CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Sitecore XP from version 7.5 to 8.2 Update-7 allows remote code execution through insecure deserialization. No authentication or special configuration is required to exploit this flaw.
A command injection vulnerability was discovered in the HNAP1 protocol on D-Link DIR-823G devices running firmware V1.0.2B05. An attacker can remotely execute arbitrary system commands by sending a crafted login request with shell metacharacters in the PrivateLogin field.
A vulnerability in the /cgi-bin/upload_firmware.cgi component of D-Link DIR-823G REVA1 1.02B05 allows attackers to cause a denial of service (DoS) via unspecified vectors.
A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker can remotely execute arbitrary web scripts by sending shell metacharacters in the Captcha field during login.
An XML External Entity (XXE) vulnerability was found in Symphony 2.7.10 in the class.xmlelement.php file, potentially leading to information disclosure or denial of service (DOS).
W systemie Sourcecodester Online Reviewer 1.0 występuje podatność na zdalne wykonanie kodu (RCE), która pozwala na przesłanie złośliwie przygotowanego pliku PHP, omijającego filtry przesyłania obrazów.
W systemie zamawiania jedzenia online Sourcecodester w wersji 2.0 występuje podatność na zdalne wykonanie kodu (RCE) spowodowana przez złośliwie skonstruowany plik PHP, który omija filtry przesyłania obrazów.
W systemie zarządzania skargami Sourcecodester w wersji 1.0 występuje podatność na wstrzykiwanie SQL poprzez parametr cid w pliku complaint-details.php.
BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation. SQL injection can, for example, use the txtID (aka username) parameter. Successful exploitation can include the ability to execute arbitrary code as MSSQLSERVER$ via xp_cmdshell.
Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. The vulnerability enables remote execution of system commands with the highest privileges.
SAP Business One w wersji 10.0 umożliwia atakującemu wstrzykiwanie formuł podczas eksportu danych do Excela (atak CSV) z powodu niewłaściwego oczyszczania danych podczas eksportu. Atakujący może w ten sposób wykonać dowolne polecenia na komputerze ofiary, pod warunkiem, że ofiara zezwoli na wykonywanie makr podczas otwierania pliku, a ustawienia zabezpieczeń Excela pozwolą na wykonanie poleceń.
Use-after-free vulnerability in Portals in Google Chrome prior to 94.0.4606.61. A remote attacker who compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page.
Use-after-free vulnerability in Indexed DB API in Google Chrome prior to 93.0.4577.82. A remote attacker who compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page.
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions.
Grafana has a vulnerability that allows unauthenticated and authenticated users to view snapshots with the lowest database key by accessing specific paths. If the public_mode setting is enabled, unauthenticated users can also delete such snapshots. Authenticated users can delete snapshots regardless of this setting, leading to complete snapshot data loss.
W Apache HTTP Server 2.4.49 znaleziono lukę w normalizacji ścieżek, która umożliwia atak typu path traversal. Atakujący może uzyskać dostęp do plików poza skonfigurowanymi katalogami, co może prowadzić do zdalnego wykonania kodu, jeśli skrypty CGI są włączone dla tych ścieżek.
Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection. Remote attackers can execute arbitrary SQL commands via the email parameter on the edit pages for Customer, Room, Currency, Room Booking Details, or Tax Details.
In version 2.1.15 and below of the Lider module in LiderAhenk software, configurations are leaking via an unsecured API. An attacker with access to the configurations API could obtain valid LDAP credentials.
Webauthn Framework 3.3.x before 3.3.4 has Incorrect Access Control. An attacker that controls a user's system is able to login to a vulnerable service using an attached FIDO2 authenticator without passing a check of the user presence.
When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS