Medium severity vulnerabilities
201 CVEs scored 4.0 to 6.9 on CVSS. Medium-severity vulnerabilities have limited impact or are harder to exploit. They still matter when chained with other flaws.
- 5.5 Medium severity
Microsoft Windows Kernel Information Disclosure Exploited
Windows Kernel Information Disclosure Vulnerability
- 6.5 Medium severity
Google Chromium PopupBlocker Security Bypass Exploited
Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe.
- 5.5 Medium severity
Arm Trusted Firmware Out-of-Bounds Write Exploited
In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mode.
- 6.6 Medium severity
Microsoft Exchange Server Security Feature Bypass Exploited
Microsoft Exchange Server Security Feature Bypass Vulnerability
- 5.5 Medium severity
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Exploited
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Mu
- 4.9 Medium severity
SonicWall Email Security Path Traversal Exploited
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.
- 6.1 Medium severity
Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Exploited
This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a repo
- 6.7 Medium severity
Samsung Mobile Devices Improper Boundary Check Exploited
An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.
- 6.7 Medium severity
Samsung Mobile Devices Unspecified Exploited
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.
- 4.4 Medium severity
Samsung Mobile Devices Memory Corruption Exploited
An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.
- 5.5 Medium severity
Samsung Mobile Devices Improper Access Control Exploited
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.
- 6.5 Medium severity
Microsoft Office Remote Code Execution Exploited
Microsoft Office Remote Code Execution Vulnerability
- 5.3 Medium severity
VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Exploited
The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter
- 6.8 Medium severity
Adobe Acrobat and Reader Heap-based Buffer Overflow Exploited
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve
- 6.1 Medium severity
Roundcube Webmail Cross-Site Scripting (XSS) Exploited
An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in rcube_string_
- 5.5 Medium severity
Apple Multiple Products Memory Initialization Exploited
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.
- 6.1 Medium severity
QNAP NAS File Station Cross-Site Scripting Exploited
If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on b
- 5.4 Medium severity
QNAP NAS File Station Cross-Site Scripting Exploited
If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20200410 and later QTS 4.4.1.1261 build 20200330 and later QTS
- 6.1 Medium severity
Cisco ASA and FTD Cross-Site Scripting (XSS) Exploited
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a
- 5.5 Medium severity
Apple iOS, iPadOS, and macOS Input Validation Exploited
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information.
- 5.5 Medium severity
Microsoft Windows Spoofing Exploited
A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass secur
- 6.5 Medium severity
Fortinet FortiOS Default Configuration Exploited
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.
- 4.3 Medium severity
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Exploited
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privil
- 6.5 Medium severity
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Exploited
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low priv
- 6.5 Medium severity
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Exploited
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.
- 5.4 Medium severity
Treck TCP/IP stack Out-of-Bounds Read Exploited
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
- 4.3 Medium severity
Apple iOS, iPadOS, and watchOS Memory Corruption Exploited
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.
- 6.1 Medium severity
Roundcube Webmail Cross-Site Scripting (XSS) Exploited
An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview.
- 4.3 Medium severity
IBM Data Risk Manager Directory Traversal Exploited
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.
- 6.5 Medium severity
SaltStack Salt Path Traversal Exploited
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.
- 6.1 Medium severity
JQuery Cross-Site Scripting (XSS) Exploited
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untr
- 6.5 Medium severity
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Exploited
A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the
- 6.5 Medium severity
Google Chromium V8 Out-of-Bounds Write Exploited
Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- 6.5 Medium severity
Fortinet FortiOS Use of Hard-Coded Credentials Exploited
Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge of the hard-coded key. The aforementioned sensitive data incl
- 6.5 Medium severity
Google Chrome Blink Use-After-Free Exploited
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- 6.5 Medium severity
Fortinet FortiOS and FortiProxy Out-of-bounds Write Exploited
A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users d
- 6.5 Medium severity
Microsoft Windows SMB Information Disclosure Exploited
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821.
- 6.1 Medium severity
WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Exploited
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro.
- 6.5 Medium severity
TIBCO JasperReports Library Directory Traversal Exploited
The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, T
- 6.5 Medium severity
Microsoft Internet Explorer Information Disclosure Exploited
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vul