MEDIUM Severity CVEs

Ververica Platform 2.14.0 contain an Reflected XSS vulnerability via a namespaces/default/formats URI.

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unk

A vulnerability was found in Apereo CAS 5.2.6. It has been declared as problematic. This vulnerability affects unknown c

quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading to a heap-based buffer

quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overfl

A vulnerability was found in Apereo CAS 5.2.6 and classified as critical. Affected by this issue is the function saveSer

A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical. Affected by this

A vulnerability, which was classified as problematic, was found in nortikin Sverchok 1.3.0. Affected is the function SvS

A vulnerability, which was classified as problematic, has been found in wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstatio

Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper

A vulnerability classified as problematic was found in wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System 1.0. Thi

A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. This affects an unknown part of the fi

A vulnerability was found in dazhouda lecms 3.0.3. It has been rated as problematic. Affected by this issue is some unkn

A vulnerability was found in iteachyou Dreamer CMS up to 4.1.3. It has been declared as problematic. Affected by this vu

A vulnerability was found in ScriptAndTools eCommerce-website-in-PHP 3.0 and classified as problematic. This issue affec

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been rated as critical. This issue

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vul

A vulnerability was found in itwanger paicoding 1.0.3. It has been classified as critical. This affects an unknown part

A vulnerability was found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this issue is some unkn

A vulnerability, which was classified as problematic, was found in withstars Books-Management-System 1.0. Affected is an

For an authenticated end-user the portal may run a script while attempting to display a directory or some file's propert

A vulnerability was found in withstars Books-Management-System 1.0. It has been declared as problematic. Affected by thi

A vulnerability was found in opplus springboot-admin 1.0 and classified as critical. This issue affects some unknown pro

A vulnerability has been found in 201206030 novel-cloud 1.4.0 and classified as critical. This vulnerability affects the

There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit t

There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract databa

There is a Permission Management and Access Control vulnerability in the GoldenDB database product. Attackers can manipu

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages

NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a b

A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0. This

CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScri

CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript content, but it can be

In IZArc through 4.5, there is a Mark-of-the-Web Bypass Vulnerability. When a user performs an extraction from an archiv

In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issu

An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.

The The Anps Theme plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and

A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750

The Aeropage Sync for Airtable plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capabili

The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is v

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.

HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain acce

An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the syst

A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted ur

An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url

In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible

In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they a