MEDIUM Severity CVEs

In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, i

In Modem, there is a possible memory corruption due to incorrect error handling. This could lead to remote denial of ser

A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown proc

A vulnerability was found in zj1983 zz up to 2024-8. It has been declared as problematic. This vulnerability affects the

A vulnerability has been found in ESAFENET DSM 3.1.2 and classified as critical. Affected by this vulnerability is the f

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. Affected is an unkn

A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS

A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS

Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure

An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solution

A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS

A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211. This issue affects the f

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vuln

In Bitaxe ESP-Miner before 2.5.0 with AxeOS, one can use an /api/system CSRF attack to update the payout address (aka st

A vulnerability was found in Incorta 2023.4.3. It has been classified as problematic. Affected is an unknown function of

A vulnerability has been found in osuuu LightPicture 1.2.2 and classified as critical. This vulnerability affects the fu

A vulnerability, which was classified as critical, was found in zj1983 zz up to 2024-8. This affects an unknown part of

A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. Affected by this issue is t

A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is the functi

A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is the function GetDBUser of t

A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability a

A vulnerability was found in zj1983 zz up to 2024-8 and classified as critical. Affected by this issue is the function g

Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over mem

A vulnerability has been found in zj1983 zz up to 2024-8 and classified as critical. Affected by this vulnerability is t

A vulnerability, which was classified as critical, was found in Tenda AC7 1200M 15.03.06.44. Affected is the function Te

A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. This issue affects some unk

A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This

A vulnerability classified as problematic was found in zj1983 zz up to 2024-08. Affected by this vulnerability is an unk

A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of

A vulnerability was found in Pixsoft Vivaz 6.0.11. It has been classified as problematic. Affected is an unknown functio

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a

A vulnerability, which was classified as problematic, has been found in Eastnets PaymentSafe 2.5.26.0. Affected by this

A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the functio

A vulnerability, which was classified as critical, was found in Zorlan SkyCaiji 2.9. This affects the function previewAc

A vulnerability, which was classified as critical, has been found in Hunan Zhonghe Baiyi Information Technology Baiyiyun

IBM Controller 11.0.0 through 11.0.1 and 11.1.0 does not require that users should have strong passwords by default, whi

A vulnerability has been found in Zorlan SkyCaiji 2.9 and classified as critical. This vulnerability affects the functio

A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0. This affects the function rz

The WP Posts Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘auto_play_timeout’ para

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to unauthorized access of data

A vulnerability was found in rizinorg rizin up to 0.7.4. It has been rated as critical. This issue affects the function

The GenerateBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inclu

The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Si

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vu

The The Authors List plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and incl

The Simple Download Counter plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and includi