A vulnerability was determined in SourceCodester Indian Invoicing System 1.0. Impacted is an unknown function of the com
A vulnerability was found in SourceCodester Indian Invoicing System 1.0. This issue affects some unknown processing of t
A vulnerability has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This vulnera
A flaw has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This affects an unkno
A vulnerability was found in Edimax BR-6675nD 1.12. The affected element is the function formWlanMP of the file /goform/
A flaw has been found in Edimax BR-6675nD 1.12. This issue affects the function formUSBStorage of the file /goform/formU
A weakness has been identified in Edimax BR-6675nD 1.12. This impacts the function formWpsStart of the file /goform/form
A security flaw has been discovered in Edimax BR-6675nD 1.12. This affects the function formHwSet of the file /goform/fo
A vulnerability was determined in JPress up to 1.0.3. The affected element is an unknown function of the file /ucenter/a
A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. Impacted is the function FileUploadUtils.upload of the
A security vulnerability has been detected in ItzCrazyKns Vane up to 1.12.1. Affected by this issue is some unknown func
A security flaw has been discovered in NousResearch hermes-agent 2026.4.23. Affected is the function _discover_dashboard
A vulnerability has been found in Ettercap up to 0.8.3. The affected element is the function FUNC_DECODER of the file sr
A vulnerability was detected in Edimax EW-7438RPn 1.12. This issue affects the function formEZCHNwlanSetup of the file /
A security vulnerability has been detected in Edimax EW-7438RPn 1.12. This vulnerability affects the function formConnec
A weakness has been identified in Edimax EW-7438RPn 1.12. This affects the function formAccept of the file /goform/formA
A vulnerability was identified in Edimax EW-7438RPn 1.28a. Affected by this vulnerability is the function formHwSet of t
A vulnerability was determined in postcss-selector-parser up to 6.1.2/7.1.2. Affected is the function toString of the fi
A vulnerability was detected in NousResearch hermes-agent up to 2026.4.16. The affected element is an unknown function o
A weakness has been identified in NousResearch hermes-agent up to 2026.4.23. This issue affects the function _make_run_e
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.16. This vulnerability affects the functio
A vulnerability was determined in calcom cal.diy up to 4.9.4. Affected by this issue is the function getServerSideProps
A vulnerability has been found in Edimax EW-7438RPn up to 1.31. Affected is the function formWizSurvey of the file /gofo
A weakness has been identified in Edimax EW-7438RPn up to 1.31. The affected element is the function formWpsStart of the
A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. Impacted is an un
Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user
userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through
Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by trickin
A weakness has been identified in QuantumNous new-api up to 0.12.1. The impacted element is the function SearchUserTopUp
A security flaw has been discovered in calcom cal.diy up to 4.9.4. The affected element is the function validateUrlForSS
A vulnerability was identified in calcom cal.diy up to 4.9.4. Impacted is an unknown function. The manipulation leads to
A vulnerability was determined in 546669204 vps-inventory-monitoring up to 98c00b370668c96ae75e91c15548d9ea113652d9. Thi
A vulnerability was found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGRe
A vulnerability has been found in omec-project amf up to 2.1.1. This affects an unknown part of the component NGSetupReq
A flaw has been found in omec-project amf up to 2.1.1. Affected by this issue is the function PDUSessionResourceModifyIn
A vulnerability was detected in omec-project amf up to 2.1.1. Affected by this vulnerability is an unknown functionality
A security vulnerability has been detected in Edimax BR-6428NS 1.10. Affected is the function formWlbasic of the file /g
A weakness has been identified in Edimax BR-6428NS 1.10. This impacts the function system of the file /goform/formWlanM
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthoriz
RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10 and 6.0.0 through 6.0.
libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a malformed HEIF sequence file
JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1
Devise is an authentication solution for Rails based on Warden. In versions 5.0.3 and below, when the Timeoutable module
TypeBot is a chatbot builder tool. In versions 3.16.0 and prior, the WhatsApp Cloud API webhook endpoint (POST /v1/works
TypeBot is a chatbot builder tool. In versions 3.15.2, the getLinkedTypebots API endpoint returns full bot definitions t
In Arm ArmNN through 2026-03-27, an integer overflow in TensorShape::GetNumElements() in armnn/Tensor.cpp allows a craft
TypeBot is a chatbot builder tool. In versions prior to 3.16.0, the Typebot viewer (packages/embeds/js) renders anchor t
HP ENVY 5000 series printers VERBASPP1N003.2237A.00 do not properly manage concurrent TCP connections to port 9100 (JetD
Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and e
Frequently Asked Questions
What does MEDIUM severity mean for CVEs?
CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit
How many medium severity CVEs exist?
There are 164,190 CVE records rated MEDIUM in our database. Of these, 101 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize medium severity vulnerabilities?
MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect MEDIUM Vulnerabilities
CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.
Get Started