MEDIUM Severity CVEs

An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Mana

A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Ge

A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Fire

An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge

On affected platforms with hardware IPSec support running Arista EOS with certain IPsec features enabled, EOS may exhibi

A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412DA0 of the file /boaf

A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LA

7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in

7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds

7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain an uninitialized heap read i

7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain an off-by-one heap out-of-bo

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_41CF20 of the fil

A vulnerability was found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e

CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instabil

In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from t

7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an An uninitialized memory d

A vulnerability has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a388529

7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via

Multiple reflected Cross-Site Scripting (XSS) vulnerabilities in damasac thaipalliative_lte through version 3.0 allow re

sanic-cors version 2.2.0 and prior contains an improper regular expression in the try_match() function in sanic_cors/cor

A flaw has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae

A security vulnerability has been detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large v

HelloTalk through 3.4.1 stores full-precision GPS coordinates even when the user had intended to share only a country or

Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fai

Lyrion Music Server 9.2.0 contains an arbitrary directory listing vulnerability in its readdirectory query, exposed thro

Lyrion Music Server 9.2.0 contains an unauthenticated reflected cross-site scripting vulnerability in the server.log end

A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-af

An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulne

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulne

Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Syntactically Invalid Structur

Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0 allows local attacker to ac

Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive informa

Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive in

Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attack

Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive i

Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attack

HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection.  An attacker ca

HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center.

All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when ext

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog (aka the communicat

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.

In Mimecast Incydr before 2.6.0, arbitrary file access can occur.

In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpo

Insufficient policy enforcement in History in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a u

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attack

Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform