CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.23)
Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42_multi were found to contain a stack overflow via parameter ssid at url /goform/fast_setting_wifi_set.
The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a file has been uploaded to the server in the upload_post_image() function.
An HTTP Request Tunneling vulnerability was found in Qlik Sense Enterprise for Windows affecting versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier. This allows a remote attacker to elevate their privilege by tunneling HTTP requests in the raw HTTP request.
A vulnerability in TripSpark VEO Transportation and NovusEDU allows SQL injection through unsanitized POST parameters. Attackers can manipulate student busing information search queries.
Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI.
A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution.
A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution.
In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.
An issue was discovered in FRRouting FRR 9.0, where bgpd/bgp_open.c does not check for an overly large length of the rcv software version.
An issue was discovered in FRRouting FRR through 9.0 that allows reading the initial byte of the ORF header in an ahead-of-stream situation.
An issue was discovered in FRRouting FRR through 9.0 related to an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c. There is no check for the availability of two bytes during AIGP validation.
The Volty CMS Blog theme up to version v4.0.1 was found to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single.
Version up to 4.0.0 of the volty tvcmsvideotab theme was found to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run().
SmartNode SN200 version 3.21.2-23021 allows unauthenticated OS Command Injection.
A SQL injection vulnerability was discovered in ECTouch v2 via the $arr['id'] parameter in the insert.php file. An attacker can exploit this flaw to execute unauthorized database queries.
Tenda AC6 version US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to buffer overflow in function sub_90998.
User enumeration is found in PHPJabbers Make an Offer Widget v1.0 during password recovery. Differences in messages could allow an attacker to determine if the user is valid, enabling a brute force attack on valid users.
User enumeration is found in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
User enumeration is found in PHP Jabbers Car Rental Script v3.0 during the password recovery process. Differences in messages could allow an attacker to determine if a user is valid, facilitating a brute force attack on user accounts.