MEDIUM Severity CVEs

A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park Ticketing Management Syst

A vulnerability, which was classified as critical, was found in Netgear JWNR2000v2 1.0.0.11. This affects the function s

A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the profile.php file of PHPGurukul Timetable Gene

A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticat

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticat

A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privi

A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated at

A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated

A vulnerability in the login functionality of the web application of ctrlX OS allows a remote unauthenticated attacker t

A vulnerability in the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to induce a D

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. This issue a

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been classified as critical. This affec

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this is

A vulnerability in the users configuration file of ctrlX OS may allow a remote authenticated (low-privileged) attacker t

A vulnerability in the web application of ctrlX OS allows a remote unauthenticated attacker to conduct various attacks a

A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by th

The tagDiv Opt-In Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘subscriptionCouponId’

The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to unauthorize

The SureForms WordPress plugin before 1.4.4 does not have proper authorisation check when updating its settings via the

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.8.0 and p

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the `/?BazaR` endpoint and `idformulaire` parameter are

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, an attacker can use a reflected cross-site scripting at

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions

A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. Affected by this

A vulnerability, which was classified as problematic, has been found in Wangshen SecGate 3600 2400. This issue affects s

A vulnerability classified as critical was found in code-projects School Billing System 1.0. This vulnerability affects

A vulnerability classified as critical has been found in LB-LINK BL-AC3600 up to 1.0.22. This affects the function easy_

A vulnerability was found in VMSMan up to 20250416. It has been rated as problematic. Affected by this issue is some unk

A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. This issue affects so

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS allo

A vulnerability, which was classified as critical, has been found in code-projects Product Management System 1.0. Affect

A vulnerability classified as critical was found in code-projects Simple Movie Ticket Booking System 1.0. Affected by th

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, a stored cross-site scripting (XSS) vulnerability was d

Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScrip

Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScrip

CWE-798: Use of Hard-coded Credentials

IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, and 9.0.0.1 is vulnerable to cross-site scripting. This v

A vulnerability classified as critical has been found in ScriptAndTools Online-Travling-System 1.0. Affected is an unkno

Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption a

A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat.

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into us

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitr

A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null c

A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension

Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user int

Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vul

A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been classified as critical. This affects

A vulnerability was found in code-projects Student Information Management System 1.0 and classified as critical. Affecte

A vulnerability has been found in code-projects Theater Seat Booking System 1.0 and classified as critical. Affected by