Medium severity vulnerabilities
201 CVEs scored 4.0 to 6.9 on CVSS. Medium-severity vulnerabilities have limited impact or are harder to exploit. They still matter when chained with other flaws.
- 6.7 Medium severity
Broadcom Brocade Fabric OS Code Injection Exploited
Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1.1d6.
- 5.4 Medium severity
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Exploited
An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site scripting (XSS) vulnerability exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message c
- 4.4 Medium severity
Juniper Junos OS Improper Isolation or Compartmentalization Exploited
An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrary
- 5.5 Medium severity
Microsoft Windows NTFS Out-Of-Bounds Read Exploited
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- 4.6 Medium severity
Microsoft Windows NTFS Information Disclosure Exploited
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
- 5.4 Medium severity
Microsoft Windows NTLM Hash Disclosure Spoofing Exploited
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
- 6.0 Medium severity
VMware ESXi, Workstation, and Fusion Information Disclosure Exploited
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx proce
- 6.5 Medium severity
Palo Alto Networks PAN-OS File Read Exploited
An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user. You can grea
- 6.1 Medium severity
Apple iOS and iPadOS Incorrect Authorization Exploited
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5. A physical attack may disable USB Restricted Mode on a locked
- 6.3 Medium severity
Apple Multiple Products Cross-Site Scripting (XSS) Exploited
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead
- 5.5 Medium severity
Linux Kernel Use of Uninitialized Resource Exploited
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be e
- 6.1 Medium severity
MDaemon Email Server Cross-Site Scripting (XSS) Exploited
An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's brows
- 6.5 Medium severity
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Exploited
NTLM Hash Disclosure Spoofing Vulnerability
- 5.8 Medium severity
Cisco ASA and FTD Denial-of-Service Exploited
A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of the RAVPN servi
- 5.4 Medium severity
Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 6.5 Medium severity
Microsoft Windows SmartScreen Security Feature Bypass Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 6.1 Medium severity
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Exploited
An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calend
- 5.3 Medium severity
Twilio Authy Information Disclosure Exploited
In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data, as exploited in the wild in June 2024. Specifically, the endpoint accepted a stream of reque
- 6.7 Medium severity
Cisco NX-OS Command Injection Exploited
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insuffi
- 6.1 Medium severity
RoundCube Webmail Cross-Site Scripting (XSS) Exploited
Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.
- 5.5 Medium severity
Apple Multiple Products Improper Authentication Exploited
The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Poi
- 6.5 Medium severity
TP-Link TL-WR841N Authentication Bypass by Spoofing Exploited
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not req
- 6.0 Medium severity
Cisco ASA and FTD Privilege Escalation Exploited
A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, l
- 5.5 Medium severity
Android Pixel Information Disclosure Exploited
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
- 6.5 Medium severity
Apple Multiple Products WebKit Out-of-Bounds Read Exploited
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue m
- 5.4 Medium severity
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Exploited
Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker to load arbitrary JavaS
- 5.3 Medium severity
Microsoft Skype for Business Privilege Escalation Exploited
Skype for Business Elevation of Privilege Vulnerability
- 5.4 Medium severity
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 5.5 Medium severity
Microsoft WordPad Information Disclosure Exploited
Microsoft WordPad Information Disclosure Vulnerability
- 5.5 Medium severity
Arm Mali GPU Kernel Driver Use-After-Free Exploited
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
- 6.6 Medium severity
Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Exploited
A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitr
- 5.3 Medium severity
Juniper Junos OS SRX Series Missing Authentication for Critical Function Exploited
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php tha
- 6.1 Medium severity
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Exploited
Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.
- 5.5 Medium severity
Apple Multiple Products Improper Certificate Validation Exploited
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against v
- 6.5 Medium severity
Microsoft Word Information Disclosure Exploited
Microsoft Word Information Disclosure Vulnerability
- 6.5 Medium severity
Qlik Sense Path Traversal Exploited
A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote at
- 5.3 Medium severity
Juniper Junos OS EX Series Missing Authentication for Critical Function Exploited
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that
- 5.3 Medium severity
Juniper Junos OS SRX Series Missing Authentication for Critical Function Exploited
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't req
- 5.3 Medium severity
Juniper Junos OS EX Series PHP External Variable Modification Exploited
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify c
- 6.1 Medium severity
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Exploited
Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.