MEDIUM Severity CVEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zackdesign NextGen

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in matt_mcbrien WP Si

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Max Chirkov FlexID

Missing Authorization vulnerability in DeannaS Embed RSS embed-rss allows Exploiting Incorrectly Configured Access Contr

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gubbigubbi Kona Ga

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Garrett Grimm Simp

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andrew Norcross Go

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dugbug Easy Chart

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicholaswilson Gra

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vasilis Triantafyl

in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through integer overflow.

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additiona

The Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time plugin for WordPress is vulnerable to In

The Guten Free Options WordPress plugin through 0.9.5 does not sanitise and escape a parameter before outputting it back

A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14.1 prior to

A vulnerability has been found in Safetytest Cloud-Master Server up to 1.1.1 and classified as critical. This vulnerabil

A vulnerability, which was classified as problematic, was found in Animati PACS up to 1.24.12.09.03. This affects an unk

A vulnerability, which was classified as problematic, has been found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0. Affected by

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge for IOS and Android Spoofing Vulnerability

An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a cra

Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code vi

The mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors.

Stored Cross Site Scripting(XSS) vulnerability in Egavilan Media Resumes Management and Job Application Website 1.0 allo

Certain HP LaserJet Pro printers may potentially experience a denial of service when a user sends a raw JPEG file to the

IBM EntireX 11.1 could allow a local user to cause a denial of service due to an unhandled error and fault isolation.

An issue in Smartcom Bulgaria AD Smartcom Ralink CPE/WiFi router SAM-4G1G-TT-W-VC, SAM-4F1F-TT-W-A1 allows a remote atta

An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module and Lin

An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module, Topolo

IBM Jazz for Service Management 1.1.3 through 1.1.3.23 is vulnerable to cross-site scripting. This vulnerability allows

Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to rea

Specifically crafted payloads sent to the RFID reader could cause DoS of RFID reader. After the device is restarted, it

Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attacke

Using API in the 2N OS device, authorized user can enable logging, which discloses valid authentication tokens in system

The device ID is based on IMEI in Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Fo

Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number o

A vulnerability has been found in AppHouseKitchen AlDente Charge Limiter up to 1.29 on macOS and classified as critical.

Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a cra

A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.

PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS). Multiple endpoints improper

Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Ligh

Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerabil

A Stored Cross-Site Scripting (Stored XSS) vulnerability has been found in the Holded application. This vulnerability co

A vulnerability, which was classified as problematic, was found in Webkul QloApps 1.6.1. Affected is the function logout

In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly,

Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this v

Out-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause fe