CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.24)
PHP Scripts Mall Resume Clone Script is vulnerable to SQL Injection via the 'username' parameter in forget.php.
PHP Scripts Mall Professional Service Script is vulnerable to SQL injection via the id parameter in admin/review.php.
PHP Scripts Mall Car Rental Script is vulnerable to SQL Injection via the carid parameter in admin/carlistedit.php.
Version 6.0.4 of Dolibarr ERP/CRM contains an SQL injection vulnerability in fourn/index.php that allows remote attackers to execute arbitrary SQL commands via the socid parameter.
An SQL injection vulnerability in Dolibarr ERP/CRM version 6.0.4 in adherents/subscription/info.php allows remote attackers to execute arbitrary SQL commands via the rowid parameter.
SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Readymade Job Site Script is vulnerable to SQL Injection via the location_name array parameter in the /job URI.
Readymade Video Sharing Script is vulnerable to SQL Injection via the chnlid parameter in viewsubs.php or the search parameter in search_video.php.
An issue was discovered in Valve Steam Link build 643 where root passwords longer than 8 characters are truncated due to the default use of the DES algorithm.
An issue was discovered in Valve Steam Link build 643 related to the availability of the SSH daemon. When the SSH daemon is enabled for local development, the device is publicly accessible via IPv6 TCP port 22 by default, making it easier for remote attackers to gain access by guessing 24 bits of the MAC address and attempting a root login.
The JEXTN FAQ Pro extension version 4.0.0 for Joomla! has a SQL Injection vulnerability via the id parameter in a view=category action.
Vanguard Marketplace Digital Products PHP version 1.4 is vulnerable to SQL Injection via the PATH_INFO parameter in the /p URI.
The JEXTN Video Gallery extension version 3.0.5 for Joomla! has a SQL Injection vulnerability via the id parameter in a view=category action.
The 'JEXTN Question And Answer' extension version 3.1.0 for Joomla! has an SQL Injection vulnerability via the an parameter in a view=tags action or the ques-srch parameter.
The JBuildozer extension version 1.4.1 for Joomla! has a SQL Injection vulnerability via the appid parameter in an entriessearch action.
CVE-2017-17849 describes a buffer overflow vulnerability in GetGo Download Manager version 5.3.0.2712 and earlier. This could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response.
A Credentials Management issue was discovered in Moxa NPort W2150A and NPort W2250A versions prior to 1.11. The default password is empty, allowing unauthorized users to access the device without a password.
A buffer overflow vulnerability in the password function in QNAP QTS versions 4.2.6, 4.3.3.0378, 4.3.4.0387 (Beta 2) and earlier could allow remote attackers to execute arbitrary code on NAS devices.
CVE-2017-17032 describes a buffer overflow vulnerability in the password function in QNAP QTS, which could allow remote attackers to execute arbitrary code on NAS devices.
CVE-2017-17031 describes a buffer overflow vulnerability in the password function in QNAP QTS, which could allow remote attackers to execute arbitrary code on NAS devices.