CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.01)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A critical vulnerability has been found in NBS&HappySoftWeChat version 1.1.6, allowing unrestricted file uploads. The attack can be launched remotely.
A critical vulnerability was found in Codecanyon Credit Lite version 1.5.4, affecting an unknown functionality of the file /portal/reports/account_statement in the POST Request Handler component. Manipulation of the arguments date1/date2 leads to SQL injection.
The ELECOM wireless LAN access point devices have an OS command injection vulnerability that allows an authenticated user to execute arbitrary OS commands by sending a specially crafted request.
There is an OS command injection vulnerability in ELECOM wireless LAN routers that allows an attacker to execute arbitrary OS commands by sending a specially crafted request. This affects all versions of models WRC-F1167ACF, WRC-1750GHBK, WRC-1167GHBK2, WRC-1750GHBK2-I, and WRC-1750GHBK-E.
CVE-2023-39944 describes an OS command injection vulnerability in WRC-F1167ACF and WRC-1750GHBK products that allows an attacker to execute arbitrary OS commands by sending a specially crafted request.
An OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request.
A buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code.
CVE-2023-39445 describes a hidden functionality vulnerability in LAN-WH300N/RE devices of all versions provided by LOGITEC CORPORATION, allowing an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.
Proself Enterprise/Standard Edition version 5.61 and earlier, Proself Gateway Edition version 1.62 and earlier, and Proself Mail Sanitize Edition version 1.07 and earlier allow a remote authenticated attacker with administrative privileges to execute arbitrary OS commands.
CVE-2023-39415 describes an improper authentication vulnerability in Proself Enterprise/Standard Edition versions up to 5.61, Proself Gateway Edition versions up to 1.62, and Proself Mail Sanitize Edition versions up to 1.07. This allows a remote unauthenticated attacker to log in to the product's Control Panel and perform unintended operations.
The CVE-2023-38576 vulnerability in LAN-WH300N/RE devices of all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console.
All versions of LAN-W451NGR provided by LOGITEC CORPORATION contain an improper access control vulnerability that allows an unauthenticated attacker to log in to the telnet service.
A hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands.
The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eh_callback_handler function in versions up to and including 3.7.9. This allows unauthenticated attackers to modify the order status of arbitrary WooCommerce orders.
A buffer overflow vulnerability was discovered in the D-Link DIR-880 A1_FW107WWb08 device via the fgets function.
The Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 device was found to contain a buffer overflow vulnerability in the function FUN_00010e34().
Version 1.0.0.18 of the Tenda WH450 has a buffer overflow vulnerability in the fgets function.
A buffer overflow vulnerability was discovered in D-Link DIR-880 A1_FW107WWb08 via the function FUN_0001be68.
The Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 device was found to contain a buffer overflow vulnerability in the fgets function.
A NULL pointer dereference was discovered in the D-Link DIR-880 A1_FW107WWb08 in the function FUN_00010824.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS