MEDIUM Severity CVEs

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote a

Improper certificate validation vulnerability exists in 'デジラアプリ' App for iOS prior to ver.80.10.00. If this vulnerabilit

A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the function create of the f

A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the

A security flaw has been discovered in SourceCodester Online Magazine Management System 1.0. This affects an unknown par

A vulnerability was identified in SourceCodester Online Magazine Management System 1.0. Affected by this issue is some u

A vulnerability was found in lsfusion platform up to 6.1. Affected is the function DownloadFileRequestHandler of the fil

A vulnerability has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file

A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufac

A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function

A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. This issue affects some unk

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unkno

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of

A flaw has been found in WeiYe-Jing datax-web up to 2.1.2. Affected is an unknown function. Executing manipulation can l

A vulnerability was detected in WeiYe-Jing datax-web up to 2.1.2. This impacts the function remove/update/pause/start/tr

A security vulnerability has been detected in Jiusi OA up to 20251102. This affects an unknown function of the file /Off

A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impa

A vulnerability was determined in code-projects Student Information System 2.0. The affected element is an unknown funct

A vulnerability was found in code-projects Student Information System 2.0. Impacted is an unknown function of the file /

A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. A

A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functio

A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function o

A weakness has been identified in Intelbras UnniTI 24.07.11. The affected element is an unknown function of the file /xm

A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. This impacts an unknown func

A weakness has been identified in bestfeng oa_git_free up to 9.5. This affects the function updateWriteBack of the file

A security flaw has been discovered in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. The im

A vulnerability was determined in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknow

A vulnerability was found in code-projects Email Logging Interface 2.0. Affected is an unknown function of the file sign

A vulnerability has been found in DouPHP up to 1.8 Release 20251022. This impacts an unknown function of the file upload

An issue has been discovered in GitLab CE/EE affecting all versions from 17.6 before 18.3.6, 18.4 before 18.4.4, and 1

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 1

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.3.6, 18.4 before 18.4.4, and

An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 b

The Contest Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 28.

The Project Management, Team Collaboration, Kanban Board, Gantt Charts, Task Manager and More – WP Project Manager plugi

The All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to

The Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insu

The Qi Blocks plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `resize

The vulnerability, if exploited, could allow an authenticated miscreant (with privilege of "aaConfigTools") to tamper w

The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Bri

The Brightpick Internal Logic Control web interface is accessible without requiring user authentication. An unauthorized

Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user manageme

A security vulnerability has been detected in Intelbras ICIP 2.0.20. Affected is an unknown function of the file /xml/si

An authenticated SQL injection vulnerability exists in Cloudlog 2.7.5 and earlier. The vucc_details_ajax function in app

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info() function of bin_n

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_d

A security flaw has been discovered in Bdtask/CodeCanyon News365 up to 7.0.3. This affects an unknown function of the fi

A heap corruption vulnerability exists in the Advantech TP-3250 printer driver's DrvUI_x64_ADVANTECH.dll (v0.3.9200.2078

A vulnerability has been found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20