MEDIUM Severity CVEs

A vulnerability, which was classified as problematic, was found in zhangyanbo2007 youkefu up to 4.2.0. This affects an u

A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects some unknown

A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects un

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This aff

A server-side request forgery (SSRF) vulnerability exists in the Bitdefender GravityZone Update Server when operating in

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been declared as critical. This vuln

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. Affected by this

Stored XSS in M-Files Web versions from 25.1.14445.5 to 25.2.14524.4 allows an authenticated user to run scripts

The Woffice Core plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

A vulnerability has been found in JFinal CMS up to 5.2.4 and classified as problematic. Affected by this vulnerability i

A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affect

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vu

The Maps WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting

The Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website pl

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affec

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. Aff

All versions of the package react-draft-wysiwyg are vulnerable to Cross-site Scripting (XSS) via the Embedded button whi

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue a

A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. This vulnerab

A vulnerability, which was classified as critical, was found in CodeAstro Student Grading System 1.0. This affects an un

A vulnerability, which was classified as critical, has been found in CodeAstro Car Rental System 1.0. Affected by this i

A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the func

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the

Weak encoding for password vulnerability exists in HMI ViewJet C-more series. If this vulnerability is exploited, authen

Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more series and HMI GC-A2 series, whi

Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, whi

Improper restriction of rendered UI layers or frames issue exists in HMI ViewJet C-more series, which may allow a remote

User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)

HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal

HCL Traveler is affected by an internal path disclosure in a Windows application when the application inadvertently reve

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47214, but involves an authenticated

A vulnerability was found in FastCMS 0.1.5. It has been declared as critical. This vulnerability affects unknown code of

Vite is a frontend tooling framework for javascript. The contents of arbitrary files can be returned to the browser. By

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25

Element X iOS is a Matrix iOS Client provided by Element. In Element X iOS version between 1.6.13 and 25.03.7, the entit

A vulnerability was found in Projeqtor up to 12.0.2. It has been rated as critical. Affected by this issue is some unkno

A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some

A vulnerability classified as critical was found in code-projects Product Management System 1.0. This vulnerability affe

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. From 3.2.0 until 3.2.4, exception messa

A vulnerability classified as critical has been found in thu-pacman chitu 0.1.0. This affects the function torch.load of

A vulnerability was found in Tencent Music Entertainment SuperSonic up to 0.9.8. It has been rated as critical. Affected

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerabi

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary H

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by

A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead t

A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.