MEDIUM Severity CVEs

The Essential WP Real Estate WordPress plugin through 1.1.3 does not escape generated URLs before outputting them in att

libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.

An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It does not sufficiently vali

An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It doesn't sufficiently isola

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local informati

In secmem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This could lead to remote d

In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

A vulnerability was determined in MaxD Lightning Module 4.43/4.44 on OpenCart. This issue affects some unknown processin

A vulnerability classified as critical was found in CmsEasy 7.7.7.9. This vulnerability affects the function backAll_act

A vulnerability was found in Zenvia Movidesk up to 25.01.22. It has been declared as problematic. Affected by this vulne

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown p

NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker could read

A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects

A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerab

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affec

A vulnerability, which was classified as critical, has been found in itsourcecode Tailoring Management System 1.0. Affec

A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulne

A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an un

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been rated as critical. This issue aff

The WooCommerce Support Ticket System plugin for WordPress is vulnerable to unauthorized access and loss of data due to

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vu

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulner

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missi

An Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured, could allow a malicious act

The MagicForm plugin for WordPress is vulnerable to access and modification of data due to a missing capability check on

The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to SQL Injection via

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre

The Jupiter X Core plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.8.7

The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the

The WordPress Email Newsletter WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting i

The WP Finance WordPress plugin through 1.3.6 does not sanitise and escape a parameter before outputting it back in the

The WP Finance WordPress plugin through 1.3.6 does not have CSRF check in some places, and is missing sanitisation as we

The Responsive iframe WordPress plugin through 1.2.0 does not validate and escape some of its block options before outpu

The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vul

The RapidLoad – Optimize Web Vitals Automatically plugin for WordPress is vulnerable to unauthorized modification of dat

The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordi

The AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations plugin for WordPress is vulnerable to u

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missin