An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying
An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supply
An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to acce
An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive u
An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user informati
An issue in Qianjin Network Information Technology (Shanghai) Co., Ltd 51Job iOS 14.22.0 allows attackers to access sens
A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unk
IBM EntireX 11.1 could allow a local user to cause a denial of service due to use of a regular expression with an ineffi
IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system. An attacker could send a s
A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionS
The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboa
The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link_title’ parameter
The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in
Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus re
The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp –
The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profi
The ThemeMakers Stripe Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stripe' short
A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper input validation.
The ThemeMakers PayPal Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'paypa
The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Serv
A Cross-Site Request Forgery (CSRF) vulnerability exists in the management console of WSO2 Enterprise Integrator 6.6.0 d
The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi
Versions of the package io.pebbletemplates:pebble from 0 and before 4.1.0 are vulnerable to External Control of File Nam
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cro
An incorrect authorization vulnerability exists in multiple WSO2 products, allowing protected APIs to be accessed direct
The OneStore Sites plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and includin
The School Management System – SakolaWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions
In the Linux kernel, the following vulnerability has been resolved: spi: sn-f-ospi: Fix division by zero When there is
In the Linux kernel, the following vulnerability has been resolved: vxlan: check vxlan_vnigroup_init() return value vx
In the Linux kernel, the following vulnerability has been resolved: team: better TEAM_OPTION_TYPE_STRING validation sy
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: bail out when failed to load fw in psp_
In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix crash on error in gpiochip_get_ngpios(
In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix panic during interface removal Ref
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if l
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subb
In the Linux kernel, the following vulnerability has been resolved: USB: hub: Ignore non-compliant devices with too man
In the Linux kernel, the following vulnerability has been resolved: can: ctucanfd: handle skb allocation failure If sk
In the Linux kernel, the following vulnerability has been resolved: can: rockchip: rkcanfd_handle_rx_fifo_overflow_int(
In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: fix potential NULL pointer derefer
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix incorrect autogroup migration detect
In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential memory leak in iopf_queue_remo
In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Add .owner to vmclock_miscdev_fops W
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6
In the Linux kernel, the following vulnerability has been resolved: clocksource: Use migrate_disable() to avoid calling
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion failure when splitting ordered
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't use btrfs_set_item_key_safe on RAID st
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the return value of of_proper
In the Linux kernel, the following vulnerability has been resolved: net: rose: lock the socket in rose_bind() syzbot r
In the Linux kernel, the following vulnerability has been resolved: drm/ast: astdp: Fix timeout for enabling video sign
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics - fix crash when enabling pass-thr
Frequently Asked Questions
What does MEDIUM severity mean for CVEs?
CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit
How many medium severity CVEs exist?
There are 169,588 CVE records rated MEDIUM in our database. Of these, 103 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize medium severity vulnerabilities?
MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect MEDIUM Vulnerabilities
CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.
Get Started