MEDIUM Severity CVEs

In the Linux kernel, the following vulnerability has been resolved: ipv4: nexthop: allocate skb dynamically in rtm_get_

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Ta

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rescue Themes Resc

Missing Authorization vulnerability in Navneil Naicker ACF Galerie 4 allows Exploiting Incorrectly Configured Access Con

The HT Mega Addons for Elementor WordPress plugin before 3.0.7 contains an unauthenticated AJAX action returning some P

EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the in

Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attack

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext

Froxlor is open source server administration software. Prior to version 2.3.6, in `Domains.add()`, the `adminid` paramet

Froxlor is open source server administration software. Prior to version 2.3.6, in `EmailSender::add()`, the domain owner

CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information stored in the database may be

The WP Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpsl_address' post meta

Successful exploitation of the stored cross-site scripting (XSS) vulnerability could allow an attacker to execute arbitr

The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-S

OpenLearn is open-source educational forum software. Prior to commit 844b2a40a69d0c4911580fe501923f0b391313ab, when `saf

LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to version 0.5.19 of the JavaScri

The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’

A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function math_equal of the file prime_math

A vulnerability was determined in ericc-ch copilot-api up to 0.7.0. This impacts an unknown function of the file /token

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1

IBM Guardium Data Protection 12.1 is vulnerable to cross-site scripting. This vulnerability allows an administrative use

IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting. This vulnerability allows an administrat

IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker

IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 enables privilege escalation, allowing unauthori

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a Bypass Business Logic vulnerability in the access m

IBM Security Verify Directory (Container) 10.0.0 through 10.0.0.3 IBM Security Verify Directory could be vulnerable to m

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior

Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the Sq

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior

An authenticated attacker can persist crafted values in multiple field types and trigger client-side script execution wh

nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Prior to version 1.3.0,

http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It

An authenticated attacker can store a crafted tag value in _user_tags and trigger JavaScript execution when a victim ope

nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. Prior to version 1.3.0, `HistoryStor

nimiq-account contains account primitives to be used in Nimiq's Rust implementation. Prior to version 1.3.0, `VestingCon

nimiq-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `MessageCodec::read_request` and

Beghelli Sicuro24 SicuroWeb does not enforce a Content Security Policy, allowing unrestricted loading of external JavaSc

Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthentica

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.9.6, 18.10 before 18.10.4, and

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that could have allowed

A logic error in the cut utility of uutils coreutils causes the program to incorrectly interpret the literal two-byte st

A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the chcon utility of uutils coreutils during recursive o

A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the split utility of uutils coreutils. The program attem

A logic error in the ln utility of uutils coreutils allows the utility to dereference a symbolic link target even when t

The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's rea

An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as a request to send th