CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing a denial of service.
A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash.
Insertion of Sensitive Information Into Sent Data vulnerability in WPManageNinja FluentCart (fluent-cart) allows Retrieve Embedded Sensitive Data. This issue affects FluentCart through version 1.7.1.
The BSK PDF Manager WordPress plugin up to version 3.8.1 does not properly neutralize input during web page generation, allowing Stored XSS. A malicious script stored in the application is later executed in other users' browsers.
The Everest Forms WordPress plugin up to version 3.6.1 does not properly neutralize input during web page generation, allowing Stored XSS. A malicious script stored in a form is executed in users' browsers.
A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption, which may result in a system halt. The description does not specify the attack vector or required privileges.
A heap buffer overflow in HPE NonStop Debug Utilities could corrupt the resume-execution address and may potentially redirect execution flow. The description does not specify the attack vector or required privileges.
A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt the resume-execution address and may potentially redirect execution flow. The description does not specify the attack vector or required privileges.
A heap buffer overflow in HPE NonStop OCAX could corrupt the address space and may potentially redirect execution flow. The description does not specify the attack vector or required privileges.
A heap buffer overflow in HPE NonStop NDSREST could corrupt the resume-execution address and may potentially redirect execution flow. The description does not specify the attack vector or required privileges.
A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames inside a TAR archive. The description does not specify required privileges.
An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. A remote attacker who gains a user account can exploit the vulnerability to compromise the security of the system.
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data.
A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system.
An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system.
An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system.
An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a local attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system.
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands.
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS