CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in phpWishlist before version 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php, bypassing login.
The ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
A vulnerability in probe.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the olddat parameter. It is unclear which product or vendor this program is associated with.
A buffer overflow in the mms_interp_header function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams.
The vulnerability in eRoom 6.x allows a remote attacker to attach .lnk files, enabling arbitrary command execution on the server.
Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the 'Messages waiting' message.
The vulnerability in eRoom is due to the lack of an expiration date for cookies, allowing a remote attacker to capture cookies and conduct replay attacks.
Multiple unknown vulnerabilities in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to bypass authentication.
SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote attackers to execute arbitrary SQL statements via the temp array, which is not initialized before it is used and prevents the attacker-supplied portions of the array from being properly escaped.
Cisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the 'Messages waiting' message.
PHP remote file inclusion vulnerability in lang.php in SPiD before 1.3.1 allows remote attackers to execute arbitrary code via the lang_path parameter.
Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the email parameter to comersus_optAffiliateRegistrationExec.asp or idProduct parameter to comersus_optReviewReadExec.asp.
The vulnerability in the class.xmail.php script in PhpXmail versions 0.7 through 1.1 is due to improper handling of long passwords. As a result, no error message is returned, allowing a remote attacker to bypass authentication and gain unauthorized access.
PHP local file inclusion vulnerability in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter in view.php and open.php.
SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the prevnext parameter.
The vulnerability in config.php in Cacti 0.8.6e and earlier allows a remote attacker to set the no_http_headers switch, then modify session information to gain elevated privileges and disable the addslashes function, enabling SQL injection attacks.
Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending a legitimate value in a POST request or cookie, then specifying the attack string in the URL, which causes the get_request_var function to return the wrong value in the $_REQUEST variable, which is cleansed while the original malicious $_GET value remains unmodified, as demonstrated in (1) graph_image.php and (2) graph.php.
The vulnerability in read.cgi in GlobalNoteScript allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.
A regression error in the embedded HSQLDB in JBoss jBPM 2.0 allows remote attackers to execute arbitrary commands. This is a re-introduction of a vulnerability originally identified as CVE-2003-0845.
The vulnerability in IMail stores usernames and passwords in cleartext in a cookie, allowing remote attackers to obtain sensitive information.