Medium-severity CVEs (page 50)
Page 50 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-67395 | Medium | 5.9 | 2026-09-01 | A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By leveragi… |
CVE-2026-82396 | Medium | 5.4 | 2026-08-31 | Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/MediaBundle/Controller… |
CVE-2026-77353 | Medium | 4.6 | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos allows authenticated users to inject arbitrary iCalendar… |
CVE-2026-77352 | Medium | 4.3 | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. From version 2.0.0 to before version 5.0.0, any authenticated Wallos user (no admin righ… |
CVE-2026-82909 | Medium | 4.3 | 2026-08-31 | A vulnerability was determined in QuantumNous new-api up to 1.0.0-rc.15. Affected by this issue is some unknown functionality of the file /api/usage/token/ of… |
CVE-2026-82852 | Medium | 5.4 | 2026-08-31 | Unauthenticated Server Side Request Forgery (SSRF) in MapSVG <= 8.15.0 versions. |
CVE-2026-81890 | Medium | 5.4 | 2026-08-31 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, the netmount command is omitted from elFinderConnector… |
CVE-2026-81888 | Medium | 5.4 | 2026-08-31 | @hono/oauth-providers is Authentication middleware for Hono. Prior to version 0.8.6, the built-in social login providers accept an OAuth callback even when the… |
CVE-2026-81778 | Medium | 6.5 | 2026-08-31 | Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions. |
CVE-2026-81762 | Medium | 6.5 | 2026-08-31 | Subscriber Broken Access Control in Booking and Rental Manager <= 2.7.6 versions. |
CVE-2026-81758 | Medium | 6.3 | 2026-08-31 | Subscriber Broken Access Control in OwnerRez API <= 1.2.6 versions. |
CVE-2026-81280 | Medium | 6.5 | 2026-08-31 | Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders <= 4.0.0 versions. |
CVE-2026-81278 | Medium | 5.4 | 2026-08-31 | Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Post SM… |
CVE-2026-79483 | Medium | 5.3 | 2026-08-31 | FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attack… |
CVE-2026-75460 | Medium | 6.5 | 2026-08-31 | XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /api/teacher/user/page/list. The role para… |
CVE-2026-54179 | Medium | 4.4 | 2026-08-31 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administratio… |
CVE-2026-50199 | Medium | 4.3 | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpoints/currency/update_exchange.php loads the first Fixer/API… |
CVE-2026-50198 | Medium | 4.3 | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, an authenticated user can edit their own inactive subscription a… |
CVE-2025-63607 | Medium | 6.1 | 2026-08-31 | TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application echoes the id parameter verbatim into the rendered page, permitt… |
CVE-2026-82905 | Medium | 6.3 | 2026-08-31 | A vulnerability was detected in sdcb chats up to 1.12.0. This affects the function McpController of the file src/BE/web/Controllers/Users/Mcps/McpController.cs… |
CVE-2026-82835 | Medium | 5.4 | 2026-08-31 | A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of… |
CVE-2026-82834 | Medium | 5.4 | 2026-08-31 | A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a… |
CVE-2026-82833 | Medium | 6.3 | 2026-08-31 | A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Docum… |
CVE-2026-81267 | Medium | 5.4 | 2026-08-31 | A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to r… |
CVE-2026-52730 | Medium | 4.3 | 2026-08-31 | Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing Authorization… |
CVE-2026-51739 | Medium | 5.9 | 2026-08-31 | Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger cloud update che… |
CVE-2026-51737 | Medium | 5.3 | 2026-08-31 | Incorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase traceroute logs via… |
CVE-2026-51732 | Medium | 5.3 | 2026-08-31 | Incorrect access control in the delWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove Wi-Fi schedule entr… |
CVE-2026-14697 | Medium | 6.5 | 2026-08-31 | net_ipv6_send_ns() in subsys/net/ip/ipv6_nbr.c allocates a transmit net_pkt for a Neighbor Solicitation. When it is called with a data packet pending on an unr… |
CVE-2026-82821 | Medium | 4.3 | 2026-08-31 | A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amf_object_get of the file src/amf.c of the component AMF… |
CVE-2026-82820 | Medium | 4.3 | 2026-08-31 | A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amf_string_new of the file src/amf.c of the component AMF String Processing. The man… |
CVE-2026-82818 | Medium | 6.3 | 2026-08-31 | A vulnerability was determined in dibo-software diboot 3.8.0. This affects an unknown part of the file /api/iam/tenant/resource of the component Tenant Resourc… |
CVE-2026-14696 | Medium | 6.5 | 2026-08-31 | When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), eth_bridge_input_process() in subsys/net/l2/ethernet/bridge/bridge_input.c decides how each fra… |
CVE-2026-14368 | Medium | 5.4 | 2026-08-31 | The LwM2M JSON content formatter's get_string() in subsys/net/lib/lwm2m/lwm2m_rw_json.c copies a parsed JSON string into a caller-supplied buffer and NUL-termi… |
CVE-2023-20511 | Medium | 6.4 | 2026-08-31 | Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentially leading to ar… |
CVE-2026-82817 | Medium | 6.3 | 2026-08-31 | A vulnerability was found in dibo-software diboot 3.8.0. Affected by this issue is some unknown functionality of the file /admin/ of the component Tenant Admin… |
CVE-2026-82816 | Medium | 6.3 | 2026-08-31 | A vulnerability has been found in dibo-software diboot 3.8.0. Affected by this vulnerability is an unknown functionality of the file /api/ai-session/ of the co… |
CVE-2026-82813 | Medium | 5.4 | 2026-08-31 | A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the function TBGlobal.GetToken of the file tubebu… |
CVE-2026-82811 | Medium | 5.4 | 2026-08-31 | A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. Th… |
CVE-2026-51727 | Medium | 5.3 | 2026-08-31 | Incorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to retrieve administrative import… |
CVE-2026-19953 | Medium | 6.5 | 2026-08-31 | URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each ho… |
CVE-2026-82809 | Medium | 4.3 | 2026-08-31 | A security flaw has been discovered in vidIQ Vision for YouTube Extension 3.199.0 on Chrome. The affected element is the function window.addEventListener of th… |
CVE-2026-14366 | Medium | 6.4 | 2026-08-31 | The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c frees a network packet it does not own. In the Z… |
CVE-2026-82805 | Medium | 4.3 | 2026-08-31 | A vulnerability was found in Typora up to 1.13.8/1.14.6. This vulnerability affects unknown code of the component Mermaid Rendering Engine. The manipulation of… |
CVE-2026-82803 | Medium | 5.3 | 2026-08-31 | A vulnerability has been found in armink struct2json 1.0. This affects the function S2J_STRUCT_GET_string_ELEMENT in the library struct2json/inc/s2jdef.h of th… |
CVE-2026-82802 | Medium | 5.3 | 2026-08-31 | A flaw has been found in NASA earthdata-search 1.0.0. Affected by this issue is the function OpenSearchGranuleSearchLambda of the file serverless/src/openSearc… |
CVE-2026-77975 | Medium | 6.5 | 2026-08-31 | The affected Ebyte product exports administrative credentials and other sensitive configuration information without adequate protection. An unauthenticated… |
CVE-2026-75132 | Medium | 6.5 | 2026-08-31 | WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the `columns` parameter of the GET `/api/v3/hosts` endpoint. A remote au… |
CVE-2026-51714 | Medium | 5.9 | 2026-08-31 | Incorrect access control in the setRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter roaming behavior via send… |
CVE-2026-51712 | Medium | 5.9 | 2026-08-31 | Incorrect access control in the setApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter wireless availability w… |
CVE-2026-51706 | Medium | 4.3 | 2026-08-31 | Incorrect access control in the setSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to degrade traffic handling via s… |
CVE-2026-51704 | Medium | 4.3 | 2026-08-31 | Incorrect access control in the setWiFiMeshConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter mesh configurations v… |
CVE-2026-51703 | Medium | 5.4 | 2026-08-31 | Incorrect access control in the setWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter when Wi-Fi is availa… |
CVE-2026-51702 | Medium | 4.3 | 2026-08-31 | Incorrect access control in the setIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter firewall policies… |
CVE-2026-51153 | Medium | 5.4 | 2026-08-31 | Stored Cross-Site Scripting (XSS) in TaskRunHandler.post() in web/handlers/task.py in QD 20220208 through 20250803. When a task is run via /task/<taskid>/run… |
CVE-2026-82703 | Medium | 6.6 | 2026-08-31 | A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function system of the file www/ping.asp of the component asp_setPi… |
CVE-2026-82702 | Medium | 6.6 | 2026-08-31 | A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component asp_WlanMP Endpoint. Such… |
CVE-2026-51683 | Medium | 4.3 | 2026-08-31 | Incorrect access control in the setLanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter LAN network configuration via… |
CVE-2026-82700 | Medium | 4.3 | 2026-08-31 | A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php o… |
CVE-2026-82698 | Medium | 5.3 | 2026-08-31 | A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown function of the fil… |
CVE-2026-76986 | Medium | 6.1 | 2026-08-31 | Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.AbstractSingleSelectChoice, the base class of… |
CVE-2026-76985 | Medium | 5.4 | 2026-08-31 | Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html.form.palette.component.AbstractOptions… |
CVE-2026-51678 | Medium | 4.3 | 2026-08-31 | Incorrect access control in the setSyslogCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter logging behavior via sendi… |
CVE-2026-82696 | Medium | 6.3 | 2026-08-31 | A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/inv_searchfrm.php… |
CVE-2026-74010 | Medium | 5.3 | 2026-08-31 | Missing Authorization vulnerability in John James Jacoby bbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects b… |
CVE-2026-51667 | Medium | 4.3 | 2026-08-31 | Incorrect access control in the getWiFiIpMacTable function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Wi-Fi client MAC-to-… |
CVE-2026-51666 | Medium | 4.3 | 2026-08-31 | Incorrect access control in the setWizardCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure WAN, Wi-Fi, and devi… |
CVE-2026-82797 | Medium | 5.5 | 2026-08-31 | Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before 8de0d9e6ca… |
CVE-2026-76984 | Medium | 5.4 | 2026-08-31 | Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.head.MetaDataHeaderItem generates <meta> and <link> hea… |
CVE-2026-76983 | Medium | 5.4 | 2026-08-31 | Improper neutralization of input during web page generation in Apache Wicket. The <wicket:label> tag is provided by org.apache.wicket.markup.html.form.AutoLab… |
CVE-2026-76982 | Medium | 5.4 | 2026-08-31 | Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.Button clears the escape-model-strings flag i… |
CVE-2026-75802 | Medium | 5.4 | 2026-08-31 | AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writes the display value obtained from that renderer into the l… |
CVE-2026-71378 | Medium | 4.6 | 2026-08-31 | ResourceIsolationRequestCycleListener protects a Wicket application against cross-site request forgery by rejecting requests that a resource isolation policy j… |
CVE-2026-70449 | Medium | 5.3 | 2026-08-31 | Improper validation of resource URL attributes in Apache Wicket allows an unauthenticated remote attacker to read files from the web application, including fil… |
CVE-2026-82881 | Medium | 5.4 | 2026-08-31 | Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers… |
CVE-2026-82879 | Medium | 6.3 | 2026-08-31 | DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets are not bound to the target share UUID, so a valid ticket… |
CVE-2026-82878 | Medium | 6.3 | 2026-08-31 | DataEase versions before 2.10.26 omit object-level authorization checks on geographic information, dashboard linkage, and chart detail REST endpoints, allowing… |
CVE-2026-82877 | Medium | 6.5 | 2026-08-31 | ILIAS before versions 9.22, 10.10, and 11.3 contains an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read se… |
CVE-2026-82679 | Medium | 6.3 | 2026-08-31 | A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the file dmFrontPlugin/lib/dmWidget/media/… |
CVE-2026-82678 | Medium | 4.7 | 2026-08-31 | A vulnerability was identified in diem-project diem up to 5.1.3. The affected element is the function executeCommand of the file dmAdminPlugin/modules/dmConsol… |
CVE-2026-82670 | Medium | 4.4 | 2026-08-31 | A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRP_MJ_DEVICE_CONTROL in the library IUForceDelete.sys of the component IOCTL H… |
CVE-2026-82669 | Medium | 5.3 | 2026-08-31 | A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function SimpleXMLElement of the file src/SCM/System/Git/CommandLine… |
CVE-2026-82875 | Medium | 5.5 | 2026-08-31 | ToolJet before v3.16.208 contains an authorization bypass vulnerability in TooljetDB controller endpoints that accept organizationId from URL path without veri… |
CVE-2026-82873 | Medium | 5.0 | 2026-08-31 | ToolJet through 3.0.0-ee-beta.2 contains authorization bypass vulnerabilities in the POST /api/v2/resources/export endpoint that allow authenticated users to d… |
CVE-2026-82868 | Medium | 6.1 | 2026-08-31 | @pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the SVG schema plugin that renders user-supplied SVG content directly to innerHTML… |
CVE-2026-82867 | Medium | 6.1 | 2026-08-31 | @pdfme/schemas before 5.5.9 contains a cross-site scripting vulnerability in the Select schema plugin that fails to sanitize option values before interpolating… |
CVE-2026-82866 | Medium | 6.8 | 2026-08-31 | @pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePdf function that fetches arbitrary URLs without validation w… |
CVE-2026-82865 | Medium | 4.4 | 2026-08-31 | pdfme schemas before 5.5.10 contains a cross-site scripting vulnerability in the multiVariableText property panel that assigns unsanitized i18n label values to… |
CVE-2026-82864 | Medium | 6.5 | 2026-08-31 | pdfme pdf-lib versions before 5.5.10 contain an unbounded buffer growth vulnerability in the DecodeStream.ensureBuffer() method that allows attackers to cause… |
CVE-2026-82853 | Medium | 4.9 | 2026-08-31 | Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is… |
CVE-2026-82667 | Medium | 4.7 | 2026-08-31 | A vulnerability has been found in yaojingang GEOFlow up to 2.1.0. Impacted is the function DistributionController.isValidHttpEndpoint of the file app/Services/… |
CVE-2026-82666 | Medium | 4.7 | 2026-08-31 | A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of the file app/Http/Controllers/Admin/SiteThemeEditorControll… |
CVE-2026-82664 | Medium | 4.3 | 2026-08-31 | A security vulnerability has been detected in yaojingang GEOFlow up to 2.1.0. This affects an unknown part of the file app/Http/Controllers/Site/HomeController… |
CVE-2026-82662 | Medium | 6.5 | 2026-08-31 | Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 t… |
CVE-2026-82661 | Medium | 5.4 | 2026-08-31 | Nodemailer before 8.0.9 fails to sanitize carriage return and line feed characters in list comment fields, allowing attackers to inject arbitrary message heade… |
CVE-2026-82660 | Medium | 5.4 | 2026-08-31 | Nodemailer before 8.0.9 fails to enforce disableFileAccess and disableUrlAccess options during message normalization in jsonTransport. Attackers can read local… |
CVE-2024-58379 | Medium | 5.3 | 2026-08-31 | nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set or processing embed… |
CVE-2026-82629 | Medium | 4.7 | 2026-08-31 | A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affects the function MyJwWebJwid3Controller.d… |
CVE-2026-58301 | Medium | 6.5 | 2026-08-31 | When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connecti… |
CVE-2026-82625 | Medium | 4.3 | 2026-08-31 | A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown part of the file /register.php of the component User Regis… |