CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
There is an unauthenticated local file inclusion vulnerability in Especio versions <= 1.0.
Deliciosa versions up to 1.10.0 are vulnerable to unauthenticated local file inclusion.
There is a vulnerability in Corbesier versions <= 1.15.0 that allows unauthenticated local file inclusion.
There is an unauthenticated local file inclusion vulnerability in CopyPress versions <= 1.4.5.
There is an unauthenticated local file inclusion vulnerability in Ingenioso versions <= 1.14.0.
Iona versions up to 1.0.8 are vulnerable to unauthenticated local file inclusion.
There is an unauthenticated local file inclusion vulnerability in MaxiNet versions <= 1.2.10.
There is an unauthenticated local file inclusion vulnerability in Nexio versions <= 1.10.0.
There is an unauthenticated local file inclusion vulnerability in Planty versions <= 1.14.0.
There is an unauthenticated local file inclusion vulnerability in AirSupply versions <= 2.0.0.
There is an unauthenticated local file inclusion vulnerability in Raider Spirit <= 1.1.2 versions.
There is an unauthenticated local file inclusion vulnerability in Rosaleen versions <= 2.8.
Versions of Modernee <= 1.6.0 are vulnerable to unauthenticated local file inclusion.
Versions of Qreatix <= 1.9.4 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts in the context of the victim's browser.
In Brikk versions up to 3.0.0, there is a vulnerability that allows subscribers to delete arbitrary content.
In WPBot Pro, versions up to 13.6.5, there is a vulnerability allowing subscribers to delete arbitrary files.
There is a vulnerability in Learnify versions up to 1.15.0 that allows unauthenticated local file inclusion.
Versions of Sonaar up to 4.27.4 contain a vulnerability that allows subscriber privilege escalation.
Versions of Sonaar <= 4.27.4 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious JavaScript code.
There is an unauthenticated local file inclusion vulnerability in HomeRoofer versions <= 2.11.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS