MEDIUM Severity CVEs

A UAA configured with multiple identity zones, does not properly validate session information across those zones. A Use

The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to unauthorized modification of data du

The Ni Sales Commission For WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capab

The Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin for WordPress is vulnerable to unauthorized acc

The A5 Custom Login Page WordPress plugin through 2.8.1 does not sanitise and escape a parameter before outputting it ba

The ECT Home Page Products WordPress plugin through 1.9 does not sanitise and escape a parameter before outputting it ba

The SlideDeck 1 Lite Content Slider WordPress plugin through 1.4.8 does not sanitise and escape a parameter before outpu

The Tabulate WordPress plugin through 2.10.3 does not sanitise and escape some parameters before outputting them back in

The User Messages WordPress plugin through 1.2.4 does not sanitise and escape a parameter before outputting it back in t

The Fantastic ElasticSearch WordPress plugin through 4.1.0 does not sanitise and escape a parameter before outputting it

The WordPress Google Map Professional (Map In Your Language) WordPress plugin through 1.0 does not sanitise and escape a

The Privacy Policy Genius WordPress plugin through 2.0.4 does not sanitise and escape a parameter before outputting it b

The Fast Tube WordPress plugin through 2.3.1 does not sanitise and escape a parameter before outputting it back in the p

The HT Event – WordPress Event Manager Plugin for Elementor plugin for WordPress is vulnerable to Sensitive Information

The WP MediaTagger WordPress plugin through 4.1.1 does not sanitise and escape a parameter before outputting it back in

The WP MediaTagger WordPress plugin through 4.1.1 does not validate and escape some of its shortcode attributes before o

The OPSI Israel Domestic Shipments WordPress plugin through 2.6.3 does not sanitise and escape a parameter before output

The Zalomení WordPress plugin through 1.5 does not sanitise and escape some of its settings, which could allow high priv

The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in t

The Canvasflow for WordPress plugin through 1.5.5 does not sanitise and escape a parameter before outputting it back in

The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The Ticketmeo – Sell Tickets – Event Ticketing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable t

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Reflected

The SeatReg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'seatreg' shortcode in al

The Gosign – Posts Slider Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'posts-slider-

The WPRadio – WordPress Radio Streaming Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The Frictionless plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'frictionless_form'

An authenticated user who has read access to the juju controller model, may construct a remote request to download an ar

This vulnerability allows network-adjacent attackers to compromise transport security on affected installations of Charg

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Alpine Halo9 d

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sili

This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations o

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected i

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16

A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vul

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unkn

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unkn

Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows rem

Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allo

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allo

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct

Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct a

Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authen

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN,

Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be

A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate

In its default configuration, Contec Health CMS8000 Patient Monitor transmits plain-text patient data to a hard-coded p

The Cloud MQTT service of the affected products supports wildcard topic subscription which could allow an attacker to o