Medium-severity CVEs (page 3)
Page 3 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-73555 | Medium | 5.3 | 2026-08-13 | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validation_exception_handler in vllm/entrypoints/openai/server_utils.py… |
CVE-2026-73508 | Medium | 5.3 | 2026-08-13 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.dns.AbstractDnsRecord, io… |
CVE-2026-73506 | Medium | 6.1 | 2026-08-13 | Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, write(s rune) in src/terminal/writer.go emitted att… |
CVE-2026-70462 | Medium | 6.5 | 2026-08-13 | rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connec… |
CVE-2026-70459 | Medium | 5.3 | 2026-08-13 | rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remote attackers to crash the daemon by send… |
CVE-2026-70457 | Medium | 6.5 | 2026-08-13 | rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is used directly as an index into a .bss-segm… |
CVE-2026-53801 | Medium | 5.9 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumer… |
CVE-2026-53800 | Medium | 4.7 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows attackers with symlink creation access to c… |
CVE-2026-53799 | Medium | 6.3 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply arbitrary ACLs or extended attributes to… |
CVE-2026-53798 | Medium | 5.3 | 2026-08-13 | rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferr… |
CVE-2026-53797 | Medium | 4.7 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who can manipulate a parent di… |
CVE-2026-53796 | Medium | 6.3 | 2026-08-13 | rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the non-daemon receiver's destination directory handling th… |
CVE-2026-53794 | Medium | 5.3 | 2026-08-13 | rsync before 3.5.0 contains a logic error in --max-alloc handling that allows a sender or configuration setting --max-alloc=0 to disable allocation sanity chec… |
CVE-2026-53792 | Medium | 6.5 | 2026-08-13 | rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory acce… |
CVE-2026-53789 | Medium | 6.5 | 2026-08-13 | rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope of --delete operations beyond the intend… |
CVE-2026-53788 | Medium | 6.5 | 2026-08-13 | rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol mes… |
CVE-2026-53786 | Medium | 6.5 | 2026-08-13 | rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-level filter restrictions by supplying mali… |
CVE-2026-49856 | Medium | 4.3 | 2026-08-13 | @jshookmcp/jshook is an MCP server that gives AI agents tools for JavaScript analysis and security research. In version 0.3.1, he network domain has a central… |
CVE-2026-49820 | Medium | 4.7 | 2026-08-13 | Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Probo's `saferedirect` package validates red… |
CVE-2026-14256 | Medium | 4.7 | 2026-08-13 | ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated… |
CVE-2026-73403 | Medium | 5.3 | 2026-08-13 | Unauthenticated Broken Access Control in User Registration <= 5.2.6 versions. |
CVE-2026-73401 | Medium | 5.3 | 2026-08-13 | Unauthenticated Broken Access Control in InstaWP Connect <= 0.1.3.7 versions. |
CVE-2026-73357 | Medium | 6.5 | 2026-08-13 | Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions. |
CVE-2026-73353 | Medium | 5.3 | 2026-08-13 | Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce < 4.22.10 versions. |
CVE-2026-73349 | Medium | 5.3 | 2026-08-13 | Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions. |
CVE-2026-73344 | Medium | 5.9 | 2026-08-13 | Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions. |
CVE-2026-73340 | Medium | 6.5 | 2026-08-13 | Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions. |
CVE-2026-67990 | Medium | 5.4 | 2026-08-13 | basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An un… |
CVE-2026-66693 | Medium | 6.5 | 2026-08-13 | Subscriber Broken Access Control in Motors <= 1.4.113 versions. |
CVE-2026-66689 | Medium | 6.3 | 2026-08-13 | Unauthenticated Broken Access Control in Anti Spam and list cleaner – AcyChecker <= 2.0.0 versions. |
CVE-2026-66687 | Medium | 6.5 | 2026-08-13 | Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions. |
CVE-2026-66660 | Medium | 6.5 | 2026-08-13 | Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on <= 2.5.1 versions. |
CVE-2026-66654 | Medium | 6.0 | 2026-08-13 | Subscriber Server Side Request Forgery (SSRF) in Vehica Core <= 1.0.104 versions. |
CVE-2026-66471 | Medium | 6.5 | 2026-08-13 | Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions. |
CVE-2026-66467 | Medium | 6.5 | 2026-08-13 | Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions. |
CVE-2026-66464 | Medium | 6.5 | 2026-08-13 | Unauthenticated Broken Access Control in Internal Link Optimiser <= 5.2.7 versions. |
CVE-2026-66460 | Medium | 6.5 | 2026-08-13 | Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions. |
CVE-2026-66459 | Medium | 6.5 | 2026-08-13 | Unauthenticated Broken Access Control in AI for SEO <= 2.4.2 versions. |
CVE-2026-66456 | Medium | 6.5 | 2026-08-13 | Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions. |
CVE-2026-66455 | Medium | 6.0 | 2026-08-13 | Subscriber Broken Access Control in ReactPress <= 3.4.0 versions. |
CVE-2026-66454 | Medium | 6.5 | 2026-08-13 | Unauthenticated Broken Access Control in WP Social Avatar <= 1.5 versions. |
CVE-2026-66444 | Medium | 6.5 | 2026-08-13 | Subscriber Sensitive Data Exposure in Payment Forms for Paystack <= 4.0.5 versions. |
CVE-2026-61978 | Medium | 6.5 | 2026-08-13 | Unauthenticated Broken Access Control in Secure Card Gateway for ePay Paycenter (Piraeus Bank) <= 1.0.32 versions. |
CVE-2026-28182 | Medium | 6.5 | 2026-08-13 | Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions. |
CVE-2026-28181 | Medium | 6.5 | 2026-08-13 | Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions. |
CVE-2026-28174 | Medium | 6.5 | 2026-08-13 | Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions. |
CVE-2026-28159 | Medium | 6.5 | 2026-08-13 | Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions. |
CVE-2026-28155 | Medium | 6.5 | 2026-08-13 | Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions. |
CVE-2026-27999 | Medium | 6.5 | 2026-08-13 | Subscriber Broken Access Control in Tourfic <= 2.23.1 versions. |
CVE-2026-27537 | Medium | 6.5 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions. |
CVE-2026-21832 | Medium | 4.3 | 2026-08-13 | HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output. Injected markup may be displayed to user… |
CVE-2025-62314 | Medium | 5.6 | 2026-08-13 | HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or scripted requests may be submitted witho… |
CVE-2026-73585 | Medium | 6.3 | 2026-08-13 | A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlin… |
CVE-2026-73584 | Medium | 6.3 | 2026-08-13 | A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary… |
CVE-2026-73583 | Medium | 6.6 | 2026-08-13 | A flaw was found in sblim-sfcb. A local attacker with access to the system can exploit an unsafe deserialization vulnerability in the provider-manager's inter-… |
CVE-2026-6470 | Medium | 4.3 | 2026-08-13 | Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a depen… |
CVE-2026-18024 | Medium | 4.3 | 2026-08-13 | Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value… |
CVE-2026-14681 | Medium | 4.2 | 2026-08-13 | Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS… |
CVE-2026-14678 | Medium | 4.3 | 2026-08-13 | Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory v… |
CVE-2026-14672 | Medium | 5.3 | 2026-08-13 | Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM itera… |
CVE-2026-14666 | Medium | 4.2 | 2026-08-13 | Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level secu… |
CVE-2026-14663 | Medium | 6.5 | 2026-08-13 | Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL ver… |
CVE-2025-52640 | Medium | 4.7 | 2026-08-13 | HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes shar… |
CVE-2026-73628 | Medium | 6.1 | 2026-08-13 | Serendipity versions >= 2.3.5 and <= 2.6.0 contain a reflected cross-site scripting vulnerability in the search clean-URL route (/search/<term>). In include/fu… |
CVE-2026-73621 | Medium | 5.4 | 2026-08-13 | GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count() method, which forwards keyword arguments to 'git rev-list' without t… |
CVE-2026-73619 | Medium | 6.5 | 2026-08-13 | GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers… |
CVE-2026-73616 | Medium | 6.5 | 2026-08-13 | OpenRemote notification deletion endpoints fail to enforce realm boundaries, allowing any realm administrator to delete notifications belonging to other realms… |
CVE-2026-73611 | Medium | 6.8 | 2026-08-13 | File Browser versions from 2.50.0 through 2.63.21 fail to validate JWT expiration when proxy authentication is configured with a non-default logout page. Attac… |
CVE-2026-73610 | Medium | 5.8 | 2026-08-13 | SiYuan before v3.7.4 contains an information disclosure vulnerability in the local storage filter that returns the administrator's entire storage map with only… |
CVE-2026-73609 | Medium | 5.8 | 2026-08-13 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getBookmarkLabels endpoint that returns all bookmark labels in the workspa… |
CVE-2026-73607 | Medium | 5.8 | 2026-08-13 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/storage/getOutlineStorage endpoint that performs no authorization che… |
CVE-2026-73606 | Medium | 5.8 | 2026-08-13 | SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/block/getRefIDs endpoint that fails to check password-protected docum… |
CVE-2026-73605 | Medium | 5.8 | 2026-08-13 | SiYuan versions before v3.7.4 contain a path traversal vulnerability in the getUniqueFilename endpoint that allows anonymous readers to probe filesystem existe… |
CVE-2026-73604 | Medium | 6.5 | 2026-08-13 | Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in pl… |
CVE-2026-59502 | Medium | 5.3 | 2026-08-13 | CWE-203: Observable Discrepancy |
CVE-2026-19696 | Medium | 6.6 | 2026-08-13 | Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows |
CVE-2026-19695 | Medium | 4.7 | 2026-08-13 | Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service |
CVE-2026-19694 | Medium | 4.7 | 2026-08-13 | TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service |
CVE-2026-14332 | Medium | 5.4 | 2026-08-13 | The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or nonce verification on one of its store-man… |
CVE-2026-14298 | Medium | 6.5 | 2026-08-13 | Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to properly limit resource consumption when processing certa… |
CVE-2026-3639 | Medium | 6.4 | 2026-08-13 | The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ppwp` shortcode attributes in all version… |
CVE-2026-18622 | Medium | 4.7 | 2026-08-13 | Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field d… |
CVE-2026-3835 | Medium | 5.3 | 2026-08-13 | The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access of protected files due to insufficient token vali… |
CVE-2026-19088 | Medium | 5.4 | 2026-08-13 | The ShopEngine Elementor WooCommerce Builder Addon WordPress plugin before 4.9.3 does not protect one of its authentication endpoints against CSRF, allowing a… |
CVE-2026-13328 | Medium | 5.3 | 2026-08-13 | The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed… |
CVE-2026-72506 | Medium | 5.4 | 2026-08-13 | VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication ch… |
CVE-2026-19182 | Medium | 4.3 | 2026-08-13 | An incorrect authorization check in the v2 Alarm REST API in OpenNMS Meridian and Horizon allows a low-privileged authenticated user (ROLE_REST) to acknowledge… |
CVE-2026-19135 | Medium | 5.4 | 2026-08-13 | A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expressi… |
CVE-2026-18728 | Medium | 6.5 | 2026-08-13 | A flaw was found in open-iscsi. An integer underflow vulnerability in the `iscsiuio` component, specifically during IPv4 Dynamic Host Configuration Protocol (D… |
CVE-2026-50544 | Medium | 6.3 | 2026-08-13 | NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the… |
CVE-2026-17431 | Medium | 6.1 | 2026-08-13 | PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and of stylesheet paths in _style_tag_for… |
CVE-2026-71194 | Medium | 6.8 | 2026-08-12 | In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the s… |
CVE-2026-7366 | Medium | 4.2 | 2026-08-12 | IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows… |
CVE-2026-71846 | Medium | 6.5 | 2026-08-12 | A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, w… |
CVE-2026-18750 | Medium | 5.3 | 2026-08-12 | vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL and toggles email_function/name without checking the record's c… |
CVE-2026-18744 | Medium | 6.5 | 2026-08-12 | Any authenticated case participant can fetch any OTHER vendor's CaseStatement + per-vul CaseMemberStatus by supplying that member's id — test_func only checks… |
CVE-2026-18727 | Medium | 6.5 | 2026-08-12 | A flaw was found in open-iscsi's iscsiuio component. This vulnerability involves an integer underflow and out-of-bounds read during Dynamic Host Configuration… |
CVE-2026-18726 | Medium | 6.5 | 2026-08-12 | A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a Denial of Service (DoS) in the iscsiui… |
CVE-2026-73490 | Medium | 4.7 | 2026-08-12 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.2, Loofah's HTML5 sanit… |
CVE-2026-73430 | Medium | 5.3 | 2026-08-12 | Russh is a Rust SSH client & server library. Prior to 0.62.4, an unauthenticated SSH client can cause a denial of service by sending SSH_MSG_KEX_ECDH_INIT with… |