Medium severity vulnerabilities
201 CVEs scored 4.0 to 6.9 on CVSS. Medium-severity vulnerabilities have limited impact or are harder to exploit. They still matter when chained with other flaws.
- 5.5 Medium severity
Apple Multiple Products Kernel Unspecified Exploited
This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to modify sensit
- 5.5 Medium severity
Android Pixel Information Disclosure Exploited
In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User i
- 6.5 Medium severity
Apple Multiple Products WebKit Out-of-Bounds Read Exploited
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive informatio
- 4.4 Medium severity
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Exploited
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
- 4.9 Medium severity
Strapi Cleartext Storage of Sensitive Information Exploited
Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the a
- 4.4 Medium severity
Microsoft Windows SmartScreen Security Feature Bypass Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
- 5.3 Medium severity
Joomla! Improper Access Control Exploited
An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.
- 5.4 Medium severity
Microsoft Defender SmartScreen Security Feature Bypass Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
- 6.8 Medium severity
Mitel MiVoice Connect Code Injection Exploited
The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.
- 6.8 Medium severity
Mitel MiVoice Connect Command Injection Exploited
A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker with internal network access to conduct a command-injection attack, due to insufficient restriction of URL parameters.
- 5.4 Medium severity
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 5.4 Medium severity
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
- 6.5 Medium severity
Google Chromium Intents Insufficient Input Validation Exploited
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
- 6.1 Medium severity
Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Exploited
An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Strike teamserver. To exploit the vulnerability, one must first inspect a Cobalt Strike payload, and the
- 5.5 Medium severity
Apple macOS Out-of-Bounds Read Exploited
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able
- 6.5 Medium severity
Cisco IOS XR Open Port Exploited
A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running within the NOSi container. This vulnerability exists because the health check RPM opens TCP port 6379
- 5.9 Medium severity
Microsoft Windows LSA Spoofing Exploited
Windows LSA Spoofing Vulnerability
- 6.1 Medium severity
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Exploited
A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated attackers to execute arbitrary web script or HTML via request parameters.
- 6.8 Medium severity
Zoho ManageEngine ADSelfService Plus Remote Code Execution Exploited
Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature. Due to the use of a default administrator password, attackers may be a
- 4.4 Medium severity
Microsoft Windows User Profile Service Privilege Escalation Exploited
Windows User Profile Service Elevation of Privilege Vulnerability
- 4.6 Medium severity
Microsoft Windows CLFS Driver Privilege Escalation Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- 6.5 Medium severity
VMware vCenter Server Incorrect Default File Permissions Exploited
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
- 4.6 Medium severity
Microsoft Windows Print Spooler Privilege Escalation Exploited
Windows Print Spooler Elevation of Privilege Vulnerability
- 6.1 Medium severity
Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Exploited
An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes.
- 5.3 Medium severity
Zabbix Frontend Improper Access Control Exploited
After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.
- 6.9 Medium severity
Microsoft Windows User Profile Service Privilege Escalation Exploited
Windows User Profile Service Elevation of Privilege Vulnerability
- 5.3 Medium severity
SolarWinds Serv-U Improper Input Validation Exploited
Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as th
- 6.4 Medium severity
Android Kernel Race Condition Exploited
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:
- 5.0 Medium severity
Grafana Path Traversal Exploited
Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>
- 6.1 Medium severity
Google Chromium Intents Improper Input Validation Exploited
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.
- 6.5 Medium severity
Google Chromium Information Disclosure Exploited
Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
- 5.5 Medium severity
Samsung Mobile Devices Improper Input Validation Exploited
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.
- 6.5 Medium severity
SonicWall SMA100 Appliances OS Command Injection Exploited
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
- 5.3 Medium severity
VMware vCenter Server Improper Access Control Exploited
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being acc
- 5.5 Medium severity
Apple macOS Unspecified Exploited
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively ex
- 5.3 Medium severity
Atlassian Jira Server and Data Center Path Traversal Exploited
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint. The affected versions are before version 8.5.14, from version 8.6.0 before 8.13.6, a
- 5.3 Medium severity
Atlassian Confluence Server Pre-Authorization Arbitrary File Read Exploited
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7
- 6.4 Medium severity
Samsung Mobile Devices Race Condition Exploited
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.
- 6.4 Medium severity
Samsung Mobile Devices Race Condition Exploited
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.
- 5.4 Medium severity
OpenPLC ScadaBR Cross-site Scripting Exploited
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.