Medium-severity CVEs (page 22)
Page 22 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-91966 | Medium | 5.8 | 2026-09-15 | AVideo through 29.0 contains an unauthenticated server-side request forgery vulnerability in the check_site_availability function that accepts attacker-control… |
CVE-2026-91963 | Medium | 6.5 | 2026-09-15 | FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can… |
CVE-2026-91962 | Medium | 6.3 | 2026-09-15 | FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSG_SNDIN_OPEN messages. Attackers c… |
CVE-2026-91961 | Medium | 6.5 | 2026-09-15 | FreeRDP before 3.31.0 contains a denial-of-service vulnerability in the URBDRC control-transfer request path that fails to validate OutputBufferSize before for… |
CVE-2026-91960 | Medium | 6.5 | 2026-09-15 | FreeRDP versions before 3.31.0 contain an integer overflow in WinPR's Stream_EnsureRemainingCapacity function that allows remote attackers to cause denial of s… |
CVE-2026-91959 | Medium | 6.5 | 2026-09-15 | FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts_read_result function within the RPC gateway transport parser. Attackers can send a m… |
CVE-2026-91958 | Medium | 6.6 | 2026-09-15 | FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xf_detect_monit… |
CVE-2026-91956 | Medium | 6.5 | 2026-09-15 | FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's func_get_ep_desc function that indexes interface arrays by position… |
CVE-2026-91954 | Medium | 6.5 | 2026-09-15 | FreeRDP before 3.31.0 contains a null pointer dereference vulnerability in gdi_surface_bits when processing Surface Bits commands with NSCodec codec ID. A mali… |
CVE-2026-91953 | Medium | 6.5 | 2026-09-15 | FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request() that fails to validate the LB_LOAD_BALANCE_INFO… |
CVE-2026-91952 | Medium | 6.5 | 2026-09-15 | FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pool_decode_rect function when decoding AVC444 metablocks with more region rec… |
CVE-2026-91951 | Medium | 6.5 | 2026-09-15 | FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in the urbdrc client channel's urb_send_current_frame_number_result() function. A m… |
CVE-2026-91950 | Medium | 6.5 | 2026-09-15 | FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the rdpdr_dump_packet function due to 32-bit unsigned integer wraparound in buffer bounds… |
CVE-2026-91946 | Medium | 6.5 | 2026-09-15 | FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGraphics PDU serializer that fails to initialize pad… |
CVE-2026-91945 | Medium | 6.5 | 2026-09-15 | FreeRDP versions before 3.31.0 contain an out-of-bounds read vulnerability in smartcard response decoders that fail to validate ATR length fields against fixed… |
CVE-2026-91944 | Medium | 6.1 | 2026-09-15 | crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the forceHighlightElement() function assigns t… |
CVE-2026-91942 | Medium | 5.4 | 2026-09-15 | crawl4ai before 0.9.3 contains a DOM-based cross-site scripting vulnerability in the Docker Playground UI that assigns untrusted crawl results to element.inner… |
CVE-2026-91936 | Medium | 6.8 | 2026-09-15 | Flowise versions before 3.1.4 contain a script injection vulnerability in Docker image build workflows where workflow_dispatch inputs are directly interpolated… |
CVE-2026-91849 | Medium | 6.3 | 2026-09-15 | A security flaw has been discovered in WuzhiCMS up to 4.1.0. This affects the function member::setAvatar of the file /index.php?m=member&f=user&v=setAvatar of… |
CVE-2026-88620 | Medium | 4.3 | 2026-09-15 | SmartAdmin API Java17 SpringBoot3 version 3.30.0 contains an improper authorization vulnerability in the /employee/queryAll endpoint. The endpoint does not enf… |
CVE-2026-59157 | Medium | 6.5 | 2026-09-15 | webhookd is a minimalist webhook server that triggers shell scripts and external processes through HTTP requests. Prior to 1.22.0, webhookd deployments without… |
CVE-2026-58196 | Medium | 4.7 | 2026-09-15 | ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Prior to 0.31.0, remote.Handler.Authenticate… |
CVE-2026-55776 | Medium | 6.5 | 2026-09-15 | OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to transit/keys/* could t… |
CVE-2026-55770 | Medium | 6.8 | 2026-09-15 | OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping funct… |
CVE-2026-55636 | Medium | 5.7 | 2026-09-15 | Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.6, charts/capsule/templates/configuration.yaml configures the vali… |
CVE-2026-55591 | Medium | 5.8 | 2026-09-15 | Signal K Server is a server application that runs on a central hub in a boat. Prior to 2.28.0, makeRemoteRequest() in src/serverroutes.ts accepted attacker-con… |
CVE-2026-54724 | Medium | 6.1 | 2026-09-15 | Kiwi TCMS is an open source test management system. Prior to 16.1, the account confirmation endpoint accepted an unvalidated next parameter, allowing an unauth… |
CVE-2026-50024 | Medium | 5.3 | 2026-09-15 | GitHacker is a tool that restores Git repositories from exposed .git directories. In 1.1.7 and earlier, add_head_file_tasks parses an attacker-controlled ref p… |
CVE-2026-47215 | Medium | 4.8 | 2026-09-15 | SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string m… |
CVE-2026-44282 | Medium | 4.8 | 2026-09-15 | Decidim is a participatory democracy framework. Prior to 0.32.0, a low-privilege process-scoped administrator or election editor with question-management right… |
CVE-2026-44163 | Medium | 5.3 | 2026-09-15 | fluent-plugin-opentelemetry is a Fluentd input and output plugin for forwarding OpenTelemetry Protocol data. Prior to 0.5.3, the in_opentelemetry HTTP input re… |
CVE-2024-58384 | Medium | 5.4 | 2026-09-15 | Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request he… |
CVE-2026-91842 | Medium | 4.1 | 2026-09-15 | A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function KryoInjection.invert of the file obp-api/src/main/scala/code/… |
CVE-2026-90439 | Medium | 6.5 | 2026-09-15 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL versions <= OpenSSL 3.5.0 under certain… |
CVE-2026-88618 | Medium | 6.5 | 2026-09-15 | 1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality. This allows a remote attacker to execute arb… |
CVE-2026-55650 | Medium | 4.4 | 2026-09-15 | Outerbase Studio is a lightweight browser-based database GUI supporting PostgreSQL, MySQL, and SQLite. In version 0.10.2 and earlier, TextComponent in src/comp… |
CVE-2026-54168 | Medium | 6.5 | 2026-09-15 | Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, a GitHub… |
CVE-2026-49446 | Medium | 6.1 | 2026-09-15 | Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Prior to 0.22.19, tok… |
CVE-2026-48987 | Medium | 6.5 | 2026-09-15 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, EventManager in src/pyload/core/managers/event_manager.py appends… |
CVE-2026-48737 | Medium | 4.9 | 2026-09-15 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, is_global_address in src/pyload/core/utils/web/check.py relies on… |
CVE-2026-48722 | Medium | 5.5 | 2026-09-15 | Nextflow is a DSL for data-driven computational pipelines. From 25.09.2-edge until 25.10.6 and 26.04.3, nextflow auth login writes Seqera Platform OIDC bearer… |
CVE-2026-25826 | Medium | 4.9 | 2026-09-15 | An issue was discovered in Keyfactor SignServer before 7.6.0. The attribute ATTRIBUTESFILE in PKCS11CryptoToken can be set to a readable file but not an accept… |
CVE-2026-92078 | Medium | 6.5 | 2026-09-15 | Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
CVE-2026-92077 | Medium | 6.5 | 2026-09-15 | Denial-of-service in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
CVE-2026-92070 | Medium | 4.3 | 2026-09-15 | Information disclosure in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
CVE-2026-92069 | Medium | 5.4 | 2026-09-15 | Spoofing issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
CVE-2026-92068 | Medium | 5.4 | 2026-09-15 | Site isolation issue in the Reader Mode component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
CVE-2026-92063 | Medium | 6.5 | 2026-09-15 | Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
CVE-2026-92039 | Medium | 6.3 | 2026-09-15 | Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
CVE-2026-92031 | Medium | 6.5 | 2026-09-15 | Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156… |
CVE-2026-92030 | Medium | 5.4 | 2026-09-15 | Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thund… |
CVE-2026-92005 | Medium | 5.3 | 2026-09-15 | Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T… |
CVE-2026-15609 | Medium | 6.4 | 2026-09-15 | The Bridge - Creative Multipurpose WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'circle_line' Shortcode Attribute in al… |
CVE-2026-91997 | Medium | 5.3 | 2026-09-15 | evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticate… |
CVE-2026-91994 | Medium | 6.5 | 2026-09-15 | Semaphore UI through 2.19.12 exempts GET and HEAD requests from project resource permission checks in GetMustCanMiddleware. Attackers with guest or task_runner… |
CVE-2026-91993 | Medium | 4.3 | 2026-09-15 | Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, allowing authenticated users to acce… |
CVE-2026-91922 | Medium | 6.1 | 2026-09-15 | Steedos Platform through 3.0.15-beta.47 contains a reflected cross-site scripting vulnerability in the anonymous /api/page/render endpoint that fails to proper… |
CVE-2026-91786 | Medium | 6.1 | 2026-09-15 | A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dimensions aga… |
CVE-2026-86818 | Medium | 4.8 | 2026-09-15 | fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv, that added a mailto scheme parser in version 4.1.3. In versions 4.1.3 a… |
CVE-2026-86472 | Medium | 4.8 | 2026-09-15 | fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv. In versions before 2.4.7, from 3.0.0 through 3.1.7, and from 4.0.0 thro… |
CVE-2026-80489 | Medium | 5.9 | 2026-09-15 | Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may re… |
CVE-2026-77117 | Medium | 5.9 | 2026-09-15 | Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may… |
CVE-2026-1759 | Medium | 6.5 | 2026-09-15 | Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation. This issue affects GateManager… |
CVE-2026-62280 | Medium | 6.1 | 2026-09-15 | Open Access Management (OpenAM) is an access management solution. From 13.0.0 until 16.1.2, the OAuth2 authorize endpoint's display=wap consent page reflects r… |
CVE-2026-59341 | Medium | 4.2 | 2026-09-15 | A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go templa… |
CVE-2025-5802 | Medium | 5.3 | 2026-09-15 | The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence. When a user attempts t… |
CVE-2026-91826 | Medium | 4.4 | 2026-09-15 | Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering craft… |
CVE-2026-91091 | Medium | 4.3 | 2026-09-15 | A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf_node_list_insert_child of the file scenegraph/base_scenegraph.c… |
CVE-2026-91089 | Medium | 6.3 | 2026-09-15 | A vulnerability was found in GPAC up to f1219cde. Impacted is the function gf_node_get_name_and_id of the file scenegraph/base_scenegraph.c. The manipulation r… |
CVE-2026-91088 | Medium | 4.8 | 2026-09-15 | A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gf_url_concatenate_ex of the file utils/url.c of the component URL Handl… |
CVE-2026-91086 | Medium | 6.3 | 2026-09-15 | A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmx_process of the file filters/reframe_mpgvid… |
CVE-2026-91005 | Medium | 6.3 | 2026-09-15 | A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function move_uploaded_file of the file production/edit_pictu… |
CVE-2026-89141 | Medium | 6.5 | 2026-09-15 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and… |
CVE-2026-18063 | Medium | 6.4 | 2026-09-15 | The Job Postings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'position_button' parameter in all versions up to, and including, 2… |
CVE-2026-15402 | Medium | 6.4 | 2026-09-15 | The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'etn_she… |
CVE-2026-91002 | Medium | 5.3 | 2026-09-15 | A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function _blacklist of the file core/httpd.py of the component… |
CVE-2026-81320 | Medium | 5.5 | 2026-09-15 | A flaw was found in hawtio-operator. When a custom Route TLS secret is configured and the operator runs at debug log level 1 or higher, the entire Route object… |
CVE-2026-81303 | Medium | 6.3 | 2026-09-15 | A flaw was found in hawtio-operator. The operator holds routes/custom-host:create permission cluster-wide and writes the tenant-supplied spec.routeHostName val… |
CVE-2026-18232 | Medium | 5.3 | 2026-09-15 | The WP Directory Kit WordPress plugin through 1.5.7 does not check the status or ownership of a listing before returning its content through one of its public… |
CVE-2026-17495 | Medium | 5.9 | 2026-09-15 | moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-str… |
CVE-2026-16593 | Medium | 6.8 | 2026-09-15 | The WP Directory Kit WordPress plugin through 1.5.7 does not sanitize and escape some widget settings before using them in a SQL statement, allowing authentica… |
CVE-2026-15758 | Medium | 5.3 | 2026-09-15 | The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all version… |
CVE-2026-90881 | Medium | 5.3 | 2026-09-15 | A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HNAP1/dllog.cgi of the component CGI Binary. Execut… |
CVE-2026-90878 | Medium | 4.3 | 2026-09-15 | A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template… |
CVE-2026-90857 | Medium | 6.3 | 2026-09-15 | A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile… |
CVE-2026-91774 | Medium | 4.3 | 2026-09-15 | Yao through v1.0.0-rc22 authenticates but fails to authorize the GET /user/teams/:id endpoint, allowing any logged-in user to read full team records. Attackers… |
CVE-2026-91773 | Medium | 4.3 | 2026-09-15 | Soft Serve versions 0.7.1 through 0.11.6 fail to scope Git LFS lock queries by repository, allowing authenticated users to read lock metadata from repositories… |
CVE-2026-91772 | Medium | 6.1 | 2026-09-15 | Halo through 2.26.1 contains an open redirect vulnerability in the anonymous thumbnail endpoint that fails to validate the uri query parameter. Attackers can c… |
CVE-2026-91770 | Medium | 6.5 | 2026-09-15 | IceHRM before 36.0.0 fails to validate employee ownership on seven REST sub-resource endpoints, allowing authenticated employees to read any colleague's HR rec… |
CVE-2026-90851 | Medium | 6.3 | 2026-09-15 | A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of… |
CVE-2026-90848 | Medium | 4.3 | 2026-09-15 | A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a ma… |
CVE-2026-91750 | Medium | 6.5 | 2026-09-15 | WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint when downloading documents from… |
CVE-2026-85657 | Medium | 5.4 | 2026-09-15 | The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vulnerable to Stored Cross-Site Scripting… |
CVE-2026-85575 | Medium | 6.4 | 2026-09-15 | The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets plugin for WordPress is vulnerable… |
CVE-2026-91201 | Medium | 5.4 | 2026-09-14 | DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating sender origin. Attac… |
CVE-2026-91199 | Medium | 5.0 | 2026-09-14 | Refly through 1.1.0 contains a server-side request forgery vulnerability in the POST /v1/misc/scrape endpoint that fetches caller-supplied URLs without validat… |
CVE-2026-91198 | Medium | 5.3 | 2026-09-14 | GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experime… |
CVE-2026-91197 | Medium | 6.5 | 2026-09-14 | Flowable flowable-engine through 8.0.0 contains an XML external entity injection vulnerability in ProcessDiagramLayoutFactory.parseXml() that fails to disable… |
CVE-2026-90831 | Medium | 5.3 | 2026-09-14 | A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component EL… |
CVE-2026-90830 | Medium | 5.3 | 2026-09-14 | A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Se… |