Information Techno

Cross-site request forgery vulnerability exists in SEIKO EPSON Web Config. If a user views a malicious page while logged

The WP Travel Engine WordPress plugin before 6.8.1 does not properly validate the source of a user-supplied profile ima

An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title

A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the brows

Minosoft is an open-source, multi-version Minecraft Java Edition client written in Kotlin. Starting in commit f1ae30e2b0

showdown contains a stored cross-site scripting vulnerability in the parseHeaders function of src/subParsers/makehtml/ta

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

ajenti through v2.2.13 has a clickjacking weakness in the browser-facing login and administrative UI. In ajenti-core/aj/

mrubyc through release3.4.1 was found to contain an out-of-bounds read in builtin missing-method lookup inside mrbc_find

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

showdown contains a cross-site scripting vulnerability in metadata title handling that allows attackers to inject arbitr

vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a pure prompt embeds payload in a

Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's ForwardAuth middle

Hugo is a static site generator. From 0.123.0 to 0.161.1, a regression made  RootMappingFs.statRoot  use  Stat  (follows

DNG SDK versions 1.7.1 2536 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an

Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported

Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.

Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.