In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limi
In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanen
In ensureBound of RemotePrintService.java, there is a possible way for a background app to keep foreground permissions d
In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input valid
Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or d
Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reac
A vulnerability was determined in code-projects Simple Shopping Cart 1.0. This issue affects some unknown processing of
A vulnerability was found in code-projects Simple Shopping Cart 1.0. This vulnerability affects unknown code of the file
A vulnerability was detected in code-projects Daily Time Recording System 4.5.0. The impacted element is an unknown func
A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an
FULLBACK Manager Pro provided by GS Yuasa International Ltd. registers two Windows services with unquoted file paths. A
A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other
A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This i
A vulnerability was determined in D-Link DCS-930L 1.15.04. This affects an unknown part of the file /setSystemAdmin of t
App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerabi
Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability
Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability
Permission control vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may
Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the servic
A vulnerability was found in Yottamaster DM2, DM3 and DM200 up to 1.2.23/1.9.12. Affected by this issue is some unknown
Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect avail
Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerabi
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulner
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulner
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulner
Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attack
Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attack
Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote at
A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the fi
A security vulnerability has been detected in ORICO CD3510 1.9.12. This affects an unknown function of the component Fil
A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown
A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file
A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file
A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown
A vulnerability has been found in TykoDev cherry-studio-TykoFork 0.1. This issue affects the function redirectToAuthoriz
A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of th
A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/
A vulnerability was detected in Verysync 微力同步 2.21.3. This affects an unknown function of the file /safebrowsing/clientr
A security vulnerability has been detected in Verysync 微力同步 up to 2.21.3. The impacted element is an unknown function of
A security flaw has been discovered in code-projects Employee Profile Management System 1.0. Impacted is an unknown func
A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unkno
A vulnerability was identified in Yonyou U8 Cloud 5.0/5.0sp/5.1/5.1sp. The affected element is an unknown function of th
A vulnerability was determined in SGAI Space1 NAS N1211DS up to 1.0.915. Impacted is the function RENAME_FILE/OPERATE_FI
A vulnerability was found in SGAI Space1 NAS N1211DS up to 1.0.915. This issue affects the function GET_FACTORY_INFO/GET
A vulnerability has been found in Sobey Media Convergence System 2.0/2.1. This vulnerability affects unknown code of the
A vulnerability was detected in UTT 进取 520W 1.7.7-180627. The affected element is the function strcpy of the file /gofor
A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Impacted is the function strcpy of the file /gof
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulne
A vulnerability has been found in fit2cloud Halo 2.21.10. Impacted is an unknown function. The manipulation leads to cro
The CSS3 Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode i
Frequently Asked Questions
What does MEDIUM severity mean for CVEs?
CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit
How many medium severity CVEs exist?
There are 164,190 CVE records rated MEDIUM in our database. Of these, 101 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize medium severity vulnerabilities?
MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect MEDIUM Vulnerabilities
CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.
Get Started