Improper access control in some drivers for Intel(R) Ethernet Connection I219 Series before version 12.19.1.39 may allow
Stack-based buffer overflow in some drivers for Intel(R) Ethernet Connection I219 Series before version 12.19.1.39 may a
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 2
Uncontrolled search path for the Intel(R) XTU software for Windows before version 7.14.2.14 may allow an authenticated u
Uncontrolled search path for the FPGA Support Package for the Intel(R) oneAPI DPC++/C++ Compiler software for Windows be
Improper handling of physical or environmental conditions in some Intel(R) Processors may allow an authenticated user to
Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to pot
Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user t
Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an a
Uncontrolled search path for some Intel(R) Chipset Software Installation Utility before version 10.1.19867.8574 may allo
Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may al
Uncontrolled search path for the Intel(R) Thread Director Visualizer software before version 1.0.1 may allow an authenti
Uncontrolled search path for some Intel(R) High Level Synthesis Compiler software before version 24.2 may allow an authe
Out-of-bounds write in the Intel(R) 800 Series Ethernet Driver for Intel(R) Ethernet Adapter Complete Driver Pack before
Incorrect default permissions for some Intel(R) DSA installer for Windows before version 24.2.19.5 may allow an authenti
Uncontrolled search path for some Intel(R) MPI Library for Windows software before version 2021.13 may allow an authenti
Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to
Improper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authentica
Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potent
Improper access control in some Intel(R) ME driver pack installer engines before version 2422.6.2.0 may allow an authent
Uncontrolled search path for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticat
Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enabl
Uncontrolled search path in some Intel(R) Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow a
Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentiall
Uncontrolled search path in some Intel(R) VPL software before version 2023.4.0 may allow an authenticated user to potent
Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user
Untrusted Pointer Dereference in I/O subsystem for some Intel(R) QAT software before version 2.0.5 may allow authenticat
A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selec
A vulnerability was found in ywoa up to 2024.07.03. It has been declared as critical. This vulnerability affects unknown
An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker wit
A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the fu
A vulnerability classified as critical was found in ywoa up to 2024.07.03. This vulnerability affects the function listN
Nitrokey 3 Firmware is the the firmware of Nitrokey 3 USB keys. For release 1.8.0, and test releases with PIV enabled pr
A vulnerability, which was classified as critical, has been found in ywoa up to 2024.07.03. This issue affects the funct
D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the IPv6_PppoePass
A vulnerability classified as critical has been found in pihome-shc PiHome 2.0. This affects an unknown part of the file
In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by a local t
Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.11, 3.0.12, and 3.1.10, Rack::
A vulnerability classified as critical was found in code-projects Wazifa System 1.0. Affected by this vulnerability is a
In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties wi
Improper Authorization in GitLab CE/EE affecting all versions from 17.7 prior to 17.7.4, 17.8 prior to 17.8.2 allow user
An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior
In Progress® Telerik® KendoReact versions v3.5.0 through v9.4.0, an attacker can introduce or modify properties within t
An information disclosure vulnerability in GitLab CE/EE affecting all versions from 8.3 prior to 17.6.5, 17.7 prior to 1
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. This affects an unk
A vulnerability classified as critical has been found in SourceCodester Best Church Management Software 1.1. Affected is
An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 pr
dashboards-reporting (aka Dashboards Reports) before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because
A denial of service vulnerability in GitLab CE/EE affecting all versions from 14.1 prior to 17.6.5, 17.7 prior to 17.7.4
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0
Frequently Asked Questions
What does MEDIUM severity mean for CVEs?
CVSS 4.0–6.9 — moderate vulnerabilities that may require specific conditions or user interaction to exploit
How many medium severity CVEs exist?
There are 169,588 CVE records rated MEDIUM in our database. Of these, 103 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize medium severity vulnerabilities?
MEDIUM severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect MEDIUM Vulnerabilities
CyberStrike scans your infrastructure and detects medium severity vulnerabilities in real time.
Get Started