CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the group parameter within /QueryView.php.
The SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to access sensitive information via the searchstring and searchwhat parameters within /QueryView.php.
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the PropertyID parameter within /QueryView.php.
ChurchCRM version 5.0.0 has an SQL injection vulnerability that allows a remote attacker to obtain sensitive information via the 'value' and 'custom' parameters within /QueryView.php.
The SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to access sensitive information via the membermonth parameter within /QueryView.php.
ChurchCRM version 5.0.0 has an SQL injection vulnerability that allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within /QueryView.php.
Version 5.0.0 of ChurchCRM has an SQL injection vulnerability that allows a remote attacker to obtain sensitive information via the friendmonths parameter in /QueryView.php.
The SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to access sensitive information via the role and gender parameters within the /QueryView.php component.
Cross Site Request Forgery (CSRF) vulnerability in wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the user-management feature in several components of the application.
An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal.
A critical vulnerability was found in SourceCodester Doctors Appointment System version 1.0. Manipulation of the useremail argument in the login.php file leads to SQL injection, which can be executed remotely.
The EaSYNC plugin by Syntactics, Inc. in versions up to 1.3.7 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.
Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the View Request of Nurse Page in the Admin portal. This allows an attacker to inject malicious scripts into the page.
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 2) that involves a use-after-free error. This can be triggered while parsing specially crafted DWG files, allowing an attacker to execute code in the context of the current process.
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7) that involves an out of bounds write past the end of an allocated structure while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
A vulnerability has been identified in RUGGEDCOM devices that may lead to a denial of service condition. An attacker may cause total loss of availability of the web server, which might recover after the attack is over.
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7) that involves an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files.
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7) that involves an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the current process.
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7) that involves an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS