MEDIUM Severity CVEs

The Order Attachments for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versio

The Pricing Table by PickPlugins plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button Link i

The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection via the ‘u_i

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's An

The Product Catalog Simple plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's show_produ

The wpForo Forum plugin for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the '

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vuln

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all

The MK Google Directions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'MKGD' short

The WordPress Portfolio Builder – Portfolio Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi

The Advanced AJAX Product Filters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' p

The RateMyAgent Official plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc

The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the im

IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 and 12.0.0 through 12.0.4 could allow a remote attacker to traverse direc

IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 is vulnerable to local file inclusion vulnerability, allowing an attacker

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read

Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to send commu

Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to store pass

The Cardealer theme for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing c

Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products a

An issue in Motorola Mobility Droid Razr HD (Model XT926) System Version: 9.18.94.XT926.Verizon.en.US allows physically

In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met.

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix a use of uninitialized mutex comm

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Set driver data before its usage If

In the Linux kernel, the following vulnerability has been resolved: fbdev: omap: use threaded IRQ for LCD DMA When usi

In the Linux kernel, the following vulnerability has been resolved: tty: xilinx_uartps: split sysrq handling lockdep d

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd/display: Use HW lock mgr for PSR1"

In the Linux kernel, the following vulnerability has been resolved: block: mark GFP_NOIO around sysfs ->store() sysfs

In the Linux kernel, the following vulnerability has been resolved: hrtimers: Force migrate away hrtimers queued after

In the Linux kernel, the following vulnerability has been resolved: ptp: Ensure info->enable callback is always set Th

In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix off-by-one root mis-connectio

In the Linux kernel, the following vulnerability has been resolved: block: fix queue freeze vs limits lock order in sys

In the Linux kernel, the following vulnerability has been resolved: net: let net.core.dev_weight always be non-zero Th

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix warnings during S3 suspend The enab

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix oops when unload drivers paralleling

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: fix freeing IRQ in am

In the Linux kernel, the following vulnerability has been resolved: firewire: test: Fix potential null dereference in f

In the Linux kernel, the following vulnerability has been resolved: rhashtable: Fix potential deadlock by moving schedu

In the Linux kernel, the following vulnerability has been resolved: mailbox: th1520: Fix a NULL vs IS_ERR() bug The de

Nagios XI 2024R1.2.2 is vulnerable to an open redirect flaw on the Tools page, exploitable by users with read-only permi

AVE System Web Client v2.1.131.13992 was discovered to contain a cross-site scripting (XSS) vulnerability.

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the vi

A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. This vulnerability affects unkno

A vulnerability, which was classified as critical, was found in zyx0814 Pichome 2.1.0. This affects an unknown part of t

Mastodon is a self-hosted, federated microblogging platform. Starting in version 4.2.0 and prior to versions 4.2.16 and

An issue in Tencent Technology (Beijing) Company Limited Tencent MicroVision iOS 8.137.0 allows attackers to access sens

A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is

A vulnerability was found in Tu Yafeng Via Browser up to 5.9.0 on Android. It has been rated as problematic. This issue

An issue in Suning Commerce Group Suning EMall iOS 9.5.198 allows attackers to access sensitive user information via sup