MEDIUM Severity CVEs

A vulnerability was found in thinkgem JeeSite up to 5.11.1. It has been rated as critical. Affected by this issue is the

A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been declared as

Missing authorization vulnerability in TCMAN's GIM v11. This allows an authenticated attacker to access any functionalit

A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been classified

A vulnerability has been found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified as c

A vulnerability classified as critical has been found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected i

A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been rated as problematic. This

A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between se

Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject H

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the functio

A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the

A vulnerability has been found in HumanSignal label-studio-ml-backend up to 9fb7f4aa186612806af2becfb621f6ed8d9fdbaf and

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unau

A vulnerability, which was classified as critical, has been found in llisoft MTA Maita Training System 4.5. This issue a

A vulnerability classified as critical was found in llisoft MTA Maita Training System 4.5. This vulnerability affects th

A vulnerability, which was classified as problematic, was found in yangshare 技术杨工 warehouseManager 仓库管理系统 1.0. This affe

A vulnerability, which was classified as critical, has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected

A vulnerability classified as problematic was found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected by this vulne

A vulnerability classified as problematic has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected is the f

A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been rated as problematic. This issue aff

A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been declared as problematic. This vulner

A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been classified as critical. This affects

A vulnerability has been found in qianfox FoxCMS 1.2.5 and classified as critical. Affected by this vulnerability is the

A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code

A vulnerability classified as critical has been found in defog-ai introspect up to 0.1.4. This affects the function exec

A vulnerability was found in docarray up to 0.40.1. It has been rated as critical. Affected by this issue is the functio

A vulnerability was found in WCMS up to 8.3.11. It has been declared as critical. Affected by this vulnerability is the

A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd. It has been classi

A vulnerability was found in Netcore NBR1005GPEV2, NBR200V2 and B6V2 up to 20250508 and classified as critical. This iss

A vulnerability has been found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2 and NBR200V2 up to 202505

A vulnerability, which was classified as critical, was found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR1

A vulnerability classified as critical has been found in Seeyon Zhiyuan OA Web Application System up to 8.1 SP2. This af

A vulnerability was found in Qualitor 8.20/8.24. It has been rated as critical. Affected by this issue is some unknown f

A vulnerability was found in DedeCMS 5.7.117. It has been classified as critical. Affected is an unknown function of the

A vulnerability classified as problematic has been found in Tmall Demo up to 20250505. Affected is an unknown function o

A vulnerability was found in Tmall Demo up to 20250505. It has been rated as problematic. This issue affects some unknow

A vulnerability was found in Tmall Demo up to 20250505. It has been declared as critical. This vulnerability affects the

A vulnerability was found in Tmall Demo up to 20250505. It has been classified as critical. This affects the function up

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Reflected Cross-Site S

The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Reads in all versions u

The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Sc

The 4stats plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.9.

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scri

A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2_220219 before 21.45.8.2.3_230

Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotel

A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows

PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabili

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

Schule is open-source school management system software. Prior to version 1.0.1, the file forgot_password.php (or equiva