MEDIUM Severity CVEs

The Homerunner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.

The The Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘clientId’ parameter in all

The Amazon Products to WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a miss

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vul

The Post Rating and Review plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class’ parameter i

The WP-PhotoNav plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's photonav shortcode in

The Responsive Food and Drink Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's di

The Tournament Bracket Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bra

The WP SoundSystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpsstm-track short

The VG WORT METIS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch

The Image Editor by Pixo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘download’ parameter

The GC Social Wall plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gc_social_wall' s

The TimeZoneCalculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'timezonecalcu

The Event RSVP and Simple Event Management Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

The e.nigma buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcod

The WP Masonry & Infinite Scroll plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wmi

The Post Carousel Slider for Elementor plugin for WordPress is vulnerable to improper authorization due to a missing cap

A vulnerability was found in code-projects Car Rental System 1.0 and classified as critical. Affected by this issue is s

A vulnerability, which was classified as problematic, was found in CodeAstro Patient Record Management System 1.0. Affec

A vulnerability classified as critical has been found in TOTOLINK CA300-PoE 6.2c.884. This affects the function QuickSet

A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been rated as critical. Affected by this issue is the f

A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been declared as critical. Affected by this vulnerabili

A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been classified as critical. Affected is the function S

ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attac

Pioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity Vulnerability. This vulnerability a

Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability. This vulnera

Autel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerability. This

Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability. This vulnerability

Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability. This vulnerabili

Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability. Thi

Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Author

Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arb

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certifi

Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.46, Kanboard is vul

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a

Hexagon HxGN OnCall Dispatch Advantage (Web) v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch Advantage (Mobile) v10.2

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat

An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, __

A vulnerability was found in itsourcecode Employee Management System up to 1.0. It has been classified as critical. This

A vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by thi

A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected b

CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.2.0 through 2.39.0 ha

A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affecte

A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0. Th

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. This affects a

URL redirection to an untrusted site ('Open Redirect') in Kibana can lead to sending a user to an arbitrary site and ser

A vulnerability was found in coldfunction qCUDA up to db0085400c2f2011eed46fbc04fdc0873141688e. It has been rated as pro

A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorre