Open redirect vulnerability in page administration in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versi
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker bloc
Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externall
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This v
IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This v
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker bloc
Error Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/ja
A vulnerability has been found in dulaiduwang003 TIME-SEA-PLUS up to fb299162f18498dd9cf17da906886d80a077d53b. This affe
Improper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred (including exceeding limits)
Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information"
IDOR vulnerability in Educare ERP 1.0 (2025-04-22) allows unauthorized access to sensitive data via manipulated object r
An XSS issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not properly sanitize
A vulnerability was detected in code-projects Simple Food Ordering System 1.0. The affected element is an unknown functi
A weakness has been identified in code-projects Simple Food Ordering System 1.0. This issue affects some unknown process
An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service fails to authenticate requests
An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not implement CSRF protec
An issue was discovered in BAE SOCET GXP before 4.6.0.3. It permits external entities in certain XML-based files. An att
A security flaw has been discovered in code-projects Simple Food Ordering System 1.0. This vulnerability affects unknown
A vulnerability was identified in code-projects Simple Food Ordering System 1.0. This affects an unknown part of the fil
A vulnerability was detected in atjiu pybbs up to 6.0.0. This affects an unknown function of the file UserApiController.
A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. The impacted element is the function sub_4174B0
A weakness has been identified in D-Link DAP-2695 2.00RC13. The affected element is the function sub_40C6B8 of the compo
Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application lea
A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /d
A vulnerability was found in ashymuzuro Full-Ecommece-Website and Muzuro Ecommerce System up to 1.1.0. This affects an u
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon In
Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' da
IBM OpenPages 9.1 and 9.0 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML
Honeywell S35 Series Cameras contains an authorization bypass Vulnerability through User controller key. An attacker cou
A vulnerability has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall Syste
A flaw has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Af
A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4. Affected is an unknown function of the file
A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 2
Cross-site scripting (XSS) vulnerability in the SAML Authentication module in OpenVPN Access Server version 2.14.0 throu
A security flaw has been discovered in code-projects Client Details System 1.0. The impacted element is an unknown funct
Cross-Site Scripting (XSS) vulnerability reflected in SuiteCRM v7.14.1. This vulnerability allows an attacker to execute
A vulnerability was detected in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. Affected by this issue is som
A vulnerability was determined in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. The impacted element is an
A vulnerability has been found in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. Impacted is an unknown func
An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.
An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates an
An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing pe
A flaw has been found in abhicodebox ModernShop 20250922. This issue affects some unknown processing of the file /search
A vulnerability was detected in Zytec Dalian Zhuoyun Technology Central Authentication Service up to 20251009. This vuln
A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected is an unknown function of the
A vulnerability was determined in code-projects Online Event Judging System 1.0. This impacts an unknown function of the
There is a Denial of Service（DoS）vulnerability in the ZTE MC889A Pro product. Due to insufficient validation of the inpu
A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/ac
A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code
Frequently Asked Questions
What does MEDIUM severity mean for CVEs?
CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit
How many medium severity CVEs exist?
There are 164,190 CVE records rated MEDIUM in our database. Of these, 101 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize medium severity vulnerabilities?
MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect MEDIUM Vulnerabilities
CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.
Get Started