CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Google Cloud Apigee SetIntegrationRequest policy allows SSRF and theft of service account tokens. Requires insecure proxy configuration by an administrator.
FastNetMon Community Edition up to version 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin. The _log() function in src/juniper_plugin/fastnetmon_juniper.php (lines 117-118) constructs shell commands by concatenating the $msg parameter directly into exec() calls. The $msg variable contains unsanitized data derived from command-line arguments argv[1] through argv[3], representing the attack IP address, direction, and power.
FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI decoder. The function decode_bgp_subnet_encoding_ipv4_raw() in src/bgp_protocol.cpp reads prefix_bit_length directly from the BGP packet without validating it is <= 32 for IPv4 prefixes. This value is passed to how_much_bytes_we_need_for_storing_certain_subnet_mask() which computes ceil(prefix_bit_length / 8), returning up to 32 bytes for a prefix_bit_length of 255. The result is used as the length argument to memcpy() copying into a 4-byte uint32_t stack variable (prefix_ipv4), causing a stack buffer overflow of up to 28 bytes, which can be exploited for arbitrary code execution. Additionally, the unvalidated prefix_bit_length is passed to convert_cidr_to_binary_netmask_local_function_copy(), where a shift of (32 - cidr) with cidr > 32 causes undefined behavior.
The Samba printing subsystem contains a vulnerability where the client-controlled job description string is passed to the command configured with the 'print command' setting via the '%J' substitution character without escaping shell meta characters. A remote attacker can send a specially crafted print job description containing unescaped shell characters, leading to remote code execution.
Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie.
A vulnerability in the Totolink N300RH router version 6.1c.1353_B20190305 allows a remote attacker to inject OS commands via the admpass argument in the setPasswordCfg function of the web management interface.
A flaw was found in KubeVirt's virt-handler component due to improper symlink validation when connecting to virtual machine console sockets. An authenticated OpenShift user with edit permissions in a single namespace can replace the console socket with a symlink to the host's CRI-O socket, hijacking virt-handler's privileged connection.
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. _make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The secure-extract mode check that guards regular file extraction does not cover the symlink target. A subsequent open through the extracted name reads or writes the attacker chosen path.
Perl versions up to 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. The bug in Perl_study_chunk leads to an undersized buffer allocation and subsequent out-of-bounds write.
The JetEngine plugin for WordPress by Crocoblock is vulnerable to SQL Injection. The issue affects all versions up to and including 3.8.8.1. Improper neutralization of special elements used in SQL commands allows an attacker to execute arbitrary SQL queries.
SQL injection vulnerability in eMagicOne Store Manager allows an attacker to perform blind SQL queries due to improper neutralization of special elements in an SQL command. The issue affects versions up to 1.3.2.
In the Totolink A8000RU web management interface, the setParentalRules function is vulnerable to OS command injection via the enable argument.
In the Totolink A8000RU web management interface, the setAccessDeviceCfg function is vulnerable to OS command injection via the mac argument.
In the Totolink A8000RU web management interface, the setPasswordCfg function is vulnerable to OS command injection via the admpass argument.
In the Totolink A8000RU web management interface, the setIpQosRules function is vulnerable to OS command injection via the Comment argument.
A vulnerability in the Totolink A8000RU router version 7.1cu.643_b20200521 allows a remote attacker to inject OS commands via the enabled argument in the setWanCfg function of the web management interface.
A vulnerability in the Totolink A8000RU router version 7.1cu.643_b20200521 allows a remote attacker to inject OS commands via the FileName argument in the UploadFirmwareFile function of the web management interface.
The Szafir SDK automatically downloads and imports untrusted CA certificates from the AIA caIssuers URI extension, which can lead to incorrectly treating a digital signature as valid. This flaw enables authentication bypass and user impersonation.
In the Totolink A8000RU web management interface, the setOpenVpnCfg function is vulnerable to OS command injection via the enabled argument.
In the Totolink A8000RU web management interface, the UploadOpenVpnCert function is vulnerable to OS command injection via the FileName argument.