CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router with firmware version V15.03.06.33_en via the security_5g parameter at /goform/WifiBasicSet.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC device running firmware version V15.03.06.33_en via the wrlEn_5g parameter at /goform/WifiBasicSet.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router firmware version V15.03.06.33_en via the ssid parameter at /goform/WifiBasicSet. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware V15.03.06.33_en, triggered via the security parameter in a request to /goform/WifiBasicSet.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en, specifically in the wepauth_5g parameter at /goform/WifiBasicSet. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepkey3 parameter at the /goform/WifiBasicSet endpoint.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en, specifically in the wepkey_5g parameter of the /goform/WifiBasicSet script. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wepkey3_5g parameter in the /goform/WifiBasicSet script.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en via the wepkey1_5g parameter in the /goform/WifiBasicSet script.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en, specifically in the wepkey parameter at the /goform/WifiBasicSet endpoint. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router firmware V15.03.06.33_en via the wepkey4 parameter in the /goform/WifiBasicSet script.
A stack overflow vulnerability was discovered in the Jensen of Scandinavia Eagle 1200AC router running firmware version V15.03.06.33_en. The issue is triggered via the wepkey2 parameter in the /goform/WifiBasicSet endpoint.
In the Linux kernel's nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list, resulting in a NULL pointer dereference.
GNU libmicrohttpd before 0.9.76 allows remote DoS due to improper parsing of a multipart/form-data boundary in the MHD_create_post_processor() method in postprocessor.c. An attacker can remotely send a malicious HTTP POST packet including one or more '\0' bytes in a multipart/form-data boundary field, which, assuming a specific heap layout, results in an out-of-bounds read and a crash in the find_boundary() function.
A Cross Site Scripting (XSS) vulnerability in the IRZ Electronics RUH2 GSM router allows an attacker to inject malicious script via the Upload File parameter. This can lead to theft of sensitive information such as session data or cookies.
A vulnerability in curl before 7.88.0 involves unlimited decompression steps in chained HTTP compression algorithms. The limit was applied per-header, allowing a malicious server to insert virtually unlimited compression steps, resulting in a malloc bomb and excessive heap memory allocation.
A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. The HSTS cache file gets overwritten by the most recently completed transfer, so a later HTTP-only transfer to the earlier host name would not get upgraded properly to HSTS.
OpenEMR before 7.0.0 contains a reflected cross-site scripting vulnerability in interface/forms/eye_mag/php/eye_mag_functions.php. Remote authenticated users can inject arbitrary web script or HTML via REQUEST_URI.
A critical SQL Injection vulnerability in SourceCodester Best POS Management System 1.0. An unknown functionality in the file billing/index.php?id=9 allows manipulation of the id argument, leading to SQL injection. The attack can be launched remotely.
A problematic vulnerability in SourceCodester Best POS Management System 1.0, in the save_settings function of index.php?page=site_settings, Image Handler component. Manipulation of the img argument with ../../shell.php leads to unrestricted upload. The attack can be initiated remotely.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS