UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the timeRangeName parameter of
A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing m
A vulnerability was determined in itsourcecode Construction Management System 1.0. The impacted element is an unknown fu
A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the function Trie.load/Trie.read/Trie._
A vulnerability was found in code-projects Online Application System for Admission 1.0. Impacted is an unknown function
A vulnerability has been found in code-projects Online Application System for Admission 1.0. This issue affects some unk
A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Inter
A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function
A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown func
A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /adm
A vulnerability was detected in HerikLyma CPPWebFramework up to 3.1. This issue affects some unknown processing. Perform
A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the fil
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue is some unk
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION
A flaw has been found in assafelovic gpt-researcher up to 3.4.3. The impacted element is an unknown function of the file
A weakness has been identified in assafelovic gpt-researcher up to 3.4.3. This issue affects some unknown processing of
A security flaw has been discovered in ProjectSend r2002. This vulnerability affects unknown code of the file upload.php
A vulnerability was identified in hcengineering Huly Platform 0.7.382. This affects an unknown part of the file server/f
A vulnerability was found in ChrisChinchilla Vale-MCP up to 0.1.0. Affected by this vulnerability is an unknown function
A vulnerability has been found in itsourcecode Construction Management System 1.0. Affected is an unknown function of th
A flaw has been found in Braffolk mcp-summarization-functions up to 0.1.5. This impacts an unknown function of the file
A vulnerability was detected in kalcaddle kodbox up to 1.64. This affects an unknown function of the component shareMake
A weakness has been identified in givanz Vvvebjs up to 2.0.5. The affected element is an unknown function of the file up
A security vulnerability has been detected in imprvhub mcp-browser-agent up to 0.8.0. This impacts the function CallTool
A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown
A vulnerability was identified in elgentos magento2-dev-mcp up to 1.0.2. The affected element is the function executeMag
A vulnerability was determined in Nor2-io heim-mcp up to 0.1.3. Impacted is the function registerTools of the file src/t
A vulnerability was found in Acrel Electrical Prepaid Cloud Platform 1.0. This issue affects some unknown processing of
A flaw has been found in griptape-ai griptape 0.19.4. This affects an unknown part of the file griptape\tools\computer\t
A vulnerability was detected in griptape-ai griptape 0.19.4. Affected by this issue is some unknown functionality of the
FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attacker
CMSsite 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administra
WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a
TaskInfo 8.2.0.280 contains a local buffer overflow vulnerability that allows attackers to crash the application by supp
SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows at
River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash t
Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial
LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending
ASPRunner Professional 6.0.766 contains a local buffer overflow vulnerability that allows attackers to cause a denial of
a-Mac Address Change 5.4 contains a local buffer overflow vulnerability that allows local attackers to crash the applica
AnyBurn 4.3 x86 contains a denial of service vulnerability that allows local attackers to crash the application by suppl
IP TOOLS 2.50 contains a local buffer overflow vulnerability in the SNMP Scanner component that allows local attackers t
A security vulnerability has been detected in griptape-ai griptape 0.19.4. Affected by this vulnerability is the functio
A weakness has been identified in premAI-io premsql up to 0.2.1. Affected is the function eval of the file premsql/agent
A vulnerability was identified in wbbeyourself MAC-SQL up to 31a9df5e0d520be4769be57a4b9022e5e34a14f4. This affects the
A vulnerability was determined in zhongyu09 openchatbi up to 0.2.1. The impacted element is an unknown function of the c
A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown par
A vulnerability was identified in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineCla
A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file
Frequently Asked Questions
What does MEDIUM severity mean for CVEs?
CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit
How many medium severity CVEs exist?
There are 164,190 CVE records rated MEDIUM in our database. Of these, 101 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize medium severity vulnerabilities?
MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect MEDIUM Vulnerabilities
CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.
Get Started