MEDIUM Severity CVEs

The Grav Login plugin (getgrav/grav-plugin-login) before 3.9.1 is vulnerable to email address enumeration. The register(

Grav CMS before 2.0.16 fails to filter system, site, and theme configuration arrays in sandboxed Twig renders, allowing

Grav CMS before 2.0.16 contains a path traversal vulnerability in the media_directory() Twig function that fails to vali

Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attac

Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token (form

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without

Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in th

Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, wh

Adminer 4.6.0 before 5.5.0 prepends the client-supplied X-Forwarded-Prefix header to $_SERVER["REQUEST_URI"] with no tru

The BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP plugin for WordPress is vulnera

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to generic SQL Injection

The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::post_ticket_reply of the

Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

Subscriber Broken Access Control in Style Kits <= 2.6.5 versions.

A flaw was found in CRI-O's container-creation environment-variable handling (`mergeEnvs` in `server/utils.go`, consumed

A vulnerability was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an authenticated attacker may

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attack

Wagtail is an open source content management system built on Django. Prior to versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2 o

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A m

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerabilit

A cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows rem

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall o

Dolibarr 21.0.0 before 24.0.0 contains an authorization bypass vulnerability caused by an inverted boolean condition in

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prio

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standar

Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled

The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::add_opaque omits the che

The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own arguments. A fixpoint may

The guard checker in Rocq Prover does not recheck the recursive tree representation of an inductive type parameter after

The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform without examining calls betwe

Dolibarr before 24.0.0 contains a sensitive data exposure vulnerability in the Members REST API that allows authenticate

Dolibarr before 24.0.0 contains a SQL injection vulnerability in the users REST API that allows authenticated attackers

Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privile

Print Assumptions does not report that a definition was produced while universe checking was disabled when that definiti

Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 a

An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC sof

Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc, which allows a remote

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint t

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the user REST API update endpoint that allows

Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API company bank account w

Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra fields administration templa

A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image file, the plugin al

Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/acco

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulne

Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vul