Insertion of Sensitive Information Into Sent Data vulnerability in Tim Strifler Exclusive Addons Elementor allows Retrie
A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. This affects an unknown part of the file /ecomme
A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this issue is some unkn
A vulnerability was determined in radareorg radare2 up to 6.1.6. This affects the function core_anal_bytes of the file l
A weakness has been identified in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. The impacted eleme
A flaw has been found in AIAnytime Awesome-MCP-Server up to a884bb51bcd99e08e14fd712c749d55d9d9a13ab. Affected by this i
A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this issue is some unkno
A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is a
A vulnerability was determined in AD-Security AD_Miner 1.9.0. Affected is the function request_a of the file ad_miner/sc
A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker incorrectly synchronizes the email_verified
A vulnerability was detected in itsourcecode Hospital Management System 1.0. The affected element is an unknown function
A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.13.0-beta.2. Impacted is the function Meth
A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.1.0. This issue affects the function verify_serv
A vulnerability was identified in code-projects Online Examination 1.0. This affects an unknown part of the file /update
A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functiona
A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the fi
A vulnerability was detected in code-projects Internship Management System 1.0. This affects an unknown function of the
A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. I
A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this iss
A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerabilit
A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the
A security vulnerability has been detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This imp
A security flaw has been discovered in CodeAstro Apartment Visitor Management System 1.0. The impacted element is an unk
A vulnerability was determined in 666ghj BettaFish up to 1.2.1. Impacted is the function _deduplicate_results of the fil
A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the fi
A vulnerability was detected in code-projects Assessment Management 1.0. This vulnerability affects unknown code of the
A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file
A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of t
The silent Just-In-Time (JIT) provisioning feature in federated authentication implementations fails to properly segrega
A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInference_opse
A vulnerability has been found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /ecommer
A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /pati
A weakness has been identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 23105f25dadf57b4314fc015a63a7c6e910c
A vulnerability was identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 213babdbaa949e94557246414db0130e0139
A vulnerability was determined in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 49b20f53de2b7ec34e920b11c863f1491d91
A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 95dfa8cebbb87ab46ae450643a07241274a74dce.
A flaw has been found in RT-Thread up to 5.2.2. Affected is the function read/write/sys_ioctl of the file components/lwp
A vulnerability was detected in NousResearch hermes-agent up to 2026.5.16. This impacts the function extract_media of th
A security vulnerability has been detected in NousResearch hermes-agent up to 0.15.2. This affects the function DiscordA
A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. The impacted element is the function AIAgen
A security flaw has been discovered in NousResearch hermes-agent up to 0.15.2. The affected element is the function shel
A vulnerability was identified in omec-project amf up to 2.0.2/2.1.1. Impacted is an unknown function of the file /go/sr
A vulnerability was determined in omec-project amf up to 2.1.1. This issue affects the function RRCInactiveTransitionRep
A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionali
A vulnerability was detected in Open5GS up to 2.7.7. Affected by this vulnerability is the function amf_nnrf_handle_nf_d
Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over
Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to pe
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)
Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
Frequently Asked Questions
What does MEDIUM severity mean for CVEs?
CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit
How many medium severity CVEs exist?
There are 164,190 CVE records rated MEDIUM in our database. Of these, 101 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize medium severity vulnerabilities?
MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect MEDIUM Vulnerabilities
CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.
Get Started