MEDIUM Severity CVEs

Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability m

Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability

Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerabil

Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may a

Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerabili

Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect

A vulnerability was detected in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function

A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is t

A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file

A security flaw has been discovered in Webkul Bagisto up to 2.4.4. This issue affects some unknown processing of the fil

A vulnerability was identified in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin

A vulnerability was found in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the fil

A vulnerability has been found in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality

A vulnerability was detected in Alaev SEO Tools Extension up to 1.0.10 on Chrome. This impacts the function addDiv of th

A security vulnerability has been detected in SourceCodester Best Employee Management System 1.0. This affects an unknow

The ShopSmart Loyalty for WooCommerce WordPress plugin through 1.0.0 does not perform any authorization or ownership che

The WooMS WordPress plugin through 9.14 does not validate a user-supplied URL before using it in a server-side request a

A weakness has been identified in Adblock for Youtube Extension up to 7.2.1 on Chrome. The impacted element is the funct

A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function get_images of the

A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted eleme

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub_44A968 of the file /

A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulnerability affects the

A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown f

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the fi

A flaw has been found in LB-Link WR1210M 1.0.3. This impacts the function main of the file /www/cgi-bin/backup.cgi of th

A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter:

A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the func

A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp:

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compre

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown pro

A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run of the file jij_mcp/

A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the function executeCode of

A vulnerability was identified in graphlit graphlit-mcp-server 1.0.1. This affects the function fetch of the file src/to

A vulnerability has been found in gomarble-ai facebook-ads-mcp-server 0.1.0. The impacted element is the function fetch_

OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache directory during initialization. Attack

Scriban before 7.0.0 (affected versions <= 6.6.0) contains a denial-of-service vulnerability in which the LimitToString

Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass exis

stoatchat before 0.15.0 contains a permission bypass vulnerability in the message_fetch route that checks only ViewChann

stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthe

Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smart_r

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt_bb_shortcod

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypa

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forg

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversa

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure D

The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'or

The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id' parameter in all versions u

A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the f

The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, all

The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back in