CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
HAX CMS before version 26.0.0 contains an Authenticated Local File Inclusion (LFI) vulnerability in the saveOutline endpoint. A low-privileged user can read arbitrary files on the server by manipulating the location field in site.json. This allows exfiltration of sensitive system files.
HAX CMS, used to manage microsites with PHP or Node.js backends, crashes before version 26.0.0 when an authenticated attacker sends a crafted site creation request to the createSite endpoint. A single request can take the entire application offline, requiring a manual server restart.
OpenXDMoD prior to version 11.0.3 has a JavaScript injection vulnerability via authenticated attacker profile. The attacker can inject malicious script and abuse password reset to email a link; when clicked, the script executes in the victim's browser, potentially leading to account takeover.
Open XDMoD before version 11.0.3 has a flaw in access control logic that allows an attacker to send a crafted HTTPS POST request setting a session variable used for authorization. If the optional Job Performance (SUPReMM) module is installed, the attacker can bypass data access restrictions and view other users' compute job efficiency metrics.
An administrative cross-site scripting (XSS) vulnerability exists in the web UI dashboard of Arista Edge Threat Management (Arista NGFW). Unvalidated user input is reflected in administrative profiles, allowing malicious code execution.
An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW), allowing authenticated administrators to obtain underlying terminal script code processing execution permissions.
A command injection vulnerability exists in the Captive Portal Custom Handler of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW), allowing an authenticated administrator to execute arbitrary platform shell commands.
A vulnerability was discovered in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) version 17.4.0 in the Reports application due to insecure input validation. Earlier software releases are not affected.
An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) version 17.4.0, allowing execution of arbitrary shell commands.
HAX CMS versions from 2.0.0 to 26.0.0 have the gitlist plugin exposed to unauthenticated users, allowing unauthenticated browsing of git repositories and git history.
Na dotkniętych platformach z obsługą sprzętowego IPSec działających na Arista EOS z włączonymi określonymi funkcjami IPsec, EOS może wykazywać nieoczekiwane zachowanie w określonych przypadkach. Fluktuacje interfejsów fizycznych oraz niektóre restarty agentów mogą powodować ponowne nawiązywanie tunelu IPsec z istniejącymi skojarzeniami bezpieczeństwa, co prowadzi do niezgodności numerów sekwencyjnych między punktami końcowymi tunelu.
W urządzeniach D-Link DWR-M920 do wersji 1.1.50 zidentyfikowano lukę, która pozwala na zdalne wstrzyknięcie poleceń systemowych poprzez manipulację argumentem IMEI_value w funkcji sub_412DA0 w pliku /boafrm/formIMEISetup.
A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input. Crafted inputs can trigger a processing error, causing the RTSP service to enter a non-responsive state.
On affected platforms running Arista EOS, a tunnel decapsulation configuration, such as VXLAN, decap-groups, or a GRE tunnel interface, may lead to incorrect decapsulation and forwarding of other unexpected tunneled packets. This issue arises from the switch's failure to verify the tunnel protocol type.
7-Zip versions 9.18 through 26.00 contain a heap out-of-bounds read vulnerability in the BSD SYMDEF parser. The ParseLibSymbols function reads data beyond the allocated memory area, potentially leading to leakage of uninitialized data.
7-Zip, a file archiver, contains an off-by-one vulnerability in the ParseDepedencyExpression function that may lead to out-of-bounds reads. Versions 9.21 through 26.00 are affected, potentially resulting in crashes or minor information disclosure.
7-Zip versions 9.18 through 26.00 contain a vulnerability in the SquashFS archive handler, involving an uninitialized heap read. This issue occurs when processing images with few inodes, potentially leading to memory information disclosure.
7-Zip versions 9.34 through 26.00 contain an off-by-one vulnerability in the WIM archive handler, leading to out-of-bounds read. An attacker can control the security identifier, allowing for application crashes.
A vulnerability was detected in D-Link DWR-M920 up to version 1.1.50. Manipulation of the ussdValue argument in the sub_41CF20 function leads to command injection, allowing for remote attacks.
W systemie zarządzania uczelnią tittuvarghese CollegeManagementSystem zidentyfikowano podatność, która dotyczy nieznanej funkcjonalności pliku /dashboard_page/forms/fetch.php. Manipulacja argumentem department_name prowadzi do ataku typu cross site scripting (XSS).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS