MEDIUM Severity CVEs

Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. T

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass

A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.

A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. The impacted element is the function read

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Convert to DRM's vblank timer Replace vk

OfflineIMAP before 8.0.3 trusts the server with their STARTTLS capability prior to authentication, which allows STRIPTLS

QloApps through 1.7.0 contains a stored cross-site scripting vulnerability in the admin file manager that allows authent

A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29a

A security flaw has been discovered in SourceCodester Inventory System 1.0. Affected by this vulnerability is an unknown

A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /user

A vulnerability was found in UTT HiPER 2610G up to 3.0.0-171107. This affects the function strcpy of the file /goform/fo

Stored cross-site scripting in the service discovery active check output in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and

Improper neutralization of HTML-encoded characters in the URL validation function in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0

Stored cross-site scripting in the global settings change log in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 v

Incorrect authorization in the User Messages dashboard widget in Checkmk <2.5.0p5 causes the message-fetching endpoints

Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 version

A vulnerability has been found in SourceCodester Barangay Resident Profiling and Information Management System 1.0. The

A flaw has been found in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the

A vulnerability was detected in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file

A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This issue affects some unkno

The Recipe Card Blocks Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the recipe block's 'su

A flaw was found in Quay. The filedrop endpoint accepts any mime type without validation, allowing an authenticated user

A security flaw has been discovered in CodeAstro Leave Management System 1.0. This affects an unknown part of the file /

A vulnerability was identified in CodeAstro Leave Management System 1.0. Affected by this issue is some unknown function

A vulnerability was determined in CodeAstro Leave Management System 1.0. Affected by this vulnerability is an unknown fu

A vulnerability was found in CodeAstro Leave Management System 1.0. Affected is an unknown function of the file /admin/d

A vulnerability has been found in CodeAstro Leave Management System 1.0. This impacts an unknown function of the file /a

A flaw has been found in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This affects an

A vulnerability was identified in Weaviate up to 1.37.7. This vulnerability affects the function validateConfig of the f

A vulnerability has been found in D-Link DCS-5615 1.01.00. Affected by this vulnerability is an unknown functionality of

A vulnerability was detected in CodeAstro Ingredients Stock Management System 1.0. This impacts an unknown function of t

A security vulnerability has been detected in TOTOLINK AC1200 T8 4.1.5cu.8611. This affects an unknown function of the f

A weakness has been identified in Tenda AC15 15.03.05.19. The impacted element is an unknown function of the file /etc_r

A security flaw has been discovered in D-Link DIR-823G 1.0.2B05. The affected element is an unknown function of the file

A flaw has been found in Neovim up to 0.12.2. Affected by this issue is the function M.read of the file runtime/lua/vim/

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. Impacted is an unknown funct

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file ind

A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. This affects the function OAuth2Client of the file h

A security vulnerability has been detected in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda317

A weakness has been identified in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Aff

WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attack

WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability that allows authenticated

WordPress Plugin Stripe Payments before 2.0.40 contains a stored cross-site scripting vulnerability that allows authenti

WordPress Plugin WP-Paginate 2.1.3 contains a stored cross-site scripting vulnerability that allows authenticated attack

A vulnerability was identified in jflyfox jfinal_cms up to 5.1.0. This impacts the function list of the file Advicefeedb

A vulnerability has been found in hs-web hsweb-framework up to 5.0.1. The affected element is the function denied of the

A flaw has been found in jishenghua jshERP up to 3.6. Impacted is the function insertPlatformConfig of the file jshERP-b

A security vulnerability has been detected in jishenghua jshERP up to 3.6. This vulnerability affects the function addAc

A weakness has been identified in zilliztech deep-searcher up to 0.0.2. This affects the function CollectionRouter.invok

A vulnerability has been found in NousResearch hermes-agent up to 0.12.0. This affects the function resolve_session_by_t