MEDIUM Severity CVEs

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Editio

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected

A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown functi

A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under ce

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Inj

A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). During multi-threaded

A stored cross-site scripting (XSS) in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbitr

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function o

Mintty is a terminal emulator for Cygwin, MSYS, and WSL. In versions 2.3.6 through 3.7.4, several escape sequences can c

A Cross-Site Request Forgery (CSRF) in xxl-api v1.3.0 allows attackers to arbitrarily add users to the management module

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to en

Cross Site Scripting (XSS) vulnerability in CrushFTP 11.3.6_48. The Web-Based Server has a feature where users can share

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields.

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g. through server-side request forgery

Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smp_processor_id() in preemptible

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable t

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an att

Reflected cross-site scripting vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. Users

Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by t

An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash t

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an att

The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sen

The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote

The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administr

The Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images plugin for WordPress is vulnerable to unaut

The MembershipWorks – Membership, Events & Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

The Asgaros Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to

The Wishlist and Save for later for Woocommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference i

A health check port on Zscaler Client Connector on Windows, versions 4.6 < 4.6.0.216 and 4.7 < 4.7.0.47, which under sp

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD0

A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application i

A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files w

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory

Format Plugins versions 1.1.1 and earlier are affected by a Use After Free vulnerability that could lead to memory expos

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory

Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to by

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extens

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorize

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose in

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose in

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an unauthorize

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a n

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an