Medium-severity CVEs (page 27)
Page 27 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-82776 | Medium | 6.1 | 2026-09-14 | Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user'… |
CVE-2026-82775 | Medium | 4.3 | 2026-09-14 | An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL… |
CVE-2026-82773 | Medium | 6.1 | 2026-09-14 | Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary… |
CVE-2026-82771 | Medium | 5.4 | 2026-09-14 | Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user'… |
CVE-2026-82769 | Medium | 5.4 | 2026-09-14 | Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in us… |
CVE-2026-82767 | Medium | 5.2 | 2026-09-14 | Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. |
CVE-2026-82764 | Medium | 4.3 | 2026-09-14 | Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product… |
CVE-2026-82763 | Medium | 5.4 | 2026-09-14 | Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script ma… |
CVE-2024-23176 | Medium | 5.4 | 2026-09-14 | An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-pag… |
CVE-2023-51769 | Medium | 6.1 | 2026-09-14 | Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages. |
CVE-2023-50462 | Medium | 5.3 | 2026-09-14 | An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3. It fails to verify whether a specified content element… |
CVE-2023-50460 | Medium | 5.4 | 2026-09-14 | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actio… |
CVE-2023-50459 | Medium | 5.4 | 2026-09-14 | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user component. An authenticat… |
CVE-2026-90687 | Medium | 6.3 | 2026-09-14 | A vulnerability was determined in GPAC up to f1219cde. This vulnerability affects the function gf_node_changed_internal of the file scenegraph/base_scenegraph… |
CVE-2026-90686 | Medium | 5.3 | 2026-09-14 | A vulnerability was found in GPAC up to f1219cde. This affects the function gf_bt_report of the file scene_manager/loader_bt.c of the component MP4Box. The man… |
CVE-2023-46035 | Medium | 5.9 | 2026-09-14 | The svg_optimizer gem before 0.3.0 for Ruby performs entity expansion on untrusted documents. |
CVE-2023-45023 | Medium | 4.2 | 2026-09-14 | The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component. |
CVE-2023-40772 | Medium | 4.3 | 2026-09-14 | A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticRe… |
CVE-2026-90682 | Medium | 5.3 | 2026-09-14 | A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component… |
CVE-2023-34854 | Medium | 6.6 | 2026-09-14 | HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function. |
CVE-2023-29377 | Medium | 6.6 | 2026-09-14 | An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to… |
CVE-2026-90621 | Medium | 6.3 | 2026-09-14 | A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function ssh_run_command of the file src/hackingBuddyGPT/extensions/ssh… |
CVE-2026-90615 | Medium | 4.3 | 2026-09-14 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Suc… |
CVE-2026-90614 | Medium | 6.3 | 2026-09-14 | A weakness has been identified in FedML-AI FedML up to 0.9.6. Affected by this issue is the function S3Storage.read_model of the file fedml/core/distributed/co… |
CVE-2026-33964 | Medium | 6.4 | 2026-09-14 | An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to… |
CVE-2026-33957 | Medium | 4.2 | 2026-09-14 | An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory from the custos_iwc device enables out-of-… |
CVE-2026-23792 | Medium | 4.0 | 2026-09-14 | An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, M… |
CVE-2026-23791 | Medium | 4.2 | 2026-09-14 | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. An out-of-bounds write vulnerabilit… |
CVE-2026-23790 | Medium | 4.2 | 2026-09-14 | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the… |
CVE-2026-23788 | Medium | 4.2 | 2026-09-14 | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DRM HDR driver (due to improper buffer si… |
CVE-2026-23787 | Medium | 4.2 | 2026-09-14 | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A Use-After-Free in the Exynos DRM… |
CVE-2025-68624 | Medium | 4.3 | 2026-09-14 | N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM… |
CVE-2025-63842 | Medium | 5.4 | 2026-09-14 | A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary… |
CVE-2024-53922 | Medium | 5.7 | 2026-09-14 | An issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto 8890, V7, V9, and V920. Lack of a length check leads to a Denial… |
CVE-2022-42917 | Medium | 6.7 | 2026-09-14 | In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replac… |
CVE-2026-90600 | Medium | 6.3 | 2026-09-13 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulat… |
CVE-2026-15892 | Medium | 5.3 | 2026-09-13 | The mcumgr SMP settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mgmt_delete() in subsys/mgmt/mcumgr/grp/settings_mg… |
CVE-2026-90599 | Medium | 4.3 | 2026-09-13 | A flaw has been found in Rizwan17 inventory-management-system up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. This affects an unknown function of the file incl… |
CVE-2026-90598 | Medium | 6.3 | 2026-09-13 | A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function… |
CVE-2026-90597 | Medium | 6.3 | 2026-09-13 | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/sup_e… |
CVE-2026-90596 | Medium | 6.5 | 2026-09-13 | A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytes_per_row of the file src/image/image_raw… |
CVE-2026-90595 | Medium | 6.3 | 2026-09-13 | A security flaw has been discovered in wxiaoqi Spring-Cloud-Platform 1.0/2.2/3.0. This issue affects the function OnlineController.getOnlineInfo of the file ac… |
CVE-2026-90594 | Medium | 6.3 | 2026-09-13 | A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0. This vulnerability affects the function PermissionService.checkUserPermission of t… |
CVE-2026-90584 | Medium | 5.3 | 2026-09-13 | A weakness has been identified in TooTallNate Java-WebSocket up to 1.6.1. The impacted element is the function processFrameContinuousAndNonFin of the file Draf… |
CVE-2026-89050 | Medium | 4.3 | 2026-09-13 | The Quads Ads Manager for Google AdSense WordPress plugin before 3.0.5 does not verify payment completion with the configured payment gateway before marking an… |
CVE-2026-36989 | Medium | 5.8 | 2026-09-13 | A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php. |
CVE-2026-90583 | Medium | 4.3 | 2026-09-13 | A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the fi… |
CVE-2026-90582 | Medium | 5.3 | 2026-09-13 | A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo E… |
CVE-2026-90581 | Medium | 6.3 | 2026-09-13 | A vulnerability was determined in cym1102 nginxWebUI up to 4.4.2. This issue affects the function MainController.autoUpdate of the file /adminPage/main/autoUpd… |
CVE-2026-90580 | Medium | 6.3 | 2026-09-13 | A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the function axios.post of the file packages/server/src/controllers/eval… |
CVE-2026-29812 | Medium | 4.3 | 2026-09-13 | CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list. |
CVE-2026-29810 | Medium | 4.3 | 2026-09-13 | CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic. |
CVE-2026-90578 | Medium | 5.3 | 2026-09-13 | A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gf_list_count of the file utils/list.c of the component MP4Box. Executing… |
CVE-2026-90577 | Medium | 5.3 | 2026-09-13 | A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field of the file scenegraph/base_scenegraph.c… |
CVE-2025-70819 | Medium | 6.3 | 2026-09-13 | Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_… |
CVE-2020-15875 | Medium | 5.0 | 2026-09-13 | An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via… |
CVE-2026-90574 | Medium | 6.3 | 2026-09-13 | A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emp_transac.php?action=… |
CVE-2026-90572 | Medium | 4.7 | 2026-09-13 | A vulnerability was determined in davenardella snap7 up to 1.4.3. The affected element is the function TSnap7MicroClient::opUpload of the file src/core/s7_micr… |
CVE-2026-90571 | Medium | 4.3 | 2026-09-13 | A vulnerability was found in Exrick xmall up to 19e7917d5ed3bd2a2421a3a246ad494c133ba94c. Impacted is an unknown function of the file xmall-manager-web/src/mai… |
CVE-2026-90565 | Medium | 5.3 | 2026-09-13 | A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of… |
CVE-2026-90527 | Medium | 4.3 | 2026-09-13 | A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue o… |
CVE-2026-90525 | Medium | 6.3 | 2026-09-13 | A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/cust_pos_trans.php. Executin… |
CVE-2026-90782 | Medium | 5.3 | 2026-09-13 | S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed allocation for DataCh… |
CVE-2026-90781 | Medium | 4.4 | 2026-09-13 | alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when pars… |
CVE-2026-90521 | Medium | 6.3 | 2026-09-13 | A vulnerability was found in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. This issue affects some unknown processin… |
CVE-2026-90520 | Medium | 6.3 | 2026-09-13 | A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown c… |
CVE-2026-90519 | Medium | 6.3 | 2026-09-13 | A weakness has been identified in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file /blms/banker/add-locker-form.php. T… |
CVE-2026-90775 | Medium | 6.5 | 2026-09-13 | PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attacker… |
CVE-2026-90518 | Medium | 6.3 | 2026-09-13 | A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation… |
CVE-2026-90517 | Medium | 5.3 | 2026-09-13 | A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0. This affects an unknown function of the file /blms/view-assign-locker.php. The… |
CVE-2026-90767 | Medium | 6.5 | 2026-09-13 | Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add() endpoint, allowing customers to inject arbitrary lines into a… |
CVE-2026-90513 | Medium | 6.5 | 2026-09-13 | A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of t… |
CVE-2026-90511 | Medium | 6.3 | 2026-09-13 | A vulnerability was detected in GongShengyue OnlineBooks up to dfc5eacc08d3b0396c266049548618f6fb9587ea. This vulnerability affects unknown code of the file sr… |
CVE-2026-90507 | Medium | 6.3 | 2026-09-13 | A vulnerability was identified in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. Affected is the function get_surge_subscription of th… |
CVE-2026-90506 | Medium | 5.0 | 2026-09-13 | A vulnerability was determined in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This impacts an unknown function of the component Sav… |
CVE-2026-90505 | Medium | 5.0 | 2026-09-13 | A vulnerability was found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This affects the function doUpdateLicenseKey. The manipula… |
CVE-2026-90501 | Medium | 6.3 | 2026-09-13 | A security vulnerability has been detected in lenve vhr 1.0-SNAPSHOT. This issue affects the function HrInfoController.updateHr of the file HrMapper.xml. Such… |
CVE-2026-90500 | Medium | 6.3 | 2026-09-13 | A weakness has been identified in lenve vhr 1.0-SNAPSHOT. This vulnerability affects the function FastDFSUtils.upload of the file /hr/userface of the component… |
CVE-2026-90499 | Medium | 5.4 | 2026-09-13 | A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.updatePass of the file /hr/pass of the component Pass… |
CVE-2026-90496 | Medium | 4.7 | 2026-09-13 | A vulnerability was found in Fengoffice Feng Office up to 3.11.13.11. Affected is the function update_system_module_order/update_dimension_order of the file ap… |
CVE-2026-88995 | Medium | 5.3 | 2026-09-13 | The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.1 does not properly restrict the data returned by an availability-check request, allo… |
CVE-2026-88912 | Medium | 4.2 | 2026-09-13 | The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.12 does not check ownership before changing the privacy level of an activity and… |
CVE-2026-88764 | Medium | 5.4 | 2026-09-13 | The Simple Membership WordPress plugin before 4.7.8 does not validate that the membership level supplied in a PayPal payment notification matches the level con… |
CVE-2026-80072 | Medium | 4.7 | 2026-09-13 | The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unaut… |
CVE-2026-77773 | Medium | 5.3 | 2026-09-13 | The Contact Form to Chat Apps | Click to Chat to Order WordPress plugin before 2.15.8 does not perform any capability, nonce or session check on one of its pu… |
CVE-2026-90679 | Medium | 4.3 | 2026-09-13 | Forgejo 13.0.0 through 16.0.4, when "[federation] ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeo… |
CVE-2026-90494 | Medium | 5.3 | 2026-09-13 | A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. This manipulation caus… |
CVE-2026-90492 | Medium | 6.3 | 2026-09-13 | A security vulnerability has been detected in webgjc web_robot 2.4.0/2.5.0/2.8.0. The affected element is the function controller_listen/controller_recover of… |
CVE-2026-90491 | Medium | 6.3 | 2026-09-13 | A weakness has been identified in sanjevirau gsubs up to 1.0.3. Impacted is the function showQuerySuccessPage of the file renderer/index.js of the component El… |
CVE-2026-90490 | Medium | 6.3 | 2026-09-13 | A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This issue affects some unknown processing of the component MailReceiver. Performing a manipulat… |
CVE-2026-90488 | Medium | 6.3 | 2026-09-13 | A vulnerability was determined in Xuxueli xxl-job up to 3.4.2. This affects the function GroovyClassLoader.parseClass of the file xxl-job-core/src/main/java/co… |
CVE-2026-90487 | Medium | 4.3 | 2026-09-12 | A vulnerability was found in Xuxueli xxl-job up to 3.4.2. Affected by this issue is some unknown functionality of the file xxl-job-admin/src/main/java/com/xxl/… |
CVE-2026-90486 | Medium | 6.3 | 2026-09-12 | A vulnerability has been found in openstatusHQ openstatus up to f04c827112f30a11d571ebdad3892826034d6265. Affected by this vulnerability is an unknown function… |
CVE-2026-90485 | Medium | 5.5 | 2026-09-12 | A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub_11838 of the file IURegistryFilter.sys of the component IOCTL… |
CVE-2026-90557 | Medium | 6.1 | 2026-09-12 | Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit() when processing savegame files with invalid unit acti… |
CVE-2026-90555 | Medium | 6.5 | 2026-09-12 | vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks… |
CVE-2026-90554 | Medium | 6.2 | 2026-09-12 | vLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duration limit when extracting audio from video input for NanoNemotronVL models. In na… |
CVE-2026-90552 | Medium | 4.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the Playlists_schedules/list.json.php and Live/cale… |
CVE-2026-90551 | Medium | 5.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the video_from_program API endpoint, allowing unaut… |
CVE-2026-90550 | Medium | 5.3 | 2026-09-12 | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to check user authorization in the PlayerSkins mediaSession.json.php endpoint before… |