Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

MEDIUM Severity CVEs

CVSS 4.0 – 6.9

CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit

164,190
Total
101
Known Exploited
Showing 88,803 of 164,190 total · Page 655/1777
6.3
CVE-2025-6909

A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by

6.3
CVE-2025-6908

A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected

6.7
CVE-2025-4407

Insufficient Session Expiration vulnerability in ABB Lite Panel Pro.This issue affects Lite Panel Pro: through 1.0.1.

6.1
CVE-2025-41439

A reflected cross-site scripting vulnerability via a specific parameter exists in SLNX Help Documentation of RICOH Strea

6.3
CVE-2025-6900

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affect

6.3
CVE-2025-6899

A vulnerability, which was classified as critical, was found in D-Link DI-7300G+ and DI-8200G 17.12.20A1/19.12.25A1. Thi

6.1
CVE-2025-40734

Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker

6.1
CVE-2025-40733

Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker

6.3
CVE-2025-6898

A vulnerability, which was classified as critical, has been found in D-Link DI-7300G+ 19.12.25A1. Affected by this issue

5.5
CVE-2025-6897

A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an un

6.3
CVE-2025-6896

A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an unknown function of

6.3
CVE-2025-6890

A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been rated as critical. This issue affects

4.3
CVE-2025-5730

The Contact Form Plugin WordPress plugin before 1.1.29 does not sanitise and escape some of its settings, which could al

6.3
CVE-2025-3745

The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links

6.3
CVE-2025-6884

A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue af

6.3
CVE-2025-6883

A vulnerability classified as critical was found in code-projects Staff Audit System 1.0. This vulnerability affects unk

6.3
CVE-2025-6880

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an

6.3
CVE-2025-6879

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue

6.3
CVE-2025-6878

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vul

6.3
CVE-2025-6877

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This a

6.3
CVE-2025-6876

A vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by thi

6.3
CVE-2025-6875

A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected b

6.3
CVE-2025-6874

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affecte

4.7
CVE-2025-6873

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Company Website 1.0. This iss

4.7
CVE-2025-6872

A vulnerability classified as critical was found in SourceCodester Simple Company Website 1.0. This vulnerability affect

4.7
CVE-2025-6870

A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this

4.7
CVE-2025-6869

A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been declared as critical. Affected by th

6.8
CVE-2025-24292

A misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate to Enterprise WiFi or VP

4.7
CVE-2025-6868

A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been classified as critical. Affected is

4.7
CVE-2025-6867

A vulnerability was found in SourceCodester Simple Company Website 1.0 and classified as critical. This issue affects so

4.3
CVE-2025-6866

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects

4.3
CVE-2025-6865

A vulnerability, which was classified as problematic, was found in DaiCuo up to 1.3.13. This affects an unknown part of

4.3
CVE-2025-6864

A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2. Affected by this issue is som

6.3
CVE-2025-6862

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an

6.3
CVE-2025-6861

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue

6.3
CVE-2025-6860

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vul

6.3
CVE-2025-6859

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This a

6.1
CVE-2024-24915

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump

5.5
CVE-2025-6855

A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This

4.3
CVE-2025-6854

A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1. This vulnerability

6.3
CVE-2025-6853

A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the

6.3
CVE-2025-6850

A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerabil

6.3
CVE-2025-6848

A vulnerability, which was classified as critical, has been found in code-projects Simple Forum 1.0. This issue affects

6.3
CVE-2025-6847

A vulnerability classified as critical was found in code-projects Simple Forum 1.0. This vulnerability affects unknown c

6.4
CVE-2025-6462

The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

4.7
CVE-2025-6842

A vulnerability was found in code-projects Product Inventory System 1.0 and classified as critical. This issue affects s

4.7
CVE-2025-6841

A vulnerability has been found in code-projects Product Inventory System 1.0 and classified as critical. This vulnerabil

6.3
CVE-2025-6839

A vulnerability, which was classified as critical, has been found in Conjure Position Department Service Quality Evaluat

6.3
CVE-2025-6837

A vulnerability classified as critical was found in code-projects Library System 1.0. Affected by this vulnerability is

6.3
CVE-2025-6829

A vulnerability was found in aaluoxiang oa_system up to c3a08168c144f27256a90838492c713f55f1b207 and classified as criti

Frequently Asked Questions

What does MEDIUM severity mean for CVEs?

CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit

How many medium severity CVEs exist?

There are 164,190 CVE records rated MEDIUM in our database. Of these, 101 are listed in CISA's Known Exploited Vulnerabilities catalog.

How should I prioritize medium severity vulnerabilities?

MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.

Detect MEDIUM Vulnerabilities

CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.

Get Started