Medium-severity CVEs (page 63)
Page 63 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-67268 | Medium | 6.5 | 2026-08-19 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker w… |
CVE-2026-67267 | Medium | 5.5 | 2026-08-19 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low… |
CVE-2026-67266 | Medium | 5.5 | 2026-08-19 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potenti… |
CVE-2026-56796 | Medium | 6.6 | 2026-08-19 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged a… |
CVE-2026-54793 | Medium | 4.6 | 2026-08-19 | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabi… |
CVE-2026-53452 | Medium | 5.3 | 2026-08-19 | Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding. Prior to version 0.4.13, the unauthent… |
CVE-2026-50149 | Medium | 6.5 | 2026-08-19 | Contour is a Kubernetes ingress controller using Envoy proxy. In versions 1.23.0 through 1.33.4, when an `HTTPProxy` is configured with incompatible combinatio… |
CVE-2026-40509 | Medium | 4.3 | 2026-08-19 | OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM viewer. The web_path GET parameter in the DICOM viewer page is embedded u… |
CVE-2026-40508 | Medium | 5.4 | 2026-08-19 | OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the patient portal template import handler that allows authenticated attackers wit… |
CVE-2026-40507 | Medium | 6.1 | 2026-08-19 | OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler. The templateHtml GET parameter is r… |
CVE-2026-32802 | Medium | 5.3 | 2026-08-19 | Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could pote… |
CVE-2026-15961 | Medium | 5.2 | 2026-08-19 | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 IBM PowerVM could allow a local attacker to obtain sensitive inf… |
CVE-2026-76239 | Medium | 6.3 | 2026-08-19 | Stigmem before 0.9.0a11 fails to validate the delivery_address parameter when creating webhook subscriptions, allowing authenticated users to specify internal… |
CVE-2026-76233 | Medium | 6.7 | 2026-08-19 | Renovate versions from 39.53.0 before 40.33.0 contain a command injection vulnerability in the gleam manager where the depName parameter is appended to gleam d… |
CVE-2026-76232 | Medium | 6.7 | 2026-08-19 | Renovate versions from 31.51.0 before 40.33.0 contain a command injection vulnerability in the helmv3 manager where the repository parameter is appended to hel… |
CVE-2026-76231 | Medium | 6.7 | 2026-08-19 | Renovate versions from 32.135.0 before 40.33.0 contain a command injection vulnerability in the hermit manager where user-provided dependency names are appende… |
CVE-2026-76230 | Medium | 6.7 | 2026-08-19 | Renovate versions from 35.63.0 before 40.33.0 contain a command injection vulnerability in the npm manager where user-provided packageName values are appended… |
CVE-2026-76229 | Medium | 6.7 | 2026-08-19 | Renovate versions from 39.218.0 before 40.33.0 contain an arbitrary command injection vulnerability in the kustomize manager where user-provided chart names ar… |
CVE-2026-76228 | Medium | 6.7 | 2026-08-19 | Renovate versions >=32.124.0 and before 42.68.5 (and Mend renovate-ce/renovate-ee before 13.3.0) contain a command injection vulnerability in Gradle Wrapper ar… |
CVE-2026-76227 | Medium | 5.5 | 2026-08-19 | Renovate versions from 42.68.1 before 42.96.3 and from 43.0.0 before 43.4.4, including the renovate/renovate Docker images, and Mend Renovate CE/EE images (ren… |
CVE-2026-76226 | Medium | 6.3 | 2026-08-19 | Renovate versions from 43.65.0 before 43.102.11 contain a remote code execution vulnerability in bazel-module and bazelisk managers when using lockFileMaintena… |
CVE-2026-76217 | Medium | 6.5 | 2026-08-19 | GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove() and Head.checkout(). Attackers can s… |
CVE-2026-76215 | Medium | 5.3 | 2026-08-19 | phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unauthenticated attacker… |
CVE-2026-76212 | Medium | 5.3 | 2026-08-19 | phpMyFAQ before 4.1.7, when configured to use PostgreSQL via the native pgsql PHP extension, declares an incorrect LIKE ESCAPE character ('=') in the Search/Da… |
CVE-2026-76211 | Medium | 4.3 | 2026-08-19 | phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATION_EDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard co… |
CVE-2026-76210 | Medium | 6.5 | 2026-08-19 | phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ cont… |
CVE-2026-76209 | Medium | 4.3 | 2026-08-19 | phpMyFAQ versions before v4.1.6 fail to validate the security.enableRegistration setting in API endpoints, allowing attackers to create user accounts when regi… |
CVE-2026-76206 | Medium | 5.3 | 2026-08-19 | phpMyFAQ versions before 4.1.7 fail to validate active status in the PDF export endpoint, allowing unauthenticated attackers to retrieve draft FAQ metadata. At… |
CVE-2026-75920 | Medium | 5.3 | 2026-08-19 | phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database crede… |
CVE-2026-75919 | Medium | 5.3 | 2026-08-19 | phpMyFAQ before 4.1.7 contains an authentication bypass vulnerability in SetupController that allows unauthenticated attackers to run database migrations and c… |
CVE-2026-75148 | Medium | 6.1 | 2026-08-19 | cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltf_validate() that allows remote attackers to c… |
CVE-2026-70424 | Medium | 6.5 | 2026-08-19 | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability… |
CVE-2026-70423 | Medium | 6.5 | 2026-08-19 | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker… |
CVE-2026-50720 | Medium | 6.4 | 2026-08-19 | The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SH… |
CVE-2026-50719 | Medium | 6.8 | 2026-08-19 | The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the s… |
CVE-2024-58376 | Medium | 6.7 | 2026-08-19 | Renovate versions 37.158.0 before 37.199.0 contain a command injection vulnerability in the helmv3 manager's registryAliases handling that allows attackers wit… |
CVE-2026-73363 | Medium | 6.5 | 2026-08-19 | Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce < 2.0.8 versions. |
CVE-2026-76166 | Medium | 4.3 | 2026-08-19 | A flaw was found in mod_cluster's AdvertiseListenerImpl (org.jboss.modcluster core module). A single crafted UDP multicast datagram with a valid HTTP status li… |
CVE-2026-75900 | Medium | 6.1 | 2026-08-19 | An out-of-bounds read vulnerability was found in swtpm's SWTPM_NVRAM_CheckHeader() function. The entry guard checks the buffer length against sizeof(bh), where… |
CVE-2026-58084 | Medium | 5.5 | 2026-08-19 | To retrieve the previous timer value, the kernel calls realtimer_gettime(), which obtains the current time for the timer's clock. For a timer using CLOCK_TAI… |
CVE-2026-49425 | Medium | 5.5 | 2026-08-19 | The compat32 kevent() handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct. An unprivileged… |
CVE-2026-49424 | Medium | 5.5 | 2026-08-19 | The Linux waitid() implementation translates a FreeBSD siginfo_t struct into a stack-declared Linux siginfo_t. It did not first zero the stack struct. An unp… |
CVE-2026-15446 | Medium | 6.4 | 2026-08-19 | The EWWW Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'data-script' Lazy Load Attribute in Post Content in all version… |
CVE-2026-8810 | Medium | 6.9 | 2026-08-19 | On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables. |
CVE-2026-19782 | Medium | 5.4 | 2026-08-19 | The WPS Bidouille WordPress plugin before 1.33.5 does not have proper authorisation checks in an AJAX action, allowing any authenticated user, such as a subscr… |
CVE-2026-19709 | Medium | 5.3 | 2026-08-19 | The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer secret has actually been generated before comparing it against… |
CVE-2026-19417 | Medium | 6.5 | 2026-08-19 | The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user is entitled to the media file being served, allowing authenticated patient… |
CVE-2026-19416 | Medium | 4.3 | 2026-08-19 | The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user owns the appointment being modified, allowing authenticated patient-level… |
CVE-2026-18779 | Medium | 5.3 | 2026-08-19 | The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions, allowing unauthenticated users to delete ar… |
CVE-2026-18778 | Medium | 5.3 | 2026-08-19 | The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions, allowing unauthenticated users to retrieve… |
CVE-2026-18777 | Medium | 5.3 | 2026-08-19 | The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions, allowing unauthenticated users to change th… |
CVE-2026-18466 | Medium | 5.4 | 2026-08-19 | The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX actions, allowing users with a Subscri… |
CVE-2026-18231 | Medium | 5.3 | 2026-08-19 | The WP Directory Kit WordPress plugin before 1.5.7 does not perform any authorization check on one of its public AJAX actions and returns unfiltered database r… |
CVE-2026-18202 | Medium | 6.8 | 2026-08-19 | The JetEngine WordPress plugin before 3.8.14 adds SVG to the site-wide list of allowed upload types without sanitising the file contents, allowing users with t… |
CVE-2026-16979 | Medium | 4.3 | 2026-08-19 | The SmartCrawl SEO checker, analyzer & optimizer WordPress plugin before 3.16.3 does not perform capability checks on two of its AJAX actions, allowing users w… |
CVE-2026-16058 | Medium | 5.3 | 2026-08-19 | The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownership check on several of its multi-vendor integration handlers that are… |
CVE-2026-15253 | Medium | 6.8 | 2026-08-19 | The Easy Media Replace WordPress plugin through 0.2.0 does not sanitise and escape an attachment title before outputting it in an HTML attribute in the media l… |
CVE-2026-14287 | Medium | 4.7 | 2026-08-19 | The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacke… |
CVE-2026-14196 | Medium | 4.3 | 2026-08-19 | The WCFM Marketplace WordPress plugin before 3.8.1 does not verify that a marketplace vendor owns a review before allowing it to be unapproved or deleted, all… |
CVE-2026-13175 | Medium | 6.5 | 2026-08-19 | The Eventin WordPress plugin before 4.1.21 does not verify ownership before allowing schedule records to be modified or deleted, allowing users with contribut… |
CVE-2026-66358 | Medium | 6.1 | 2026-08-19 | A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script. |
CVE-2026-15421 | Medium | 6.4 | 2026-08-19 | The Speed Optimizer – The All-In-One Performance-Boosting Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Image Tag Attributes in… |
CVE-2026-75979 | Medium | 6.3 | 2026-08-19 | A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected is the function execSqlText/previewSqlText of the file DesignerController.j… |
CVE-2026-75978 | Medium | 6.3 | 2026-08-19 | A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. The affected element is the function DataSourceController.add of th… |
CVE-2025-11729 | Medium | 4.3 | 2026-08-19 | The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is vulnerable to unauthorized access of data due to a improper capabilit… |
CVE-2026-66591 | Medium | 6.5 | 2026-08-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS. … |
CVE-2026-66589 | Medium | 5.4 | 2026-08-18 | Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKi… |
CVE-2026-27365 | Medium | 5.9 | 2026-08-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress PublishPress Series allows Stored XSS. This… |
CVE-2026-73974 | Medium | 5.5 | 2026-08-18 | linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses its shared… |
CVE-2026-73973 | Medium | 5.5 | 2026-08-18 | Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 7.0.0, check-plugins/logfile/logfile accep… |
CVE-2026-66603 | Medium | 6.5 | 2026-08-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Artiss Draft List simple-draft-list allows Stored X… |
CVE-2026-62377 | Medium | 4.3 | 2026-08-18 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by heif_context_read_from_memory() can leav… |
CVE-2026-62291 | Medium | 5.3 | 2026-08-18 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary al… |
CVE-2026-62289 | Medium | 4.3 | 2026-08-18 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF or AVIF file containing a clean aperture box can reduce an im… |
CVE-2026-53959 | Medium | 6.5 | 2026-08-18 | 4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows any authenticated user to enumerate account information for ever… |
CVE-2026-52873 | Medium | 6.9 | 2026-08-18 | Streambert is a cross-platform Electron Desktop App to stream and download video content. From version 2.5.0 until version 2.6.0, the wyzie-open-redeem IPC han… |
CVE-2026-48796 | Medium | 5.3 | 2026-08-18 | CefSharp provides .NET bindings for the Chromium Embedded Framework for Windows Forms and Windows Presentation Foundation applications. Prior to version 148.0… |
CVE-2026-47699 | Medium | 6.4 | 2026-08-18 | Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI imag… |
CVE-2026-15316 | Medium | 6.5 | 2026-08-18 | An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5. An attac… |
CVE-2026-76041 | Medium | 4.3 | 2026-08-18 | Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (C… |
CVE-2026-76039 | Medium | 6.5 | 2026-08-18 | Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain… |
CVE-2026-76033 | Medium | 4.2 | 2026-08-18 | Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site… |
CVE-2026-73932 | Medium | 5.3 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Eas… |
CVE-2026-73919 | Medium | 5.4 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Ea… |
CVE-2026-73914 | Medium | 6.5 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Eas… |
CVE-2026-73913 | Medium | 5.4 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Eas… |
CVE-2026-73911 | Medium | 5.4 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Eas… |
CVE-2026-73910 | Medium | 5.3 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Eas… |
CVE-2026-73909 | Medium | 5.9 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Di… |
CVE-2026-73906 | Medium | 5.3 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Eas… |
CVE-2026-73904 | Medium | 6.5 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Eas… |
CVE-2026-73901 | Medium | 4.8 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Dif… |
CVE-2026-73900 | Medium | 5.3 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Eas… |
CVE-2026-73899 | Medium | 5.3 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Ea… |
CVE-2026-73898 | Medium | 6.1 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Eas… |
CVE-2026-73897 | Medium | 6.5 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Eas… |
CVE-2026-73896 | Medium | 6.5 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Eas… |
CVE-2026-73895 | Medium | 5.3 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Ea… |
CVE-2026-73893 | Medium | 6.5 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Eas… |
CVE-2026-73892 | Medium | 6.5 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Eas… |