CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-2023-3046 is a vulnerability related to improper neutralization of special elements used in SQL commands, allowing SQL Injection attacks in Biltay Technology's Scienta system. This issue affects versions before 20230630.1953.
A critical vulnerability has been found in Campcodes Beauty Salon Management System version 1.0. Manipulation of the contactno argument in the /admin/edit-accepted-appointment.php file leads to SQL injection, which can be exploited remotely.
A critical vulnerability was found in Campcodes Beauty Salon Management System version 1.0. Manipulation of the contactno argument in the /admin/forgot-password.php file leads to SQL injection.
A critical vulnerability has been found in Campcodes Beauty Salon Management System version 1.0. Manipulation of the editid argument in the /admin/del_service.php file leads to SQL injection, allowing for remote attacks.
A critical vulnerability was found in Campcodes Beauty Salon Management System version 1.0. The issue affects some unknown processing of the file /admin/del_category.php, where manipulation of the argument id leads to SQL injection.
Pandoc versions before 3.1.6 allow arbitrary file write, which can be triggered by providing a crafted image element in the input when generating files via the --extract-media option or outputting to PDF format.
A critical vulnerability was found in Campcodes Beauty Salon Management System version 1.0. Manipulation of the 'pagedes' argument in the /admin/about-us.php file leads to SQL injection, allowing for remote attacks.
A critical vulnerability was found in Campcodes Beauty Salon Management System version 1.0. Manipulation of the 'cost' argument in the /admin/add-services.php file leads to SQL injection, which can be executed remotely.
A critical vulnerability was found in Campcodes Beauty Salon Management System version 1.0. Manipulation of the searchdata argument in the /admin/search-appointment.php file leads to SQL injection, which can be exploited remotely.
A critical vulnerability has been found in Campcodes Beauty Salon Management System version 0.1.0. Manipulation of the 'id' argument in the /admin/del_feedback.php file leads to SQL injection.
A critical vulnerability was found in Campcodes Beauty Salon Management System version 1.0. Manipulation of the adminname argument in the /admin/admin-profile.php file leads to SQL injection, allowing for remote attack execution.
REDCap versions 12.0.26 LTS and 12.3.2 Standard allow SQL Injection via scheduling, repeatforms, purpose, app_title, or randomization.
An issue in /functions/fbaorder.php of Prestashop amazon before v5.2.24 allows attackers to execute a directory traversal attack.
A critical vulnerability has been found in Campcodes Beauty Salon Management System version 1.0, affecting unknown processing of the file /admin/index.php. Manipulation of the argument username leads to SQL injection.
A critical vulnerability was found in Campcodes Beauty Salon Management System version 1.0. Manipulation of the editid argument in the /admin/edit-services.php file leads to SQL injection, which can be initiated remotely.
A critical vulnerability has been found in Campcodes Beauty Salon Management System version 1.0. Manipulation of the 'id' argument in the /admin/edit_category.php file leads to SQL injection.
A cross-site scripting (XSS) vulnerability in Assembly Software Trialworks v11.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the asset src parameter.
Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with APIs or other web frameworks that route requests based on non-normalized requests.
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts.
A vulnerability exists allowing low-privileged users to read and update data in various directories used by the Zenon system. An attacker could exploit this vulnerability using specially crafted programs that can run on the installed zenon hosts.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS