CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.
Unknown vulnerability in the remote tape support (remote.c) in the RMT client for Jorg Schilling sdd versions 1.28 and 1.31. Details regarding impact and attack vectors are unknown.
SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.
A vulnerability in the display.cgi script of Aborior Encore WebForum allows a remote attacker to execute arbitrary system commands by sending shell metacharacters in the file variable.
A buffer overflow vulnerability in the uustat utility in Sun Solaris 8 and 9 allows local users to execute arbitrary code by providing a long -S command line argument.
An unknown vulnerability in Apache 2.0.51 prevents the merging of the Satisfy directive, which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration.
Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.
SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via the offset parameter.
Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges.
SQL injection vulnerability in mailorder.asp or payonline.asp in CactuShop 5.x allows remote attackers to execute arbitrary SQL commands via the strItems parameter.
Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain elevated privileges.
Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.
The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unauthorized access via a direct request to main.asp.
The Attachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, improperly handles files with multiple extensions such as .php.rar, allowing remote attackers to upload and execute arbitrary code.
SQL injection vulnerability in the show_stats module in Arcade.php in IbProArcade allows remote attackers to execute arbitrary SQL code via the gameid parameter.
A buffer overflow vulnerability in BlackJumboDog 3.x FTP server allows remote attackers to execute arbitrary code by sending long FTP commands such as USER, PASS, RETR, CWD, XMKD, and XRMD.
Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as revert and delete.
Unknown vulnerability in the PageEditor component in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact.
The vulnerability in JRun 4.0 involves improper generation and handling of the JSESSIONID, allowing a remote attacker to perform a session fixation attack and hijack a user's HTTP session.
WebCalendar allows remote attackers to gain privileges by modifying critical parameters to view_entry.php or upcoming.php.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS