MEDIUM Severity CVEs

SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without havi

Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an attacker with access

SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'ap

SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any us

SAP S/4HANA Manage Central Purchase Contract does not perform necessary authorization checks for an authenticated user.

Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker c

In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM f

CyberData 011209 Intercom could allow an unauthenticated user to gather sensitive information through blind SQL injectio

A vulnerability, which was classified as problematic, was found in Tenda AC9 15.03.02.13. This affects an unknown part.

A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected by this

A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected is

A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the functio

A vulnerability was found in tarojs taro up to 4.1.1. It has been declared as problematic. This vulnerability affects un

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, in the HAX site

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, an authenticate

A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the

A vulnerability was found in Metabase 54.10. It has been classified as problematic. This affects the function parseDataU

A vulnerability, which was classified as problematic, has been found in RocketChat up to 7.6.1. This issue affects the f

A vulnerability classified as problematic was found in Unitech pm2 up to 6.0.6. This vulnerability affects unknown code

A vulnerability classified as problematic has been found in actions toolkit 0.5.0. This affects the function globEscape

A vulnerability was found in jsnjfz WebStack-Guns 1.0. It has been declared as problematic. Affected by this vulnerabili

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to

A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript

Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my pro

An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Bio

A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b a

Missing Authorization vulnerability in Crypto Cloud CryptoCloud - Crypto Payment Gateway cryptocloud-crypto-payment-gate

Missing Authorization vulnerability in relentlo StyleAI relentlosoftware allows Accessing Functionality Not Properly Con

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in click5 History Log

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in info@welcart Welcart e-C

Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project.

Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module. An authentic

A vulnerability has been found in Konica Minolta bizhub up to 20250202 and classified as problematic. This vulnerability

A vulnerability was found in code-projects Chat System up to 1.0 and classified as critical. This issue affects some unk

A vulnerability has been found in Whistle 2.9.98 and classified as problematic. This vulnerability affects unknown code

A vulnerability, which was classified as problematic, has been found in Fengoffice Feng Office 3.2.2.1. Affected by this

FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows an

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to modify t

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an attacker, with low privilege leve

A vulnerability classified as problematic was found in Lucky LM-520-SC, LM-520-FSC and LM-520-FSC-SAM up to 20250321. Af

A vulnerability was found in Redash up to 10.1.0/25.1.0. It has been rated as problematic. This issue affects the functi

A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81. Affected by this issue is some unknown func

Zohocorp ManageEngine OpManager, NetFlow Analyzer, Network Configuration Manager, Firewall Analyzer and OpUtils versions

A vulnerability was found in eGauge EG3000 Energy Monitor 3.6.3. It has been classified as problematic. This affects an

A vulnerability was found in Papendorf SOL Connect Center 3.3.0.0 and classified as problematic. Affected by this issue

A Reflected Cross-Site Scripting (XSS) vulnerability has been found in Bagisto v2.0.0. This vulnerability allows an atta

The Broadstreet WordPress plugin before 1.51.8 does not sanitise and escape a parameter before outputting it back in the

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client

There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a c

The Newsletter WordPress plugin before 8.85 does not sanitise and escape some of its Form settings, which could allow h