CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC device running firmware version V15.03.06.33_en via the wrlEn_5g parameter at /goform/WifiBasicSet.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router firmware version V15.03.06.33_en via the ssid parameter at /goform/WifiBasicSet. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware V15.03.06.33_en, triggered via the security parameter in a request to /goform/WifiBasicSet.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en, specifically in the wepauth_5g parameter at /goform/WifiBasicSet. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepkey3 parameter at the /goform/WifiBasicSet endpoint.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en, specifically in the wepkey_5g parameter of the /goform/WifiBasicSet script. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wepkey3_5g parameter in the /goform/WifiBasicSet script.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepkey1_5g parameter in the /goform/WifiBasicSet script.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en, specifically in the wepkey parameter at the /goform/WifiBasicSet endpoint. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router firmware V15.03.06.33_en via the wepkey4 parameter in the /goform/WifiBasicSet script.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wepkey2 parameter in the /goform/WifiBasicSet endpoint.
A Cross Site Scripting (XSS) vulnerability in the IRZ Electronics RUH2 GSM router allows an attacker to inject malicious script via the Upload File parameter. This can lead to theft of sensitive information such as session data or cookies.
A critical SQL Injection vulnerability in SourceCodester Best POS Management System 1.0. An unknown functionality in the file billing/index.php?id=9 allows manipulation of the id argument, leading to SQL injection. The attack can be launched remotely.
A problematic vulnerability in SourceCodester Best POS Management System 1.0, in the save_settings function of index.php?page=site_settings, Image Handler component. Manipulation of the img argument with ../../shell.php leads to unrestricted upload. The attack can be initiated remotely.
Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.
An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.
Denial of Service vulnerability in Visual Studio.
An information disclosure vulnerability in Azure Machine Learning Compute Instance. An attacker could exploit this to gain unauthorized access to data.
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability.
Spoofing Vulnerability in Microsoft Edge (Chromium-based). An attacker could impersonate a trusted source.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS