Medium-severity CVEs (page 66)
Page 66 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-65959 | Medium | 5.3 | 2026-08-18 | Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /debug/vrlog endpoint registered by addHttpEndpoint() in go/… |
CVE-2026-55165 | Medium | 4.8 | 2026-08-18 | Lemur manages TLS certificate creation. Prior to 1.9.2, the JWT verifier in lemur/auth/service.py:130-137 used fetch_token_header to read header_data["alg"] fr… |
CVE-2026-55164 | Medium | 4.9 | 2026-08-18 | Lemur manages TLS certificate creation. Prior to 1.9.2, lemur.users.service.update assigned a replacement password directly to users.password, while lemur/user… |
CVE-2026-55163 | Medium | 6.3 | 2026-08-18 | Lemur manages TLS certificate creation. Prior to 1.9.2, PUT /api/1/roles/ in lemur/roles/views.py:298 authorized updates with RoleMemberPermission(role_id), wh… |
CVE-2026-55162 | Medium | 6.3 | 2026-08-18 | Lemur manages TLS certificate creation. Prior to 1.9.2, lemur/certificates/verify.py accepted CRL Distribution Point and OCSP responder URLs from uploaded cert… |
CVE-2026-47630 | Medium | 5.5 | 2026-08-18 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to… |
CVE-2026-47606 | Medium | 6.5 | 2026-08-18 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to… |
CVE-2025-9211 | Medium | 6.7 | 2026-08-18 | Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalat… |
CVE-2021-43718 | Medium | 5.3 | 2026-08-18 | An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a Denial of Service via… |
CVE-2026-74046 | Medium | 4.9 | 2026-08-18 | Wazuh 4.4.0 before 4.14.7 contains a denial of service vulnerability in the fdecompress_files() function within cluster.py that allows authenticated cluster pe… |
CVE-2026-74044 | Medium | 6.5 | 2026-08-18 | Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a… |
CVE-2026-74039 | Medium | 6.5 | 2026-08-18 | Wazuh 4.0.0 before 4.14.7 and 5.0.0-beta2 contain a denial of service vulnerability that allows authenticated attackers with allow_run_as enabled to exhaust CP… |
CVE-2026-73502 | Medium | 5.3 | 2026-08-18 | kin-openapi is a Go project for handling OpenAPI files. From 0.2.0 until 0.144.0, openapi3filter.ValidateRequest can encounter a NULL-pointer-dereference denia… |
CVE-2026-69160 | Medium | 6.5 | 2026-08-18 | OpenList a file list program that supports multiple storage. Prior to 4.2.4, the share creation and update checks in server/handles/sharing.go use strings.HasP… |
CVE-2026-68924 | Medium | 4.9 | 2026-08-18 | MobSF is a mobile application security testing tool used. Prior to 4.5.1, the unzip function in mobsf/StaticAnalyzer/views/common/shared_func.py logs that an a… |
CVE-2026-68923 | Medium | 6.5 | 2026-08-18 | MobSF is a mobile application security testing tool used. Prior to 4.5.1, mobsf/MobSF/settings.py places django.middleware.csrf.CsrfViewMiddleware only in the… |
CVE-2026-68922 | Medium | 5.5 | 2026-08-18 | MobSF is a mobile application security testing tool used. Prior to 4.5.1, find_icon_path_zip in mobsf/StaticAnalyzer/views/android/icon_analysis.py uses the An… |
CVE-2026-66780 | Medium | 6.5 | 2026-08-18 | A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is assigned to joined clusters, possesses excessive perm… |
CVE-2026-63640 | Medium | 4.3 | 2026-08-18 | MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, when hideConfigSecrets is enabled, the catch-all socket dispatcher in js/node_he… |
CVE-2026-61696 | Medium | 6.3 | 2026-08-18 | Forem is open source software for building communities. In versions before commit 92eacd16a82cf9007ba8e16a2258b42e3b53ca9c, a malicious value submitted through… |
CVE-2026-54570 | Medium | 6.9 | 2026-08-18 | AngleSharp is a .NET library for parsing angle bracket based hyper-texts. Prior to 1.5.0, MathAnnotationXmlElement in AngleSharp/Mathml/Dom/Internal/MathAnnota… |
CVE-2026-52609 | Medium | 6.1 | 2026-08-18 | A reflected cross-site scripting (XSS) vulnerability in reportico-web <= 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a… |
CVE-2026-52607 | Medium | 6.5 | 2026-08-18 | A directory traversal vulnerability in reportico-web <= 8.1.0 allows remote attackers to expose or execute arbitrary php files on the web server by specifying… |
CVE-2026-49452 | Medium | 6.5 | 2026-08-18 | WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasy… |
CVE-2026-73372 | Medium | 4.3 | 2026-08-18 | Joomla! Core - [20260809] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6.1.2 - An improper access check injects… |
CVE-2026-73336 | Medium | 6.4 | 2026-08-18 | Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escaping flags lead to an XSS vector in schema.org mar… |
CVE-2026-72531 | Medium | 5.4 | 2026-08-18 | Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows una… |
CVE-2026-71572 | Medium | 5.4 | 2026-08-18 | Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output processing allowed a header injecti… |
CVE-2026-66783 | Medium | 4.4 | 2026-08-18 | A flaw was found in the `submariner-operator` component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrato… |
CVE-2026-66782 | Medium | 5.8 | 2026-08-18 | A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account (SA) bearer token within the Sub… |
CVE-2026-66781 | Medium | 5.4 | 2026-08-18 | A flaw was found in the Submariner operator. The Submariner Custom Resource (CR), used for configuring network connectivity, stores the IPsec pre-shared key (P… |
CVE-2026-55106 | Medium | 5.3 | 2026-08-18 | authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, a diagnostic action on the LDAP Source API does not enforce the object-level rea… |
CVE-2026-52606 | Medium | 6.1 | 2026-08-18 | A reflected cross-site scripting (XSS) vulnerability in reportico-web <= 8.1.0 allows remote attackers to execute arbitrary JavaScript in the web browser of a… |
CVE-2026-50576 | Medium | 6.8 | 2026-08-18 | ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3… |
CVE-2026-50126 | Medium | 4.0 | 2026-08-18 | Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote se… |
CVE-2026-48744 | Medium | 6.5 | 2026-08-18 | Saleor is an e-commerce platform. From 3.14.67 until 3.21.67, 3.22.63, and 3.23.22, a broken authorization check in saleor/permission/utils.py can incorrectly… |
CVE-2026-30250 | Medium | 6.1 | 2026-08-18 | Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute ar… |
CVE-2026-75485 | Medium | 5.5 | 2026-08-18 | A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. The cluster Proxy object is dumped in raw form, bypassing… |
CVE-2026-73834 | Medium | 5.5 | 2026-08-18 | A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. Certain ACM wrapper Custom Resources that embed Secret dat… |
CVE-2026-73371 | Medium | 4.3 | 2026-08-18 | Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users… |
CVE-2026-72532 | Medium | 5.4 | 2026-08-18 | Joomla! Core - [20260806] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthor… |
CVE-2026-71574 | Medium | 6.5 | 2026-08-18 | Joomla! Core - [20260803] - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unau… |
CVE-2026-71477 | Medium | 6.7 | 2026-08-18 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.1, release tar archives record mise/bin/mise with user and group ID 1001 and pa… |
CVE-2026-47245 | Medium | 4.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the User CP Buddy/Ignore List component does not validate reciprocal buddy-list updates correctly… |
CVE-2026-46482 | Medium | 5.3 | 2026-08-18 | ### Impact The registration component does not validate the text-based _Security Question_ CAPTCHA correctly, allowing attackers to bypass the challenge via a… |
CVE-2026-45734 | Medium | 5.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the built-in CAPTCHA does not consistently enforce single-use semantics, allowing remote attacker… |
CVE-2026-45129 | Medium | 4.6 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Recovery Codes module does not validate requests correctly, allowing same-site attac… |
CVE-2026-45125 | Medium | 5.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the Email User controller does not sanitize sender names correctly, resulting in mail header inje… |
CVE-2026-45124 | Medium | 4.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without rep… |
CVE-2026-45123 | Medium | 4.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the remote requests feature does not correctly handle IPv6 addresses, resulting in a server-side… |
CVE-2026-45122 | Medium | 4.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not validate moderation permissions for the destination calendar when mo… |
CVE-2026-45121 | Medium | 4.3 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not check permissions consistently when listing calendars, allowing auth… |
CVE-2026-45120 | Medium | 5.4 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not verify private event status consistently, allowing users with viewin… |
CVE-2026-45119 | Medium | 4.6 | 2026-08-18 | MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP UTF-8 Conversion module does not validate certain requests correctly, allowing same-… |
CVE-2026-75032 | Medium | 6.3 | 2026-08-18 | A flaw was found in BlueZ. Insufficient validation of packet length fields in GetFolderItems responses within the Audio/Video Remote Control Profile (AVRCP) im… |
CVE-2026-74009 | Medium | 5.3 | 2026-08-18 | Unauthenticated Insecure Direct Object References (IDOR) in Razorpay for WooCommerce <= 4.8.7 versions. |
CVE-2026-74008 | Medium | 5.3 | 2026-08-18 | Unauthenticated Sensitive Data Exposure in Shortcodes and extra features for Phlox theme <= 2.17.22 versions. |
CVE-2026-74007 | Medium | 5.3 | 2026-08-18 | Unauthenticated Sensitive Data Exposure in 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.20 versions. |
CVE-2026-74006 | Medium | 4.3 | 2026-08-18 | Contributor Broken Access Control in WP Table Builder <= 2.2.0 versions. |
CVE-2026-74004 | Medium | 5.4 | 2026-08-18 | Subscriber Broken Access Control in Gravity Booster – Styles & Layouts for Gravity Forms <= 6.0 versions. |
CVE-2026-74003 | Medium | 4.3 | 2026-08-18 | Contributor Broken Access Control in RomethemeForm For Elementor <= 1.2.6 versions. |
CVE-2026-73995 | Medium | 5.4 | 2026-08-18 | Subscriber Broken Authentication in User Registration <= 5.2.6 versions. |
CVE-2026-73426 | Medium | 4.6 | 2026-08-18 | Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-seri… |
CVE-2026-73404 | Medium | 6.5 | 2026-08-18 | Subscriber Broken Access Control in MasterStudy LMS <= 3.7.41 versions. |
CVE-2026-73399 | Medium | 6.5 | 2026-08-18 | Unauthenticated Broken Authentication in Flutterwave WooCommerce <= 3.3.0 versions. |
CVE-2026-73398 | Medium | 6.5 | 2026-08-18 | Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions. |
CVE-2026-73395 | Medium | 6.5 | 2026-08-18 | Unauthenticated Insecure Direct Object References (IDOR) in Booking calendar, Appointment Booking System <= 3.2.36 versions. |
CVE-2026-73383 | Medium | 4.9 | 2026-08-18 | Shop manager Arbitrary File Download in CTX Feed <= 6.6.47 versions. |
CVE-2026-73379 | Medium | 6.5 | 2026-08-18 | Unauthenticated Bypass Vulnerability in Contact Form by Supsystic < 1.10.0 versions. |
CVE-2026-73359 | Medium | 6.5 | 2026-08-18 | Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions. |
CVE-2026-73352 | Medium | 6.5 | 2026-08-18 | Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions. |
CVE-2026-73348 | Medium | 6.5 | 2026-08-18 | Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions. |
CVE-2026-70657 | Medium | 4.3 | 2026-08-18 | Copyparty is a portable file server. Prior to 1.20.17, copyparty volumes with the dk or dks directory-key flag combined with the fk or fka file-key flag can co… |
CVE-2026-68568 | Medium | 6.3 | 2026-08-18 | Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions. |
CVE-2026-68565 | Medium | 6.5 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions. |
CVE-2026-66679 | Medium | 6.5 | 2026-08-18 | Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions. |
CVE-2026-66651 | Medium | 6.5 | 2026-08-18 | Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2026-66646 | Medium | 6.5 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions. |
CVE-2026-66645 | Medium | 6.5 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions. |
CVE-2026-66644 | Medium | 6.5 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions. |
CVE-2026-66643 | Medium | 6.5 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Wufoo Shortcode <= 1.55 versions. |
CVE-2026-66641 | Medium | 6.5 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Video Conferencing with Zoom <= 4.6.8 versions. |
CVE-2026-66640 | Medium | 6.5 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions. |
CVE-2026-66639 | Medium | 6.5 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in WPZOOM Forms – Contact Form Plugin for Gutenberg <= 2.0.4 versions. |
CVE-2026-66638 | Medium | 6.5 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions. |
CVE-2026-66637 | Medium | 6.5 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions. |
CVE-2026-66636 | Medium | 6.5 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Wise Chat <= 3.4 versions. |
CVE-2026-66634 | Medium | 4.3 | 2026-08-18 | Subscriber Insecure Direct Object References (IDOR) in Modal Survey <= 2.0.2.2.3 versions. |
CVE-2026-59949 | Medium | 6.5 | 2026-08-18 | yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and le… |
CVE-2026-50139 | Medium | 5.9 | 2026-08-18 | goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, `ShareHandler` reads the share token's `DownloadLimit` under `RLock`, releases the lock, ser… |
CVE-2026-32467 | Medium | 6.0 | 2026-08-18 | Subscriber Server Side Request Forgery (SSRF) in [Aotuman] Grab WeChat Articles <= 2.0.1 versions. |
CVE-2026-74984 | Medium | 6.8 | 2026-08-18 | Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |
CVE-2026-74980 | Medium | 6.5 | 2026-08-18 | Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154. |
CVE-2026-74976 | Medium | 6.5 | 2026-08-18 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154… |
CVE-2026-74975 | Medium | 5.4 | 2026-08-18 | Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154. |
CVE-2026-74974 | Medium | 5.4 | 2026-08-18 | Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR… |
CVE-2026-74973 | Medium | 4.2 | 2026-08-18 | Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153… |
CVE-2026-74972 | Medium | 4.3 | 2026-08-18 | Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbir… |
CVE-2026-74971 | Medium | 4.3 | 2026-08-18 | Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Th… |
CVE-2026-74970 | Medium | 5.4 | 2026-08-18 | Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. |