Medium-severity CVEs (page 80)
Page 80 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-10230 | Medium | 5.3 | 2026-06-01 | A vulnerability was identified in Assimp up to 6.0.4. This impacts the function Assimp::MDL::HalfLife::HL1MDLLoader::read_animations of the file HL1MDLLoader.c… |
CVE-2026-10229 | Medium | 5.3 | 2026-06-01 | A vulnerability was determined in Assimp up to 6.0.4. This affects the function HL1MDLLoader::read_meshes of the file HL1MDLLoader.cpp of the component Half-Li… |
CVE-2026-10224 | Medium | 5.3 | 2026-06-01 | A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. This vulnerability affects the function _handle_webhook_request of the… |
CVE-2026-10223 | Medium | 6.3 | 2026-06-01 | A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function _scan_memory_content of the file tools/memory_tool.py. T… |
CVE-2026-10222 | Medium | 5.6 | 2026-06-01 | A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this issue is the function _sanitize_env_lines of the file hermes… |
CVE-2026-48208 | Medium | 6.5 | 2026-06-01 | An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SV… |
CVE-2026-48189 | Medium | 5.7 | 2026-06-01 | An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to other groups. Please n… |
CVE-2026-48187 | Medium | 5.7 | 2026-06-01 | An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may lead to the abortion… |
CVE-2026-20456 | Medium | 5.5 | 2026-06-01 | In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with User execution privileges n… |
CVE-2026-20454 | Medium | 6.4 | 2026-06-01 | In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has alread… |
CVE-2026-20453 | Medium | 6.7 | 2026-06-01 | In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-10218 | Medium | 5.4 | 2026-06-01 | A vulnerability has been found in nextlevelbuilder GoClaw up to 3.11.3. This affects the function auth of the file internal/http/evolution_handlers.go. Such ma… |
CVE-2026-10217 | Medium | 6.3 | 2026-06-01 | A flaw has been found in nextlevelbuilder GoClaw up to 3.11.3. The impacted element is the function handleSave of the file internal/http/tts_config.go of the c… |
CVE-2026-10215 | Medium | 4.3 | 2026-06-01 | A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToObject of the file htdocs/holiday/class/… |
CVE-2026-10213 | Medium | 5.4 | 2026-06-01 | A security flaw has been discovered in AstrBotDevs AstrBot 4.23.6. This vulnerability affects unknown code of the file /api/skills/delete of the component API… |
CVE-2026-10212 | Medium | 6.3 | 2026-06-01 | A vulnerability was identified in AstrBotDevs AstrBot 4.24.2. This affects the function astr_main_agent of the file astrbot/core/astr_main_agent.py. Such manip… |
CVE-2026-10211 | Medium | 6.3 | 2026-06-01 | A vulnerability was determined in AstrBotDevs AstrBot 4.23.6. Affected by this issue is the function _normalize_rw_path of the file astrbot/core/tools/computer… |
CVE-2026-10210 | Medium | 6.3 | 2026-06-01 | A vulnerability was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerability is the function _sanitize_prompt_description of the file astrbot/core/s… |
CVE-2026-10209 | Medium | 6.3 | 2026-06-01 | A vulnerability has been found in code-projects Online Hospital Management System 1.0. Affected is an unknown function of the file appointmentdetail.php of the… |
CVE-2026-10205 | Medium | 6.3 | 2026-06-01 | A security vulnerability has been detected in Metasoft 美特软件 MetaCRM 6.4.0. The impacted element is an unknown function of the file develop/systparam/softlogo/u… |
CVE-2026-10204 | Medium | 6.3 | 2026-06-01 | A weakness has been identified in OFCMS 1.1.3. The affected element is the function Query of the file \ofcms-admin\src\main\java\com\ofsoft\cms\admin\controlle… |
CVE-2026-10203 | Medium | 6.3 | 2026-06-01 | A security flaw has been discovered in OFCMS 1.1.3. Impacted is the function Query of the file \ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\syste… |
CVE-2026-10202 | Medium | 6.3 | 2026-06-01 | A vulnerability was identified in OFCMS 1.1.3. This issue affects the function Query of the file \ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\sys… |
CVE-2026-10200 | Medium | 5.3 | 2026-05-31 | A vulnerability was found in Assimp up to 6.0.4. This affects the function glTFCommon::CopyValue in the library glTFCommon.h of the component 4x4 Matrix Parser… |
CVE-2026-48210 | Medium | 5.7 | 2026-05-31 | An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and preven… |
CVE-2026-10194 | Medium | 6.3 | 2026-05-31 | A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndexDatabaseHandle::deleteOldestImages of the file dcmqrdb/libs… |
CVE-2026-10193 | Medium | 6.3 | 2026-05-31 | A security flaw has been discovered in OFCMS up to 1.1.3. The impacted element is the function Query of the file ofcms-admin\src\main\java\com\ofsoft\cms\admin… |
CVE-2026-10190 | Medium | 6.5 | 2026-05-31 | A vulnerability was found in Tenda W12 3.0.0.7(4763). This issue affects the function cgiSysWebTimeoutSet of the file /bin/httpd of the component Web Managemen… |
CVE-2026-10182 | Medium | 6.3 | 2026-05-31 | A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formWlanSetup of the file /goform/formWlanSetup. Executing… |
CVE-2026-10180 | Medium | 6.3 | 2026-05-31 | A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSysCmd of the file /goform/formSysCmd. Such manipulation of the arg… |
CVE-2026-10177 | Medium | 6.3 | 2026-05-31 | A security vulnerability has been detected in Aider-AI Aider 0.86.3. This affects the function requests.get of the file api_docs.py of the component AWS EC2 Me… |
CVE-2026-10176 | Medium | 6.3 | 2026-05-31 | A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the component Code Generation Workflow. Execut… |
CVE-2026-10175 | Medium | 6.3 | 2026-05-31 | A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editor_coder.run of the file auth.py of the compon… |
CVE-2026-10174 | Medium | 6.3 | 2026-05-31 | A vulnerability was identified in Aider-AI Aider 0.86.3. Affected is an unknown function of the file aider/args.py of the component Pre-commit Hook Handler. Su… |
CVE-2026-10173 | Medium | 4.3 | 2026-05-31 | A weakness has been identified in Orthanc Explorer 2 up to 1.12.0. The impacted element is an unknown function of the file WebApplication/src/components/StudyL… |
CVE-2026-10172 | Medium | 6.3 | 2026-05-31 | A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0. The affected element is the function Upload of the file application/… |
CVE-2026-10171 | Medium | 4.7 | 2026-05-31 | A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminUpdateAlbum.php. Such m… |
CVE-2026-10170 | Medium | 6.3 | 2026-05-31 | A flaw has been found in code-projects Visitor Management System 1.0. Affected by this issue is some unknown functionality of the file /vms/php/phone_0.php. Th… |
CVE-2026-10168 | Medium | 6.3 | 2026-05-31 | A security vulnerability has been detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. Affecte… |
CVE-2026-8382 | Medium | 5.3 | 2026-05-31 | The Advanced Custom Fields (ACF®) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.1. This is due to the pl… |
CVE-2026-10166 | Medium | 6.3 | 2026-05-31 | A vulnerability was determined in Edimax BR-6478AC 1.23. The affected element is the function formWlbasic of the file /goform/formWlbasic of the component POST… |
CVE-2026-10156 | Medium | 4.3 | 2026-05-31 | A vulnerability was determined in Open5GS up to 2.7.7. This affects the function handle_amf_info in the library /lib/sbi/nnrf-handler.c of the component nf-ins… |
CVE-2026-10155 | Medium | 4.7 | 2026-05-31 | A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted element is the function accounts_report_search of the file applic… |
CVE-2026-10154 | Medium | 4.3 | 2026-05-31 | A vulnerability has been found in Dolibarr ERP CRM 23.0.0/23.0.1/23.0.2. The affected element is an unknown function of the file htdocs/user/messaging.php. Suc… |
CVE-2026-10153 | Medium | 4.3 | 2026-05-30 | A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cac… |
CVE-2026-10152 | Medium | 6.3 | 2026-05-30 | A vulnerability was detected in TaleLin lin-cms-spring-boot up to 0.2.1. This issue affects some unknown processing of the file src/main/java/io/github/talelin… |
CVE-2026-10127 | Medium | 6.3 | 2026-05-30 | A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Re… |
CVE-2026-8594 | Medium | 6.2 | 2026-05-30 | Text::LineFold versions through 2019.001 for Perl duplicate the output based on the number of special break characters. Text::LineFold splits the input string… |
CVE-2018-25423 | Medium | 6.2 | 2026-05-30 | Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers… |
CVE-2018-25421 | Medium | 6.5 | 2026-05-30 | Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. At… |
CVE-2026-10117 | Medium | 4.3 | 2026-05-30 | A weakness has been identified in Open5GS up to 2.7.7. This issue affects the function ogs_pool_id_calloc in the library /lib/sbi/nghttp2-server.c. Executing a… |
CVE-2026-10116 | Medium | 4.3 | 2026-05-30 | A security flaw has been discovered in Open5GS up to 2.7.7. This vulnerability affects the function ogs_sbi_xact_add in the library /lib/core/ogs-timer.c of th… |
CVE-2026-10115 | Medium | 4.3 | 2026-05-30 | A vulnerability was identified in Open5GS up to 2.7.7. This affects an unknown part in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Pa… |
CVE-2026-10114 | Medium | 4.3 | 2026-05-30 | A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function handle_scp_info in the library lib/sbi/nnrf-handler.c of the comp… |
CVE-2026-10113 | Medium | 4.3 | 2026-05-30 | A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is an unknown functionality in the library lib/sbi/nnrf-handler.c of the compo… |
CVE-2026-5071 | Medium | 6.1 | 2026-05-30 | The SocketCAN implementation validates the length of a user-provided buffer containing a socketcan_frame object using only a NET_ASSERT statement in zcan_sendt… |
CVE-2026-48840 | Medium | 5.3 | 2026-05-30 | Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a clien… |
CVE-2026-9831 | Medium | 6.3 | 2026-05-29 | A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-concurrency traffic conditions, intermit… |
CVE-2026-48811 | Medium | 4.3 | 2026-05-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221, FreeScout allows a non-admin user to permanently delete an… |
CVE-2026-48810 | Medium | 4.3 | 2026-05-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.221, while investigating the ThreadPolicy::delete issue reporte… |
CVE-2026-45352 | Medium | 5.3 | 2026-05-29 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.43.4, negative chunk-size in chunked Transfer-Encoding causes unbo… |
CVE-2026-45294 | Medium | 5.3 | 2026-05-29 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.219, the password reset endpoint returns visually distinct resp… |
CVE-2026-45149 | Medium | 6.5 | 2026-05-29 | The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6, the max option was being applied too… |
CVE-2026-44640 | Medium | 4.5 | 2026-05-29 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to 0.24.14, aio->prov_data is stored as nni_quic_conn* during dialing, but read as… |
CVE-2026-44287 | Medium | 6.3 | 2026-05-29 | FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, the JavaScript sandbox worker at projects/code-sandbox/src/pool/worker.ts:356 blocks dynamic i… |
CVE-2026-42500 | Medium | 5.3 | 2026-05-29 | Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image. |
CVE-2026-34127 | Medium | 4.8 | 2026-05-29 | A stored cross-site scripting (XSS) vulnerability has been identified in the web management interface of TP-Link's TL-SG108PE v5 switch due to improper sanitat… |
CVE-2026-49386 | Medium | 6.5 | 2026-05-29 | In JetBrains YouTrack before 2026.1.13570 improper access control allowed enumeration of restricted issues and articles on Planning Canvas |
CVE-2026-49385 | Medium | 6.5 | 2026-05-29 | In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to modify service accounts |
CVE-2026-49384 | Medium | 6.1 | 2026-05-29 | In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible |
CVE-2026-49382 | Medium | 4.5 | 2026-05-29 | In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin |
CVE-2026-49379 | Medium | 6.5 | 2026-05-29 | In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names |
CVE-2026-49378 | Medium | 4.3 | 2026-05-29 | In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion |
CVE-2026-49377 | Medium | 4.3 | 2026-05-29 | In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters |
CVE-2026-49376 | Medium | 6.5 | 2026-05-29 | In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin |
CVE-2026-49375 | Medium | 6.1 | 2026-05-29 | In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page |
CVE-2026-49369 | Medium | 4.3 | 2026-05-29 | In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pages |
CVE-2026-47745 | Medium | 6.5 | 2026-05-29 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, the admin tables for PaymentMethods, Currencies and Carriers exposed inline toggles and per-recor… |
CVE-2026-47742 | Medium | 6.5 | 2026-05-29 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Sub-form Livewire components used in the product editor (Edit, Inventory, Seo, Shipping, Files) h… |
CVE-2026-47741 | Medium | 5.9 | 2026-05-29 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the Order row before checking and increment… |
CVE-2026-46344 | Medium | 5.3 | 2026-05-29 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has… |
CVE-2026-44611 | Medium | 5.4 | 2026-05-29 | Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits password length and is susceptible to brute force attacks. |
CVE-2026-44518 | Medium | 5.3 | 2026-05-29 | liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has… |
CVE-2026-42951 | Medium | 5.4 | 2026-05-29 | An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device which includes account data and password hashes. |
CVE-2026-40425 | Medium | 5.7 | 2026-05-29 | The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentiall… |
CVE-2026-45660 | Medium | 5.4 | 2026-05-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.22 and 6.18.1, the Glide image proxy's URL validation could be bypassed us… |
CVE-2026-45626 | Medium | 6.3 | 2026-05-29 | Arcane is an interface for managing Docker containers, images, networks, and volumes. In 1.18.1 and earlier, GET /environments/{id}/volumes/{volumeName}/browse… |
CVE-2026-10070 | Medium | 4.7 | 2026-05-29 | A vulnerability was found in macrozheng mall up to 1.0.3. This affects an unknown function of the file /admin/update/ of the component Super Admin Password Han… |
CVE-2026-39229 | Medium | 6.5 | 2026-05-29 | Bolt CMS through 3.7.0 allows SQL Injection in the 'order' parameter of the content listing pages. An authenticated attacker with low-level privileges can expl… |
CVE-2026-36324 | Medium | 6.1 | 2026-05-29 | SourceCodester Doctor Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) due to improper handling of user supplied input in the user registrati… |
CVE-2026-35673 | Medium | 6.5 | 2026-05-29 | OpenClaw before 2026.4.29 contains an SSRF policy bypass vulnerability in browser debug and export routes that allows reuse of already-open blocked tabs. Attac… |
CVE-2026-34507 | Medium | 5.4 | 2026-05-29 | OpenClaw before 2026.4.29 contains a policy bypass vulnerability in QQBot admin commands that allows authenticated senders to skip DM-only and allowFrom policy… |
CVE-2026-32906 | Medium | 4.3 | 2026-05-29 | OpenClaw before 2026.5.12 contains a privilege escalation vulnerability in Slack plugin approvals that allows exec-authorized users to resolve plugin approvals… |
CVE-2026-10101 | Medium | 6.3 | 2026-05-29 | ACM/MCE assisted-service writes raw referenced pull-secret contents into `InfraEnv.status.conditions[].message` when pull-secret validation fails. A namespace… |
CVE-2026-10099 | Medium | 4.0 | 2026-05-29 | XX-Net V5.16.6 contains a WebSocket frame parsing vulnerability in the WebSocket_receive_worker routine of simple_http_server.py that allows attackers to cause… |
CVE-2026-10064 | Medium | 6.3 | 2026-05-29 | A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetPortTr of the file /goform/formSetPortTr. Performing a man… |
CVE-2018-25397 | Medium | 5.3 | 2026-05-29 | PHP-SHOP 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to add administrative users by crafting malicious HTML f… |
CVE-2018-25393 | Medium | 6.5 | 2026-05-29 | Navigate CMS 2.8.5 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by injecting directory traversal sequenc… |
CVE-2018-25387 | Medium | 5.3 | 2026-05-29 | HaPe PKH 1.1 contains a cross-site request forgery vulnerability that allows attackers to change administrator passwords by submitting forged requests to the u… |
CVE-2018-25384 | Medium | 5.4 | 2026-05-29 | Wikidforum 2.20 contains a cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted HTML in the… |