A bug in the GET `/api/v2/connections/{connection_id}` REST API endpoint in Apache Airflow allowed an authenticated UI/A
A flaw has been found in CodeAstro Ingredients Stock Management System 1.0. This vulnerability affects unknown code of t
A weakness has been identified in Assimp up to 6.0.4. Affected by this vulnerability is the function aiNode::~aiNode of
A security flaw has been discovered in Assimp up to 6.0.4. Affected is the function HL1MDLLoader::extract_anim_value of
A vulnerability was identified in Assimp up to 6.0.4. This impacts the function Assimp::MDL::HalfLife::HL1MDLLoader::rea
A vulnerability was determined in Assimp up to 6.0.4. This affects the function HL1MDLLoader::read_meshes of the file HL
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the
A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function _scan_memory_cont
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this issue is the function
An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows a
An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which a
An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive all
In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of s
In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of pr
In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation
A vulnerability has been found in nextlevelbuilder GoClaw up to 3.11.3. This affects the function auth of the file inter
A flaw has been found in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function handleSave of the fi
A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToO
A security flaw has been discovered in AstrBotDevs AstrBot 4.23.6. This vulnerability affects unknown code of the file /
A vulnerability was identified in AstrBotDevs AstrBot 4.24.2. This affects the function astr_main_agent of the file astr
A vulnerability was determined in AstrBotDevs AstrBot 4.23.6. Affected by this issue is the function _normalize_rw_path
A vulnerability was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerability is the function _sanitize_prompt
A vulnerability has been found in code-projects Online Hospital Management System 1.0. Affected is an unknown function o
A security vulnerability has been detected in Metasoft 美特软件 MetaCRM 6.4.0. The impacted element is an unknown function o
A weakness has been identified in OFCMS 1.1.3. The affected element is the function Query of the file \ofcms-admin\src\m
A security flaw has been discovered in OFCMS 1.1.3. Impacted is the function Query of the file \ofcms-admin\src\main\jav
A vulnerability was identified in OFCMS 1.1.3. This issue affects the function Query of the file \ofcms-admin\src\main\j
A vulnerability was found in Assimp up to 6.0.4. This affects the function glTFCommon::CopyValue in the library glTFComm
An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible f
A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndexDatabaseHandle::dele
A security flaw has been discovered in OFCMS up to 1.1.3. The impacted element is the function Query of the file ofcms-a
A vulnerability was found in Tenda W12 3.0.0.7(4763). This issue affects the function cgiSysWebTimeoutSet of the file /b
A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formWlanSetup of the
A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSysCmd of the file /goform/f
A security vulnerability has been detected in Aider-AI Aider 0.86.3. This affects the function requests.get of the file
A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the com
A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editor_code
A vulnerability was identified in Aider-AI Aider 0.86.3. Affected is an unknown function of the file aider/args.py of th
A weakness has been identified in Orthanc Explorer 2 up to 1.12.0. The impacted element is an unknown function of the fi
A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0. The affected element is the f
A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Adminis
A flaw has been found in code-projects Visitor Management System 1.0. Affected by this issue is some unknown functionali
A security vulnerability has been detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad11
The Advanced Custom Fields (ACF®) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and
A vulnerability was determined in Edimax BR-6478AC 1.23. The affected element is the function formWlbasic of the file /g
A vulnerability was determined in Open5GS up to 2.7.7. This affects the function handle_amf_info in the library /lib/sbi
A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted element is the function ac
A vulnerability has been found in Dolibarr ERP CRM 23.0.0/23.0.1/23.0.2. The affected element is an unknown function of
A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Sea
A vulnerability was detected in TaleLin lin-cms-spring-boot up to 0.2.1. This issue affects some unknown processing of t
Frequently Asked Questions
What does MEDIUM severity mean for CVEs?
CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit
How many medium severity CVEs exist?
There are 164,190 CVE records rated MEDIUM in our database. Of these, 101 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize medium severity vulnerabilities?
MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect MEDIUM Vulnerabilities
CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.
Get Started