MEDIUM Severity CVEs

The Chained Quiz plugin for WordPress is vulnerable to Insecure Direct Object Reference in version 1.3.4 and below via t

A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C

A vulnerability was determined in D-Link DIR-852 1.00CN B09. This issue affects the function ssdpcgi_main of the file ht

A vulnerability was found in D-Link DIR-852 1.00CN B09. This vulnerability affects unknown code of the file /htdocs/cgib

A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the fi

A flaw has been found in SourceCodester Online Exam Form Submission 1.0. Affected by this issue is some unknown function

NVIDIA HGX & DGX GB200, GB300, B300 contain a vulnerability in the HGX Management Controller (HMC) that may allow a mal

A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unk

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause a denial of

A flaw has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of th

Frappe Learning is a learning system that helps users structure their content. In versions 2.34.1 and below, there is a

A vulnerability was detected in sequa-ai sequa-mcp up to 1.0.13. This affects the function redirectToAuthorization of th

A security vulnerability has been detected in itsourcecode Online Clinic Management System 1.0. Affected by this issue i

A weakness has been identified in SourceCodester Online Polling System 1.0. Affected by this vulnerability is an unknown

A security flaw has been discovered in itsourcecode E-Commerce Website 1.0. Affected is an unknown function of the file

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the DragonFly2 us

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the first return

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the access contro

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The Manager disab

Dragonfly is an open source P2P-based file distribution and image acceleration system. Versions prior to 2.1.0 contain a

A vulnerability in the web-based management interface of network access control services could allow an unauthenticated

A vulnerability was identified in itsourcecode E-Commerce Website 1.0. This impacts an unknown function of the file /adm

A vulnerability was determined in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0 on COVID. This a

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPReque

A vulnerability has been found in itsourcecode Student Information System 1.0. The affected element is an unknown functi

A vulnerability was detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file

The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. Session-recording tt

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.4.1 and earl

A security vulnerability has been detected in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the fil

A weakness has been identified in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file

A security flaw has been discovered in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the fi

CISA Thorium uses '.unwrap()' to handle errors related to account verification email messages. An unauthenticated remote

CISA Thorium accepts a stream split size of zero then divides by this value. A remote, authenticated attacker could caus

CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. An unauthenticated attacker with acces

CISA Thorium does not properly invalidate previously used tokens when resetting passwords. An attacker that possesses a

CISA Thorium does not rate limit requests to send account verification email messages. A remote unauthenticated attacker

CISA Thorium does not escape user controlled strings used in LDAP queries. An authenticated remote attacker can modify L

CISA Thorium does not adequately validate the paths of downloaded files via 'download_ephemeral' and 'download_children'

A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknow

Server-Side Request Forgery (SSRF) vulnerability in Ghost allows an attacker to access internal resources.This issue aff

WonderCMS 3.5.0 is vulnerable to Server-Side Request Forgery (SSRF) in the custom module installation functionality. An

A Cross-Site Request Forgery (CSRF) vulnerability exists in the ResetPasswordRequest operation of Zimbra Collaboration (

A vulnerability has been found in SourceCodester Online Student File Management System 1.0. Affected by this issue is so

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race issue between cpu buffer write an

In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: fix mem leak in capture user mapp

In the Linux kernel, the following vulnerability has been resolved: block: be a bit more careful in checking for NULL b

In the Linux kernel, the following vulnerability has been resolved: ip6mr: Fix skb_under_panic in ip6mr_cache_report()

In the Linux kernel, the following vulnerability has been resolved: regulator: da9063: better fix null deref with parti

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl