MEDIUM Severity CVEs

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 a

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoi

A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed in Safari 26.5.2, iOS

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7

Cross Site Request Forgery vulnerability in Squidex.io Squidex CMS v.7.21.0 and before allows a remote attacker to escal

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.

CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. The minif

A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_mes

Hi.Events through 1.9.0 public check-in list endpoints use short_id as sole access control, allowing unauthenticated acc

Hi.Events through 1.9.0 contains a promo code validation vulnerability where reservation validates usage count before as

Mixpost through 2.6.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to e

Papermark through 0.22.0 contains a cross-origin resource sharing (CORS) misconfiguration vulnerability that allows unau

SigNoz before 0.133.0 contains a broken access control vulnerability that allows authenticated users to access other org

Elide through 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in SortingImpl.getValidSorting

Mythic before 3.4.0.60 contains an authorization bypass vulnerability that allows authenticated spectator-role users to

Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints (c2profile_config_check_web

Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload_build_step table with an always-satisfi

ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerability in the CRM module

Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the

PhotoPrism before 260601-a7d098548 contains a broken access control vulnerability that allows authenticated non-admin us

LibrePhotos before 1.0.0 contains a broken object level authorization vulnerability in the SetPhotosShared endpoint that

LibreTranslate through 1.9.7, fixed in commit 397fd22, contains an IP spoofing vulnerability in the get_remote_address()

Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that re

Teable before 2026-06-15T04-43-24Z.1912 contains an improper access control vulnerability that allows anonymous attacker

Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attac

Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request for

A weakness has been identified in DeepMyst Mysti 0.4.0. Affected is the function _isTrackedConversation of the file src/

A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength

A vulnerability was identified in seladb PcapPlusPlus 25.05. This affects the function pcpp::TelnetLayer::getSubCommand

A vulnerability was determined in seladb PcapPlusPlus 25.05. The impacted element is the function pcpp::SSLClientHelloMe

An authenticated stack-based buffer overflow vulnerability exists in the web management interface of TP-Link TL-WR841N v

Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials

Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitrary local file conten

A vulnerability was detected in Edimax EW-7478APC 1.04. This vulnerability affects the function formStaDrvSetup of the f

Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 a

Unauthenticated Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce

Unauthenticated Broken Access Control in Japanized For WooCommerce <= 2.9.12 versions.

Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions.

Subscriber Broken Access Control in Ads by WPQuads <= 3.0.3 versions.

Unauthenticated Broken Access Control in WP User Frontend <= 4.3.7 versions.

Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions.

Subscriber Cross Site Scripting (XSS) in WooCommerce Designer Pro <= 1.9.34 versions.

Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.

Subscriber Broken Access Control in MainWP <= 6.1.1 versions.

Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.

Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wrote responses to a ha

A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown fu