MEDIUM Severity CVEs

A vulnerability in the NetExtender Windows client log export function allows unauthorized access to sensitive Windows sy

The VR-Frases (collect & share quotes) plugin for WordPress is vulnerable to SQL Injection via several parameters in all

The VR-Frases (collect & share quotes) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several

The CP Contact Form with PayPal plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,

The Responsive Blocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site S

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image

The Event Tickets and Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all version

The EthereumICO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ethereum-ico shortcod

The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to m

The goodlayers-core WordPress plugin before 2.1.3 allows users with a subscriber role and above to upload SVGs containin

The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when o

In some cases, the ktrace facility will log the contents of kernel structures to userspace. In one such case, ktrace du

When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcup

On 64-bit systems, the implementation of VOP_VPTOFH() in the cd9660, tarfs and ext2fs filesystems overflows the destinat

A vulnerability classified as critical has been found in CampCodes School Management Software 1.0. Affected is an unknow

A vulnerability was found in Tenda A18 up to 15.13.07.09. It has been rated as critical. This issue affects the function

A vulnerability was found in needyamin Library Card System 1.0. It has been declared as problematic. Affected by this vu

A floating-point exception (FPE) vulnerability exists in the AP4_TfraAtom::AP4_TfraAtom function in Bento4.

HTML Injection vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to inject arbitrary HTML c

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflak

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflak

snowflake-connector-net is the Snowflake Connector for .NET. Snowflake discovered and remediated a vulnerability in the

A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function di

regclient is a Docker and OCI Registry Client in Go. A malicious registry could return a different digest for a pinned m

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowf

snowflake-connector-nodejs is a NodeJS driver for Snowflake. Snowflake discovered and remediated a vulnerability in the

IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response discr

IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access contro

IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes

IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes

Snowflake PHP PDO Driver is a driver that uses the PHP Data Objects (PDO) extension to connect to the Snowflake database

Twig is a template language for PHP. When using the ?? operator, output escaping was missing for the expression on the l

An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Ser

Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to escalate privileges by assigning themselves highe

RuoYi v4.8.0 was discovered to contain a SQL injection vulnerability via the orderby parameter at /monitor/online/list.

The Divi Torque Lite – Best Divi Addon, Extensions, Modules & Social Modules plugin for WordPress is vulnerable to Store

The Target Video Easy Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's brid_ov

An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is

A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as problematic. This issue affects som

The old versions of EXIF Viewer Classic contain a cross-site scripting vulnerability caused by improper handling of EXIF

IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should

A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulnerability is an unkno

A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the

A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown pr

IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtaine

A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /done

A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown func

A reflected cross-site scripting (XSS) vulnerability in Audemium ERP <=0.9.0 allows remote attackers to execute an arbit