CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.08)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Zidentyfikowano słabość w iHongRen pptp-vpn 1.0/1.0.1 na macOS, która dotyczy funkcji shouldAcceptNewConnection w pliku HelpTool/HelperTool.m komponentu XPC Service. Problem ten prowadzi do braku autoryzacji, co może umożliwić lokalne ataki.
W Apeman ID71 odkryto lukę bezpieczeństwa, która dotyczy nieznanego kodu w pliku /system/www/system.ini. W wyniku manipulacji w tym pliku mogą zostać ujawnione twardo zakodowane dane uwierzytelniające.
A cross-site scripting (XSS) vulnerability was found in the langleyfcu Online Banking System in the /connection_error.php file, in the Error Message Handler component. Manipulation of the Error argument allows remote exploitation. The exploit has been made public.
A vulnerability in code-projects Project Monitoring System 1.0 affects an unknown function in the /onlineJobSearchEngine/postjob.php file. Manipulation of the txtapplyto argument leads to cross-site scripting (XSS). The attack can be launched remotely, and the exploit is publicly available. Other parameters might be affected as well.
A stack-based buffer overflow vulnerability has been found in Tenda AC18 version 15.03.05.19, affecting an unknown function in /goform/saveAutoQos. Manipulation of the enable argument causes stack-based buffer overflow. The attack may be initiated remotely and the exploit has been published.
A vulnerability was detected in Tenda AC18 15.03.05.19. This affects an unknown function of the file /goform/WizardHandle. The manipulation of the argument WANT/mtuvalue results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.
A vulnerability in Tenda AC18 15.03.05.19 affects an unknown function in /goform/AdvSetLanip. Manipulation of the lanIp argument leads to command injection. The attack can be initiated remotely and the exploit is public.
A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.
itsourcecode Hostel Management System 1.0 has an XSS vulnerability in /justines/index.php in the POST Request Handler component. Manipulating the from argument allows remote attacks. The exploit has been publicly released.
Zidentyfikowano podatność w systemie oceniania studentów CodeAstro w wersji 1.0. Problem dotyczy nieznanego przetwarzania pliku /adminLogin.php, co prowadzi do możliwości wstrzyknięcia SQL poprzez manipulację argumentem staffId.
A buffer overflow vulnerability has been determined in Tenda CH22 version 1.0.0.1, affecting the formWrlExtraGet function in /goform/GstDhcpSetSer. Manipulation of the dips argument causes buffer overflow. The attack is possible to be carried out remotely and the exploit has been publicly disclosed.
W systemie Simple Scheduling System w wersji 1.0 odkryto podatność, która dotyczy nieznanej części pliku /add.home.php. Manipulacja argumentem 'faculty' prowadzi do wstrzykiwania SQL, co może być wykorzystane zdalnie.
W systemie Simple Scheduling System 1.0 odkryto podatność, która dotyczy nieznanej funkcjonalności pliku /addtime.php. Manipulacja argumentami starttime/endtime prowadzi do wstrzykiwania SQL.
A flaw has been found in CodeAstro Online Leave Application 1.0. The vulnerability affects an unknown functionality in the file /leaveAplicationForm.php. Manipulation of the absence[] argument can lead to SQL injection. The attack may be launched remotely. The exploit has been published and may be used.
A vulnerability was detected in CodeAstro Online Leave Application 1.0. It affects an unknown function in the file /signup.php. Manipulation of the city argument results in SQL injection. The attack may be initiated remotely. The exploit is now public and may be used. Other parameters might be affected as well.
PHPGurukul Employee Record Management System 1.3 has an XSS vulnerability in /myprofile.php. Manipulating the First name argument allows remote attacks. The exploit has been publicly disclosed.
W systemie zarządzania głosowaniem online Campcodes Advanced w wersji 1.0 zidentyfikowano słabość, która dotyczy nieznanej funkcji pliku /admin/candidates_edit.php. Manipulacja argumentem ID prowadzi do podatności na atak typu SQL injection.
W systemie zarządzania nauką Campcodes Online Learning Management System w wersji 1.0 odkryto lukę bezpieczeństwa. Problem dotyczy nieznanej funkcji w pliku /admin/school_year.php, gdzie manipulacja argumentem school_year prowadzi do wstrzykiwania SQL.
Zidentyfikowano podatność w systemie sprzedaży i zarządzania zapasami Campcodes w wersji 1.0. Problem dotyczy nieznanej funkcji w pliku /pages/us_edit.php?action=edit, gdzie manipulacja argumentem ID prowadzi do wstrzykiwania SQL.
W systemie Simple Scheduling System w wersji 1.0 zidentyfikowano podatność, która dotyczy nieznanej funkcji w pliku /schedulingsystem/addroom.php. Manipulacja argumentem 'room' może prowadzić do wstrzyknięcia SQL.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS