Medium-severity CVEs (page 57)
Page 57 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-78914 | Medium | 6.5 | 2026-08-25 | Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HT… |
CVE-2026-78912 | Medium | 5.4 | 2026-08-25 | UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium secur… |
CVE-2026-78908 | Medium | 4.3 | 2026-08-25 | Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium sec… |
CVE-2026-78907 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page… |
CVE-2026-78898 | Medium | 5.4 | 2026-08-25 | Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access re… |
CVE-2026-78897 | Medium | 6.5 | 2026-08-25 | Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive informa… |
CVE-2026-78896 | Medium | 4.3 | 2026-08-25 | Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Ch… |
CVE-2026-78895 | Medium | 4.3 | 2026-08-25 | Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium secu… |
CVE-2026-78893 | Medium | 6.5 | 2026-08-25 | Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium sec… |
CVE-2026-77680 | Medium | 5.3 | 2026-08-25 | An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory am… |
CVE-2026-75421 | Medium | 4.0 | 2026-08-25 | aria2 <=1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine() function. |
CVE-2026-65088 | Medium | 5.5 | 2026-08-25 | NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this… |
CVE-2026-65087 | Medium | 5.6 | 2026-08-25 | NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might… |
CVE-2026-65086 | Medium | 6.8 | 2026-08-25 | NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of… |
CVE-2026-65085 | Medium | 5.2 | 2026-08-25 | NVIDIA OpenShell for Linux contains a vulnerability in its inference proxy, where an attacker could cause an improper encoding or escaping of output. A success… |
CVE-2026-55588 | Medium | 6.5 | 2026-08-25 | ORAS (OCI Registry As Storage) is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive ref… |
CVE-2026-39113 | Medium | 4.0 | 2026-08-25 | Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c… |
CVE-2026-77585 | Medium | 5.3 | 2026-08-25 | The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a com… |
CVE-2026-68514 | Medium | 5.5 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through… |
CVE-2026-65367 | Medium | 5.5 | 2026-08-25 | A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app… |
CVE-2026-64705 | Medium | 5.5 | 2026-08-25 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macO… |
CVE-2026-80050 | Medium | 6.5 | 2026-08-25 | ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoints, allowing authenticated users to st… |
CVE-2026-62986 | Medium | 4.3 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through… |
CVE-2026-61555 | Medium | 5.5 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11… |
CVE-2026-59985 | Medium | 5.5 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.2.0 through… |
CVE-2026-55663 | Medium | 5.6 | 2026-08-25 | mediasoup is a WebRTC video conferencing system. From version 3.20.0 until 3.20.6 for the npm package and from 0.22.0 until 0.22.5 for the Rust crate, mediasou… |
CVE-2026-55619 | Medium | 5.3 | 2026-08-25 | eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0… |
CVE-2026-55618 | Medium | 6.5 | 2026-08-25 | eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0… |
CVE-2026-76198 | Medium | 5.5 | 2026-08-25 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this… |
CVE-2026-76189 | Medium | 6.2 | 2026-08-25 | CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attack… |
CVE-2026-75752 | Medium | 5.5 | 2026-08-25 | Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vul… |
CVE-2026-71444 | Medium | 6.2 | 2026-08-25 | CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attack… |
CVE-2026-71441 | Medium | 5.5 | 2026-08-25 | Illustrator is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability… |
CVE-2026-59984 | Medium | 5.5 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.1.0 through… |
CVE-2026-59983 | Medium | 5.5 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11… |
CVE-2026-55419 | Medium | 5.3 | 2026-08-25 | Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by t… |
CVE-2026-48429 | Medium | 5.5 | 2026-08-25 | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit… |
CVE-2026-26211 | Medium | 4.8 | 2026-08-25 | Ekushey Project Manager CRM stores the administrator-configured system name and writes it to the login page without output encoding. The value is emitted in th… |
CVE-2026-47624 | Medium | 6.0 | 2026-08-25 | NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability… |
CVE-2026-24225 | Medium | 6.0 | 2026-08-25 | NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of… |
CVE-2026-24168 | Medium | 6.8 | 2026-08-25 | NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative privileges may cause command injection… |
CVE-2026-24167 | Medium | 6.8 | 2026-08-25 | NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator could inject commands by sending a crafte… |
CVE-2026-24166 | Medium | 5.1 | 2026-08-25 | NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-coded cryptographic key to extract infor… |
CVE-2026-18445 | Medium | 6.6 | 2026-08-25 | There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This may result in information disclosure or… |
CVE-2026-18444 | Medium | 6.6 | 2026-08-25 | There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in info… |
CVE-2026-13478 | Medium | 5.5 | 2026-08-25 | The Zephyr ext2 filesystem driver validates the on-disk block bitmap in ext2_init_fs() (subsys/fs/ext2/ext2_impl.c) by passing fs_blocks = s_blocks_count - s_f… |
CVE-2026-13217 | Medium | 5.9 | 2026-08-25 | The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a session handle and PDU id from the uid field of a CALLRESULT message. In ocpp_process_server_m… |
CVE-2026-13216 | Medium | 6.1 | 2026-08-25 | The virtio PCI driver (drivers/virtio/virtio_pci.c) parses a device's PCI capability list during driver initialization. In virtio_pci_read_cap() the device-sup… |
CVE-2026-79785 | Medium | 5.9 | 2026-08-25 | X-AnyLabeling's model downloader disabled TLS certificate verification. download_with_retry in anylabeling/services/auto_labeling/model.py built a context with… |
CVE-2026-79781 | Medium | 6.5 | 2026-08-25 | rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in… |
CVE-2026-79780 | Medium | 5.3 | 2026-08-25 | rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved acro… |
CVE-2026-79779 | Medium | 5.3 | 2026-08-25 | rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over pl… |
CVE-2026-79778 | Medium | 5.3 | 2026-08-25 | rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transp… |
CVE-2026-79776 | Medium | 5.3 | 2026-08-25 | rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler. Attackers can a… |
CVE-2026-79775 | Medium | 6.5 | 2026-08-25 | rclone versions >= v1.72.0 and <= v1.74.4 (fixed in v1.75.0) contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which… |
CVE-2026-79773 | Medium | 4.9 | 2026-08-25 | Winter CMS before 1.2.13 contains a local file inclusion vulnerability in the JavascriptImporter filter that allows authenticated users with cms.manage_assets… |
CVE-2026-79772 | Medium | 5.3 | 2026-08-25 | Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of… |
CVE-2026-79771 | Medium | 5.3 | 2026-08-25 | Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can… |
CVE-2026-79769 | Medium | 5.5 | 2026-08-25 | Nokogiri versions before 1.19.4 contain a possible invalid (out-of-bounds) memory read in the protected internal Node#initialize_copy_with_args helper behind N… |
CVE-2026-79676 | Medium | 5.9 | 2026-08-25 | NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open() instead of nltk.paths… |
CVE-2026-70550 | Medium | 6.5 | 2026-08-25 | An authorization weakness in JFrog Artifactory Composer repository handling may allow an authenticated user, under specific conditions, to read package metadat… |
CVE-2026-79717 | Medium | 6.4 | 2026-08-25 | A server-side request forgery (SSRF) vulnerability was found in galaxy_ng, the Ansible Galaxy server plugin for Pulp. An authenticated user with namespace mana… |
CVE-2026-55535 | Medium | 6.8 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path fails open on socket.gaierror and does not bind th… |
CVE-2026-55531 | Medium | 6.5 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream mcp_post handler creates a new _sessions entry for every initialize req… |
CVE-2026-55530 | Medium | 6.1 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, ast_grep_rewrite lacks the @require_approval decorator used by sibling mutation tools… |
CVE-2026-55529 | Medium | 6.9 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream _validate_origin method accepts request_origin.startswith(allowed), so… |
CVE-2026-79623 | Medium | 6.3 | 2026-08-25 | A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of… |
CVE-2026-79406 | Medium | 4.3 | 2026-08-25 | A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/upd… |
CVE-2026-78885 | Medium | 5.6 | 2026-08-25 | A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService… |
CVE-2026-78581 | Medium | 4.2 | 2026-08-25 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constr… |
CVE-2026-63074 | Medium | 5.9 | 2026-08-25 | Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never expunges them (fo… |
CVE-2026-79673 | Medium | 6.5 | 2026-08-25 | Ech0 before 4.4.3 protects the PUT /user endpoint with the profile:read scope, a read-only scope, but allows write operations including password changes. An at… |
CVE-2026-79672 | Medium | 5.5 | 2026-08-25 | Ech0 before 4.4.3 fails to enforce scope-based authorization on nine comment panel admin endpoints, allowing access tokens with minimal scopes to perform full… |
CVE-2026-79671 | Medium | 5.5 | 2026-08-25 | Ech0 before 4.4.3 contains a server-side request forgery vulnerability in the validateWebhookURL function (webhook_setting_service.go), which only validates li… |
CVE-2026-79670 | Medium | 4.8 | 2026-08-25 | Ech0 before 4.4.3 contains a stored cross-site scripting vulnerability in the file upload endpoint that validates Content-Type using only client-supplied heade… |
CVE-2026-79669 | Medium | 4.3 | 2026-08-25 | Ech0 before 4.4.3 lacks authorization checks on system log endpoints allowing any authenticated non-admin user to read and stream all server logs. Attackers ca… |
CVE-2026-79668 | Medium | 5.3 | 2026-08-25 | Ech0 before 4.7.3 contains an authentication bypass vulnerability in the PUT /api/echo/like/:id endpoint that allows unauthenticated attackers to increment eng… |
CVE-2026-79666 | Medium | 6.5 | 2026-08-25 | Ech0 before 4.4.3 fails to enforce administrator authorization on dashboard log endpoints, allowing any authenticated user to access system logs. Attackers wit… |
CVE-2026-79663 | Medium | 4.8 | 2026-08-25 | Ech0 before 4.7.3 contains a stored cross-site scripting vulnerability in the public RSS feed where tag names and markdown content are rendered without HTML es… |
CVE-2026-79661 | Medium | 6.5 | 2026-08-25 | Ech0 through 4.5.6 registers the PUT /api/echo/like/:id endpoint on the public router group without authentication or rate limiting. Unauthenticated attackers… |
CVE-2026-79660 | Medium | 5.3 | 2026-08-25 | Ech0 versions before 4.7.3 expose guest commenter email addresses through public API endpoints due to improper JSON serialization tags on the Comment model. Un… |
CVE-2026-78864 | Medium | 6.3 | 2026-08-25 | A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journ… |
CVE-2026-78684 | Medium | 5.3 | 2026-08-25 | vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in its decode path. Unauthenticated attackers can a… |
CVE-2026-77824 | Medium | 4.9 | 2026-08-25 | The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and inc… |
CVE-2026-75908 | Medium | 4.3 | 2026-08-25 | The Newsletters plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.17. This is due to the plugin not properly v… |
CVE-2026-18547 | Medium | 6.4 | 2026-08-25 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored… |
CVE-2026-17587 | Medium | 5.3 | 2026-08-25 | The My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3… |
CVE-2026-79652 | Medium | 5.9 | 2026-08-25 | A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak. This component handl… |
CVE-2026-78863 | Medium | 6.3 | 2026-08-25 | A vulnerability was found in liketrek TREK up to 3.0.22. Impacted is the function loginUser of the file server/src/services/authService.ts of the component Pre… |
CVE-2026-21754 | Medium | 5.4 | 2026-08-25 | HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakou… |
CVE-2026-21753 | Medium | 4.2 | 2026-08-25 | HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependen… |
CVE-2026-76128 | Medium | 6.4 | 2026-08-25 | The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and incl… |
CVE-2026-75038 | Medium | 6.1 | 2026-08-25 | UNIX symbolic link (symlink) following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0. |
CVE-2026-78701 | Medium | 6.5 | 2026-08-25 | A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer (SASL) UNBIND p… |
CVE-2026-78322 | Medium | 6.5 | 2026-08-25 | A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's… |
CVE-2026-18512 | Medium | 6.4 | 2026-08-25 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Approved Comment Bo… |
CVE-2026-18100 | Medium | 6.4 | 2026-08-25 | The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'mf_form_id… |
CVE-2026-78656 | Medium | 6.3 | 2026-08-25 | A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_del.php. The manipulation of… |
CVE-2026-78470 | Medium | 6.5 | 2026-08-25 | The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the… |
CVE-2026-13215 | Medium | 6.8 | 2026-08-25 | The Zephyr ext2 filesystem driver fails to validate the s_log_block_size field of the on-disk superblock when mounting a filesystem. ext2_verify_disk_superbloc… |