Medium-severity CVEs (page 45)

Page 45 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.

All medium-severity CVEs — newest first (page 45 of 100)
CVESeverityScorePublishedSummary
CVE-2026-59877Medium5.32026-07-08protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.5 and 8.6.6, protobufjs parsed option names by advancing through schema t…
CVE-2026-59876Medium4.82026-07-08protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 until 8.6.5, the protobufjs Text Format extension parsed string-keyed map e…
CVE-2026-59875Medium5.32026-07-08node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.17, node-tar does not strip NUL bytes from PAX path and linkpath records in src/pax.ts…
CVE-2026-59871Medium5.32026-07-08node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScrip…
CVE-2026-59870Medium5.32026-07-08js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.1, YAML11_SCHEMA support for the !!omap tag in src/tag/sequence/omap.ts uses omapTag.addI…
CVE-2026-59868Medium5.32026-07-08js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yaml can spend quadratic CPU time parsing a document w…
CVE-2026-59262Medium6.52026-07-08AFFiNE's histories GraphQL field fails to validate Doc.Read permission before exposing document edit history, allowing authenticated workspace members to retri…
CVE-2026-57439Medium5.02026-07-08CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.2.0, the Series Chart operation accepts __proto__ as a key while p…
CVE-2026-55761Medium5.92026-07-08Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and…
CVE-2026-54344Medium4.72026-07-08ToolJet is an open-source low-code platform for building internal tools. Prior to 3.20.180, ToolJet's render preview deployment workflow interpolates github.ev…
CVE-2026-15063Medium6.32026-07-08A flaw was found in the gorch service template, which is part of the trustyai-service-operator. Even when authentication is enabled, the gorch service exposes…
CVE-2026-55873Medium4.32026-07-08SeaweedFS is a distributed storage system. In versions 4.08 through 4.33, requests signed with SigV4 service s3tables are routed to the S3Tables management API…
CVE-2026-55668Medium6.32026-07-08File Browser provides a web file managing interface. Prior to 2.63.16, ScopedFs validates the nearest existing ancestor of a dangling symlink as in scope and t…
CVE-2026-15044Medium6.32026-07-08A flaw was found in the TrustyAI Service Operator. When deploying services like gorch or NemoGuardrails, if a specific security setting is not enabled, these s…
CVE-2026-15036Medium4.32026-07-08A vulnerability was determined in Harness up to 2.28.2. This vulnerability affects the function getAuthorizedSpaces of the file app/api/controller/gitspace/lis…
CVE-2026-60092Medium6.12026-07-08AVideo (Meet plugin) through commit e8d6119f3cb1b849149906efeb0a41fc024f59f8 contains a stored cross-site scripting vulnerability in the Meet plugin's getMeetI…
CVE-2026-59253Medium5.02026-07-08n8n before 2.28.0 contains an improper authorization vulnerability allowing authenticated users to assign workflows to folders in other projects. Attackers can…
CVE-2026-58657Medium4.82026-07-08Grav before 2.0.0 (affected through 2.0.0-rc.9 and the 2.0 branch) contains a stored CSS injection vulnerability in the Markdown image resize() media action. P…
CVE-2026-58654Medium4.32026-07-08The Grav API plugin (getgrav/grav-plugin-api) 1.0.0 contains an unrestricted file upload vulnerability in the avatar upload endpoint (/api/v1/users/user/avatar…
CVE-2026-56778Medium6.42026-07-08n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API execution retry endpoint, which authorizes access using the workf…
CVE-2026-56775Medium5.42026-07-08n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three mutating evaluation test-run endpoints that authorize state-changing a…
CVE-2026-56360Medium4.02026-07-08n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook UR…
CVE-2026-56359Medium5.42026-07-08n8n before 2.8.0 contains a cross-site scripting vulnerability in the credential management flow where authenticated users can inject malicious JavaScript URLs…
CVE-2026-56298Medium4.32026-07-08Capgo before 12.128.2 fails to strip EXIF metadata from images uploaded via the app information endpoint, exposing sensitive geolocation data. Attackers can up…
CVE-2026-56293Medium5.42026-07-08Capgo before 12.128.2 contains an authorization flaw in transfer_app() that fails to update deploy_history.owner_org when transferring applications between org…
CVE-2026-56284Medium5.32026-07-08Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST RPC function public.get_total_metrics(org_id)…
CVE-2026-56283Medium5.42026-07-08Capgo before 12.128.2 contains an html injection vulnerability in the organization settings endpoint that allows attackers to inject malicious HTML content. At…
CVE-2026-56273Medium6.52026-07-08Flowise before 3.1.0 contains a path traversal vulnerability in Faiss and SimpleStore vector store implementations that accept unsanitized basePath parameters…
CVE-2026-56220Medium6.52026-07-08Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.manifest INSERT policy that allows read-only org members to insert OTA manif…
CVE-2026-56217Medium4.32026-07-08Capgo before 12.128.2 contains a policy bypass vulnerability in app_versions update enforcement that allows app-scoped API keys to downgrade encrypted bundles…
CVE-2026-15035Medium5.32026-07-08A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repos…
CVE-2026-15034Medium4.32026-07-08A vulnerability has been found in flask-dashboard Flask-MonitoringDashboard up to 5.0.2. Affected by this issue is some unknown functionality. Such manipulatio…
CVE-2026-15033Medium6.32026-07-08A flaw has been found in christopherthielen check-peer-dependencies up to 4.3.4. Affected by this vulnerability is the function shelljs.exec of the file dist/p…
CVE-2026-8315Medium5.42026-07-08Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webbeyaz Web Design Mediküm Web allows Stored XSS. This…
CVE-2026-8310Medium6.12026-07-08Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webbeyaz Web Design Mediküm Web allows Reflected XSS. Th…
CVE-2026-6740Medium6.42026-07-08The Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'commentIcon'…
CVE-2026-6459Medium6.42026-07-08The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Cale…
CVE-2026-5459Medium5.32026-07-08The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct O…
CVE-2026-12002Medium4.72026-07-08The Smash Balloon Social Photo Feed – Easy Social Feeds Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl…
CVE-2026-6742Medium6.42026-07-08The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'additional' parameter in all versions up to, and including, 2026…
CVE-2026-6371Medium4.82026-07-08Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Limatek System Inc. LimRAD NAC allows Stored XSS. This i…
CVE-2026-14250Medium6.32026-07-08The Themehunk Login Registration plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.0.2. This is due to the handle_…
CVE-2026-12936Medium4.92026-07-08The Recurio – Ultimate Subscription for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'data' parameter in all versions up to…
CVE-2025-14785Medium6.42026-07-08The Website Builder by SeedProd - Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to Stored Cross-Si…
CVE-2026-6280Medium6.52026-07-08Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT Informatics Education and Consulting Inc. Nomysem allows Accessing Fun…
CVE-2026-57259Medium6.52026-07-08The input file does not need to be strictly in a structurally valid PDF format. Instead, after reviewing the content, the original document disguised as a PDF…
CVE-2026-57258Medium6.12026-07-08The PRC file header parsing logic trusts the constructed file structure description information, assumes that the underlying array contains elements and reads…
CVE-2026-57257Medium6.12026-07-08During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the entity array. As a…
CVE-2026-57255Medium6.12026-07-08The application opens a PDF containing an abnormal color space whose attributes reference a valid but semantically malformed function. The function's output is…
CVE-2026-57253Medium6.12026-07-08An abnormal image object causes the renderer to enter the wrong processing branch. When converting the scan lines, an invalid image buffer pointer is used, res…
CVE-2026-57243Medium6.12026-07-08During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page in…
CVE-2026-57241Medium6.12026-07-08The application opens the PDF, and JavaScript performs operations on the page and the document, causing the page-related objects within the application to lose…
CVE-2026-9731Medium4.32026-07-08The Wp Js Detect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.9. This is due to missing or incorr…
CVE-2026-14500Medium5.32026-07-08The Bulk Order Update for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 1.6. This is due to the bouw_…
CVE-2026-12097Medium5.32026-07-08The User Management plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2. This is due to the plugin not properl…
CVE-2026-12041Medium4.42026-07-08The Chatra Live Chat + ChatBot + Cart Saver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and inc…
CVE-2026-11798Medium6.12026-07-08The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'heat…
CVE-2026-10570Medium6.42026-07-08The Sympl Repeater for ACF and Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ACF repeater field values in all versions up to…
CVE-2026-60001Medium6.52026-07-08sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
CVE-2026-59999Medium5.92026-07-08In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.
CVE-2026-59998Medium4.82026-07-08sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.
CVE-2026-59997Medium4.22026-07-08internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would…
CVE-2026-59996Medium4.22026-07-08scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.
CVE-2026-59995Medium4.22026-07-08sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.
CVE-2026-55438Medium5.82026-07-08Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.17, 2.32.7, 2.33.8, and 2.34.2, Coder's subdomain…
CVE-2026-55437Medium5.42026-07-08Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.17, 2.32.7, 2.33.8, and 2.34.2, the `AgentLogLine…
CVE-2026-55433Medium5.42026-07-08Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the devcontainer r…
CVE-2026-55432Medium5.42026-07-08Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `CreateSubAgen…
CVE-2026-55430Medium5.82026-07-08Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the workspace app…
CVE-2026-55079Medium4.92026-07-08Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.24.0 and prior to versions 2.29.7, 2.32.7, 2.33.8…
CVE-2026-55078Medium6.52026-07-07Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and prior to versions 2.29.7, 2.32.7, 2.33.8…
CVE-2026-50811Medium6.52026-07-07An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in…
CVE-2026-50810Medium5.52026-07-07A NULL pointer dereference in smooth_parse_stream_index() in src/media_tools/mpd.c in GPAC master HEAD before commit b35c61f104b85fbb16520ac2838d5d2ef70845b5 a…
CVE-2026-36163Medium5.42026-07-07An HTML injection vulnerability in the file view endpoint of LiquidFiles v4.2.7 allows authenticated attackers to execute arbitrary JavaScript in the context o…
CVE-2026-36162Medium5.42026-07-07An authenticated stored cross-site scripting (XSS) vulnerability in the Upload File Shares API of LiquidFiles v4.2.7 allows attackers to execute arbitrary Java…
CVE-2026-58266Medium6.52026-07-07Anki is a program for creating and reviewing flashcards. Prior to 25.09.4, Anki's webview-based pages communicate with the Rust backend using an internal local…
CVE-2026-55490Medium6.52026-07-07OpenWrt is a Linux operating system targeting embedded devices. Before v25.12.5, an integer underflow in handle_send_a() of the Emergency Access Daemon allows…
CVE-2026-54601Medium6.32026-07-07FastGPT is an open source AI knowledge base platform. From 4.14.17 to before 4.15.0-beta4, FastGPT allows an authenticated tenant user to call POST /api/core/d…
CVE-2026-50179Medium4.22026-07-07Actual is a local-first personal finance tool. Prior to 26.6.0, exportToCSV and exportQueryToCSV in packages/loot-core/src/server/transactions/export/export-to…
CVE-2026-45796Medium6.52026-07-07Coder allows organizations to provision remote development environments via Terraform. Versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3 a…
CVE-2026-58472Medium5.92026-07-07GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allow…
CVE-2026-58471Medium5.92026-07-07GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows re…
CVE-2026-58470Medium5.32026-07-07GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parse_content_range() function within src/http.c that allow…
CVE-2026-55434Medium6.52026-07-07Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.33.0 and prior to versions 2.33.8 and 2.34.2, AI B…
CVE-2026-53935Medium6.92026-07-07Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to cre…
CVE-2026-46700Medium4.32026-07-07Actual is a local-first personal finance tool. Prior to 26.6.0, the GET /secret/:name endpoint in @actual-app/sync-server checks only that the caller has a val…
CVE-2026-46672Medium4.62026-07-07Actual is a local-first personal finance app. Prior to 26.6.0, @actual-app/cli ships a hand-rolled CSV serializer in packages/cli/src/output.ts used whenever t…
CVE-2026-58468Medium5.52026-07-07NocoBase through 2.1.20 contains a server-side request forgery vulnerability in the serverRequest wrapper that allows authenticated administrators to issue arb…
CVE-2026-44877Medium6.52026-07-07An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant On 1830, 1930, and 1960 Switches. Successful exploitation of t…
CVE-2026-55435Medium5.42026-07-07Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.3…
CVE-2026-48956Medium5.02026-07-07An improper access check allows users to display a list of modules in the frontend.
CVE-2026-48955Medium6.52026-07-07An improper access check allows unauthorized users to access workflow stage and transition information.
CVE-2026-48954Medium6.12026-07-07Improper validation leads to a generic XSS vector in the language override feature.
CVE-2026-48953Medium6.12026-07-07Lack of escaping leads to an XSS vulnerability in the generic image output layout.
CVE-2026-48952Medium6.12026-07-07Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
CVE-2026-48951Medium6.12026-07-07Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
CVE-2026-48950Medium6.12026-07-07Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
CVE-2026-48949Medium6.12026-07-07Lack of validation leads to an XSS vulnerability in the MFA management views.
CVE-2026-48947Medium4.92026-07-07An improper access check allows privileged users to overwrite media files without editing permissions.
CVE-2026-14904Medium6.52026-07-07AWS Research and Engineering Studio (RES) is an open-source solution that enables researchers and engineers to create and manage secure virtual desktops and co…