Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

MEDIUM Severity CVEs

CVSS 4.0 – 6.9

CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit

164,190
Total
101
Known Exploited
Showing 88,803 of 164,190 total · Page 565/1777
6.1
CVE-2025-30755

OpenGrok 1.14.1 has a reflected Cross-Site Scripting (XSS) issue when producing the cross reference page. This happens t

6.3
CVE-2025-10689

A vulnerability was identified in D-Link DIR-645 105B01. This issue affects the function soapcgi_main of the file /soap.

6.5
CVE-2025-47906

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain st

6.7
CVE-2025-26503

A crafted system call argument can cause memory corruption.

4.3
CVE-2025-36146

IBM Lakehouse (watsonx.data 2.2) could allow an authenticated user to obtain sensitive server component version informat

4.7
CVE-2025-36143

IBM Lakehouse (watsonx.data 2.2) could allow an authenticated privileged user to execute arbitrary commands on the syste

5.5
CVE-2025-36139

IBM Lakehouse (watsonx.data 2.2) is vulnerable to stored cross-site scripting. This vulnerability allows a privileged us

4.3
CVE-2025-10676

A weakness has been identified in fuyang_lipengjun platform 1.0. Affected is the function BrandController of the file /b

4.3
CVE-2025-10675

A security flaw has been discovered in fuyang_lipengjun platform 1.0. This impacts the function AttributeController of t

4.3
CVE-2025-10674

A vulnerability was identified in fuyang_lipengjun platform 1.0. This affects the function AttributeCategoryController o

4.7
CVE-2023-53447

In the Linux kernel, the following vulnerability has been resolved: f2fs: don't reset unchangable mount option in f2fs_

5.5
CVE-2023-53444

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix bulk_move corruption when adding a ent

5.5
CVE-2023-53443

In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Use pm_runtime_resume_and_get() to pr

5.5
CVE-2023-53442

In the Linux kernel, the following vulnerability has been resolved: ice: Block switchdev mode when ADQ is active and vi

5.5
CVE-2023-53441

In the Linux kernel, the following vulnerability has been resolved: bpf: cpumap: Fix memory leak in cpu_map_update_elem

5.5
CVE-2023-53439

In the Linux kernel, the following vulnerability has been resolved: net: skb_partial_csum_set() fix against transport h

5.5
CVE-2023-53438

In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Pois

5.5
CVE-2023-53437

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Handle cameras with invalid descri

5.5
CVE-2023-53436

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible memory leak if device_add(

5.5
CVE-2023-53435

In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling pa

5.5
CVE-2023-53434

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_dsp_rproc: Add custom memory copy i

5.5
CVE-2023-53433

In the Linux kernel, the following vulnerability has been resolved: net: add vlan_get_protocol_and_depth() helper Befo

5.5
CVE-2023-53430

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: dma: fix memory leak running mt76_dma_t

5.5
CVE-2023-53428

In the Linux kernel, the following vulnerability has been resolved: powercap: arm_scmi: Remove recursion while parsing

5.5
CVE-2023-53425

In the Linux kernel, the following vulnerability has been resolved: media: platform: mediatek: vpu: fix NULL ptr derefe

5.5
CVE-2023-53424

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: fix of_iomap memory leak Smatch rep

5.5
CVE-2023-53423

In the Linux kernel, the following vulnerability has been resolved: objtool: Fix memory leak in create_static_call_sect

5.5
CVE-2023-53422

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fw: fix memory leak in debugfs Fix

5.5
CVE-2023-53421

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Reinit blkg_iostat_set after clearing i

5.5
CVE-2023-53419

In the Linux kernel, the following vulnerability has been resolved: rcu: Protect rcu_print_task_exp_stall() ->exp_tasks

5.5
CVE-2022-50418

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: mhi: fix potential memory leak in ath

5.5
CVE-2022-50416

In the Linux kernel, the following vulnerability has been resolved: irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_

5.5
CVE-2022-50415

In the Linux kernel, the following vulnerability has been resolved: parisc: led: Fix potential null-ptr-deref in start_

5.5
CVE-2022-50414

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoe_

5.5
CVE-2022-50409

In the Linux kernel, the following vulnerability has been resolved: net: If sock is dead don't access sock's sk_wq in s

5.5
CVE-2022-50407

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - increase the memory of local

5.5
CVE-2022-50404

In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: release buffer when fbcon_do_set_font

5.5
CVE-2022-50402

In the Linux kernel, the following vulnerability has been resolved: drivers/md/md-bitmap: check the return value of md_

6.1
CVE-2025-59417

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.129.4, there is a a cross-site sc

4.3
CVE-2025-59040

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Backlog item representa

6.1
CVE-2025-57452

In realme BackupRestore app v15.1.12_2810c08_250314, improper URI scheme handling in com.coloros.pc.PcToolMainActivity a

6.5
CVE-2025-55911

An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php an

6.3
CVE-2025-10669

A vulnerability was detected in Airsonic-Advanced up to 10.6.0. This vulnerability affects unknown code of the component

5.5
CVE-2023-53418

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: lpc32xx_udc: fix memory leak with usin

5.5
CVE-2023-53417

In the Linux kernel, the following vulnerability has been resolved: USB: sl811: fix memory leak with using debugfs_look

5.5
CVE-2023-53416

In the Linux kernel, the following vulnerability has been resolved: USB: isp1362: fix memory leak with using debugfs_lo

5.5
CVE-2023-53415

In the Linux kernel, the following vulnerability has been resolved: USB: dwc3: fix memory leak with using debugfs_looku

5.5
CVE-2023-53414

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix memory leak with using debugfs_look

5.5
CVE-2023-53413

In the Linux kernel, the following vulnerability has been resolved: USB: isp116x: fix memory leak with using debugfs_lo

5.5
CVE-2023-53412

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: bcm63xx_udc: fix memory leak with usin

Frequently Asked Questions

What does MEDIUM severity mean for CVEs?

CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit

How many medium severity CVEs exist?

There are 164,190 CVE records rated MEDIUM in our database. Of these, 101 are listed in CISA's Known Exploited Vulnerabilities catalog.

How should I prioritize medium severity vulnerabilities?

MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.

Detect MEDIUM Vulnerabilities

CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.

Get Started