Medium-severity CVEs (page 59)
Page 59 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-78179 | Medium | 6.3 | 2026-08-24 | A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function SetValue of the file plugins/utils/object… |
CVE-2026-19853 | Medium | 5.3 | 2026-08-24 | NewSiteServer (NSS) developed by CyberTutor has a Missing Authentication vulnerability. Unauthenticated remote attackers can exploit a specific functionality t… |
CVE-2026-19852 | Medium | 6.1 | 2026-08-24 | NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including… |
CVE-2026-78177 | Medium | 4.5 | 2026-08-24 | A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src… |
CVE-2026-78166 | Medium | 6.3 | 2026-08-24 | A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src… |
CVE-2026-78205 | Medium | 5.8 | 2026-08-24 | BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject… |
CVE-2026-78204 | Medium | 5.4 | 2026-08-24 | Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.test_func returns only req… |
CVE-2026-78160 | Medium | 6.3 | 2026-08-24 | A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing of the file /user/note.php of the compon… |
CVE-2026-78158 | Medium | 6.3 | 2026-08-24 | A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseRequest Path Handler. Executing a manipula… |
CVE-2026-78148 | Medium | 5.3 | 2026-08-24 | A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc_server::graph_compute of the file ggml/src/ggml-rpc/ggml-rpc.cpp… |
CVE-2026-78145 | Medium | 4.3 | 2026-08-23 | A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function _is_safe_url of the file CTFd/utils/validators/__init__.py. Such manip… |
CVE-2026-78144 | Medium | 6.3 | 2026-08-23 | A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality o… |
CVE-2026-78142 | Medium | 6.3 | 2026-08-23 | A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archived_records.ph… |
CVE-2026-78140 | Medium | 4.7 | 2026-08-23 | A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/Web… |
CVE-2026-75922 | Medium | 5.3 | 2026-08-23 | Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line. PSGI… |
CVE-2026-8630 | Medium | 6.1 | 2026-08-23 | justhtml before 1.12.0 (versions <= 1.11.0) contains a mutation cross-site scripting (mXSS) vulnerability in the serialization of raw-text elements such as <st… |
CVE-2026-77088 | Medium | 6.1 | 2026-08-23 | justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting vulnerability in to_markdown() where inline code spans fail to account for blank lines as… |
CVE-2026-74793 | Medium | 6.1 | 2026-08-23 | justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler removal in selectedcontent projections… |
CVE-2026-6827 | Medium | 6.1 | 2026-08-23 | justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling. When custom policies preserve foreign n… |
CVE-2026-5751 | Medium | 6.1 | 2026-08-23 | justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting (mXSS) vulnerability when using a custom SanitizationPolicy… |
CVE-2026-5389 | Medium | 6.1 | 2026-08-23 | justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown() function when serializing attacker-controlled pre content. At… |
CVE-2026-78115 | Medium | 5.4 | 2026-08-23 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edit_user_account.ph… |
CVE-2026-78112 | Medium | 6.3 | 2026-08-23 | A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This ma… |
CVE-2026-77116 | Medium | 4.3 | 2026-08-23 | Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Cus… |
CVE-2026-14853 | Medium | 4.3 | 2026-08-23 | The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, and its nonce check can be bypassed by o… |
CVE-2026-78061 | Medium | 6.3 | 2026-08-23 | A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the compon… |
CVE-2026-78060 | Medium | 4.3 | 2026-08-23 | A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /php_action/getOrderReport.php… |
CVE-2026-78059 | Medium | 4.3 | 2026-08-23 | A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of the file /php_action/printOrder.php. S… |
CVE-2026-78057 | Medium | 6.3 | 2026-08-23 | A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Mana… |
CVE-2026-78056 | Medium | 6.3 | 2026-08-23 | A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is some unknown func… |
CVE-2026-78055 | Medium | 4.3 | 2026-08-23 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality… |
CVE-2026-78054 | Medium | 4.3 | 2026-08-23 | A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /BSIS1.php. Executing a man… |
CVE-2026-78051 | Medium | 5.3 | 2026-08-23 | A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the file /download/.metube/cookies.txt of th… |
CVE-2026-18027 | Medium | 6.5 | 2026-08-23 | The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Directory Traversal in all versio… |
CVE-2026-12999 | Medium | 5.3 | 2026-08-22 | The Infineon Airoc Wi-Fi driver's transmit callback airoc_mgmt_send() in drivers/wifi/infineon/airoc_wifi.c allocates a net_buf from the fixed airoc_pool for e… |
CVE-2026-70626 | Medium | 6.2 | 2026-08-22 | NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open() that allows local attackers to read arbitrary files outside the corpus… |
CVE-2026-68768 | Medium | 6.1 | 2026-08-22 | hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling output into a fixed-size… |
CVE-2026-68767 | Medium | 6.1 | 2026-08-22 | hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. At… |
CVE-2026-65915 | Medium | 6.5 | 2026-08-22 | NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compares a normalized path against itself, m… |
CVE-2026-63311 | Medium | 5.3 | 2026-08-22 | NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/path… |
CVE-2026-62385 | Medium | 5.9 | 2026-08-22 | NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outsid… |
CVE-2026-62383 | Medium | 5.5 | 2026-08-22 | nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirel… |
CVE-2026-5093 | Medium | 4.3 | 2026-08-22 | The GreenShift – Animation and Page Builder Blocks plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 12… |
CVE-2026-4561 | Medium | 6.4 | 2026-08-22 | The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form response message post meta fields (e.g., 'tex… |
CVE-2026-4559 | Medium | 6.4 | 2026-08-22 | The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'delay' shortcode attribute in all versions… |
CVE-2026-62381 | Medium | 6.6 | 2026-08-22 | luci-lib-px5g (LuCI) contains a heap-based buffer overflow in the native ASN.1 encoding routine asn1_add_obj (x509write.c) when signing a certificate with a 20… |
CVE-2026-62204 | Medium | 6.6 | 2026-08-22 | SiYuan versions before v3.7.4 fail to validate that packageName matches the downloaded package content in bazaar install endpoints. Attackers with same-origin… |
CVE-2026-60083 | Medium | 4.9 | 2026-08-22 | SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by… |
CVE-2026-59809 | Medium | 4.9 | 2026-08-22 | SiYuan before v3.8.0 interpolates secret placeholders into the destination URL parameter of the http_request MCP tool, allowing attackers to exfiltrate stored… |
CVE-2026-58002 | Medium | 6.5 | 2026-08-22 | WWBN AVideo through commit 9c39d8c8b4c1f75540788d6b391740852ceb0732 contains an authorization bypass vulnerability in the Users_affiliations add.json.php endpo… |
CVE-2026-58001 | Medium | 5.7 | 2026-08-22 | WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/videoEditLight.php that lacks request authenticity checks an… |
CVE-2026-57944 | Medium | 5.4 | 2026-08-22 | AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in channelToGallery.json.php that allows attackers to modify site-wide Galle… |
CVE-2026-56380 | Medium | 5.3 | 2026-08-22 | AVideo through commit 9c39d8c8 contains an information exposure vulnerability in feed/index.php that allows unauthenticated attackers to retrieve channel owner… |
CVE-2026-4244 | Medium | 4.3 | 2026-08-22 | The Post Duplicator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `duplicate_post()` functio… |
CVE-2026-77988 | Medium | 6.6 | 2026-08-22 | A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram_get of the component CLI Configuration Tool. Thi… |
CVE-2026-4245 | Medium | 4.3 | 2026-08-22 | The Post Duplicator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.11. This is due to the `duplicate_post… |
CVE-2026-3424 | Medium | 5.3 | 2026-08-22 | The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and inc… |
CVE-2026-19222 | Medium | 6.6 | 2026-08-22 | The Forminator Forms WordPress plugin before 1.57.0.7 does not consistently enforce the role restriction it applies to registration forms, allowing users who… |
CVE-2026-19093 | Medium | 6.8 | 2026-08-22 | The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media, allowing users with the instructor role to r… |
CVE-2026-16738 | Medium | 5.3 | 2026-08-22 | The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the conf… |
CVE-2026-16612 | Medium | 5.3 | 2026-08-22 | The FiboSearch WordPress plugin before 1.34.1 does not consistently exclude password-protected products from its unauthenticated AJAX endpoints, allowing unau… |
CVE-2026-16260 | Medium | 6.8 | 2026-08-22 | The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.8.1 does not sanitise and escape one of its custom post type settings before outputting it… |
CVE-2026-76074 | Medium | 4.3 | 2026-08-22 | The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to authorization byp… |
CVE-2026-76057 | Medium | 4.3 | 2026-08-22 | The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to authorization byp… |
CVE-2026-75027 | Medium | 5.3 | 2026-08-22 | The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.8.0. This is due to the plugin not prope… |
CVE-2026-53541 | Medium | 4.3 | 2026-08-21 | OliveTin gives access to predefined shell commands from a web interface. The `filterToDefinedArgumentsOnly` function in the executor is intended to discard any… |
CVE-2026-53524 | Medium | 6.5 | 2026-08-21 | WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 4.3.0 through 4.9.0, the WeeChat relay module's WebSocket permessage-deflate dec… |
CVE-2026-34949 | Medium | 6.5 | 2026-08-21 | Combodo iTop is a web based IT service management tool.Prior to 3.2.3, an unauthenticated user could delete the .readonly file on iTop instances — a file creat… |
CVE-2026-53509 | Medium | 5.7 | 2026-08-21 | CKAN MCP Server is a tool for querying CKAN open data portals. A known vulnerability CVE-2026-33060 indicated tools including ckan_package_search and sparql_qu… |
CVE-2026-53497 | Medium | 5.3 | 2026-08-21 | CrossWatch (CW) is a synchronization engine. Prior to version 0.9.21, GET /api/app-auth/status is accessible without authentication and returns the other_sessi… |
CVE-2026-53487 | Medium | 4.3 | 2026-08-21 | Kite is a Kubernetes dashboard. Prior to version 0.12.3, authenticated Kite users with any role can request `/api/v1/overview` for a cluster that their roles d… |
CVE-2026-53468 | Medium | 4.6 | 2026-08-21 | Typemill is a flat-file, Markdown-based content management system designed for informational documentation websites. Versions prior to 2.23.0 are vulnerable to… |
CVE-2026-43980 | Medium | 6.3 | 2026-08-21 | Malla is a web analyzer for Meshtastic networks based on MQTT data. Prior to commit 4086e2b5f61615a813b70b25bc76095083552135, code names (long_name, short_name… |
CVE-2026-34836 | Medium | 6.5 | 2026-08-21 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, improper access control in ajax.render.php and ajax.document.php allows for document ac… |
CVE-2026-33047 | Medium | 4.3 | 2026-08-21 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, an object can be locked by a user who is not assigned write permissions. This issue has… |
CVE-2026-77220 | Medium | 6.5 | 2026-08-21 | PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the… |
CVE-2026-69236 | Medium | 6.1 | 2026-08-21 | There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 12.1 and prior that may allow a remote, privileged attacker to inject malicious… |
CVE-2026-69235 | Medium | 6.1 | 2026-08-21 | There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious… |
CVE-2026-69234 | Medium | 6.1 | 2026-08-21 | There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 11.5 and prior which may allow a remote, unauthenticated attacker to… |
CVE-2026-69233 | Medium | 5.5 | 2026-08-21 | There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to… |
CVE-2026-69232 | Medium | 5.5 | 2026-08-21 | There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious… |
CVE-2026-69231 | Medium | 5.5 | 2026-08-21 | There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious… |
CVE-2026-69230 | Medium | 5.5 | 2026-08-21 | There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to… |
CVE-2026-69229 | Medium | 5.4 | 2026-08-21 | There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that allows a remote, authenticated attacker to insert arbitrary HTM… |
CVE-2026-69228 | Medium | 5.3 | 2026-08-21 | There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that may allow a remote, unauthenticated attacker to access a… |
CVE-2026-69225 | Medium | 5.9 | 2026-08-21 | There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated atta… |
CVE-2026-69224 | Medium | 5.9 | 2026-08-21 | There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow… |
CVE-2026-55168 | Medium | 6.5 | 2026-08-21 | Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-controlled backup archive and copies them… |
CVE-2026-53656 | Medium | 6.3 | 2026-08-21 | FiftyOne is an open-source platform for refining high-quality datasets and visual AI models. Prior to 1.17.0, the FiftyOne App/API server in fiftyone/server/ap… |
CVE-2026-53572 | Medium | 5.9 | 2026-08-21 | KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to 2.20.0, pkg/scalers/postgresql_scaler.go constructs libpq-style connection strings from… |
CVE-2026-45271 | Medium | 5.5 | 2026-08-21 | Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. Picotls implements its own ASN.1 validation helpe… |
CVE-2026-44517 | Medium | 6.3 | 2026-08-21 | Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not securely confine Git rep… |
CVE-2026-76876 | Medium | 5.9 | 2026-08-21 | Craftplan before 0.5.1 contains a broken access control vulnerability that allows unauthenticated attackers to read sensitive credentials by exploiting an unco… |
CVE-2026-27463 | Medium | 5.3 | 2026-08-21 | Combodo iTop is a web based IT service management tool. Prior to 3.2.3, the HTML title attribute of the logo in the login page contains the complete iTop versi… |
CVE-2026-77795 | Medium | 6.3 | 2026-08-21 | A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategory… |
CVE-2026-63466 | Medium | 4.1 | 2026-08-21 | Unleash is an open-source feature management platform. Prior to 8.0.3, FeatureEventFormatterMd.format in src/lib/addons/feature-event-formatter-md.ts assigns M… |
CVE-2026-63004 | Medium | 5.5 | 2026-08-21 | Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the addon and integration subsystem passes the operator-controlled par… |
CVE-2026-54681 | Medium | 4.1 | 2026-08-21 | DiscordChatExporter saves Discord chat logs to a file. Prior to 2.47.2, the VisitEmojiAsync method in DiscordChatExporter.Core/Exporting/HtmlMarkdownVisitor.cs… |
CVE-2026-53762 | Medium | 6.2 | 2026-08-21 | VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with WOLFCRYPT=1 and WOLFCRYPT_BACKEND… |
CVE-2026-77237 | Medium | 6.5 | 2026-08-21 | Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE… |