MEDIUM Severity CVEs

In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: Fix cpufreq_policy ref counting

In the Linux kernel, the following vulnerability has been resolved: thermal/netlink: Prevent userspace segmentation fau

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after dev

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: fix MIDI Streaming descriptor

The Platform.ly for WooCommerce plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions

The Hero Maps Premium plugin for WordPress is vulnerable to SQL Injection via several AJAX actions in all versions up to

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Ref

The School Management System for Wordpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the

The School Management System for Wordpress plugin for WordPress is vulnerable to unauthorized loss of data due to a miss

The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'view-attendance'

The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of

The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idx_frame' s

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW r

The Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wishlist_button' shortc

ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds acc

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.

A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. Th

There is a configuration defect vulnerability in ZTELink 5.4.9 for iOS. This vulnerability is caused by a flaw in the Wi

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected

The Homey theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.3. This

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. Af

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This issue

A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This v

Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an

A vulnerability was found in SourceCodester Best Employee Management System 1.0 and classified as critical. Affected by

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected

A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown proces

A vulnerability has been found in huang-yk student-manage 1.0 and classified as problematic. This vulnerability affects

A vulnerability, which was classified as critical, has been found in s-a-zhd Ecommerce-Website-using-PHP 1.0. Affected b

The pairing API request handler in Microsoft HoloLens 1 (Windows Holographic) through 10.0.17763.3046 and HoloLens 2 (Wi

A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this vulnerability is

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. This vuln

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0. It has been classified as critical. This affects a

FastGPT is a knowledge-based platform built on the LLMs. Since the web crawling plug-in does not perform intranet IP ver

NocoDB is software for building databases as spreadsheets. The API endpoint related to the password reset function is vu

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Group-Office is an enterprise CRM and groupware tool. This Stored XSS vulnerability exists where user input in the Name

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue

A vulnerability, which was classified as critical, was found in code-projects Blood Bank Management System 1.0. Affected

In the Linux kernel, the following vulnerability has been resolved: seccomp: passthrough uretprobe systemcall without f

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE T

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid putting some root ports into D3 on TUXED

ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now

In the Linux kernel, the following vulnerability has been resolved: tomoyo: don't emit warning in tomoyo_write_control(

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Fix missing read barrier in qc

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: Fix an error check in npcm_video_ec

In the Linux kernel, the following vulnerability has been resolved: clk: mmp2: call pm_genpd_init() only after genpd.na