A security vulnerability has been detected in Rejseplanen App up to 8.2.2. Affected is an unknown function of the file A
A weakness has been identified in UAB Paytend App up to 2.1.9 on Android. This impacts an unknown function of the file A
A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src
A vulnerability was detected in code-projects Simple Grading System 1.0. This affects an unknown part of the file /delet
A security vulnerability has been detected in code-projects Simple Grading System 1.0. Affected by this issue is some un
A weakness has been identified in code-projects Simple Grading System 1.0. Affected by this vulnerability is an unknown
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can the
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can the
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a re
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a re
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r
An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote
A security flaw has been discovered in code-projects Simple Grading System 1.0. Affected is an unknown function of the f
A vulnerability was identified in code-projects Simple Grading System 1.0. This impacts an unknown function of the file
SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module. An authenti
SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality. Th
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If a remo
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If a remote attacker gains a user
A security vulnerability has been detected in PHPGurukul Directory Management System 2.0. This vulnerability affects unk
Gitpod is a developer platform for cloud development environments. In versions before main-gha.33628 for both Gitpod Cla
Opencast is a free, open-source platform to support the management of educational audio and video content. In version 18
Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Bu
Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Com
A security flaw has been discovered in AiondaDotCom mcp-ssh up to 1.0.3. Affected by this issue is some unknown function
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metada
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metada
A vulnerability was found in shafhasan chatbox up to 156a39cde62f78532c3265a70eda12c70907e56f. This impacts an unknown f
Frequently Asked Questions
What does MEDIUM severity mean for CVEs?
CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit
How many medium severity CVEs exist?
There are 164,190 CVE records rated MEDIUM in our database. Of these, 101 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize medium severity vulnerabilities?
MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect MEDIUM Vulnerabilities
CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.
Get Started