MEDIUM Severity CVEs

The Hearing Access Service (HAS) GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set uncondit

rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitra

Unauthenticated REST disclosure of certain content items in Apache Allura. This issue affects Apache Allura: through

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Inject

Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Came

Improper input validation vulnerability in Apache Camel. This issue affects Apache Camel: from 2.17.0 before 4.14.9,

BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-u

The UMP Stream responder library in lib/midi2/ump_stream_responder.c builds reply packets in a 16-byte struct midi_ump (

The userspace syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validated the nested msg->data/msg->si

Horde IMP's AppleDouble MIME viewer writes an attacker-controlled attachment name into an HTML status block without esca

TIM Flow before 26.0.6 contains an improper authorization vulnerability that allows any authenticated user to submit arb

HCL Hive is affected by a missing rate limit which could allow an attacker unauthorized access via brute-force or creden

A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component

adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforc

An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert

HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker u

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  A

A flaw was found in JSS (Java Security Services). The JSSTrustManager class does not verify NSS trust flags when validat

Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions.

Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.6 versions.

Unauthenticated Cross Site Request Forgery (CSRF) in Hash Form <= 1.4.0 versions.

Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.

Subscriber Insecure Direct Object References (IDOR) in Fluent Boards Pro <= 2.0.11 versions.

Subscriber Server Side Request Forgery (SSRF) in FluentCRM Pro <= 3.1.12 versions.

Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions.

Contributor Server Side Request Forgery (SSRF) in Shared Files <= 1.7.69 versions.

Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions.

It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service (DoS) cond

Hugo's default fenced-code-block renderer writes attribute values taken from the code-fence info string into the rendere

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an aut

A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the

A security flaw has been discovered in achorein expo-share-intent up to 8.0.0. This affects the function getDataColumn o

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function

A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function Se

NewSiteServer (NSS) developed by CyberTutor has a Missing Authentication vulnerability. Unauthenticated remote attackers

NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers

A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the

A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmart

BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccess

A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing o

A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseReq

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc_server::graph_compute of t

A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function _is_safe_url of the file CTFd/u

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vuln

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown fu

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/ja

Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unenco

justhtml before 1.12.0 (versions <= 1.11.0) contains a mutation cross-site scripting (mXSS) vulnerability in the seriali