CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An issue was discovered in dnaTools dnaLIMS 4-2015s13 related to plaintext password storage. The /home/dna/spool/.pfile file contains passwords in plain text.
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to a NUL-terminated directory traversal attack allowing an unauthenticated attacker to access system files readable by the web server user.
An issue was discovered in dnaTools dnaLIMS 4-2015s13 related to unauthenticated command execution through an improperly protected administrative web shell (cgi-bin/dna/sysAdmin.cgi in POST requests).
An issue was discovered on Dahua DHI-HCVR7216A-S3 devices running version 3.210.0001.10 built on 2016-06-06 related to the Dahua DVR Protocol operating on TCP Port 37777. This unencrypted, binary protocol allows for Man-in-the-Middle attacks, enabling packet sniffing and injection.
The Mail Masta plugin version 1.0 for WordPress has a SQL injection vulnerability that can be exploited by users with admin access. The issue affects the ./inc/subscriber_list.php file and the POST parameter: subscriber_email.
The Mail Masta plugin version 1.0 for WordPress has a SQL injection vulnerability that can be exploited by users with admin access. The issue affects the ./inc/subscriber_list.php file and the POST Parameter: list_id.
The Mail Masta plugin version 1.0 for WordPress has a SQL injection vulnerability that can be exploited by users with admin access. The issue affects the file ./inc/campaign/campaign-delete.php and the GET parameter: id.
The Mail Masta plugin version 1.0 for WordPress has a SQL injection vulnerability that can be exploited by users with admin access. The issue is present in the ./inc/lists/edit_member.php file with the GET Parameter: member_id.
The Mail Masta plugin version 1.0 for WordPress has a SQL injection vulnerability that can be exploited by users with admin access. The issue exists in the ./inc/lists/edit_member.php file with the GET Parameter: filter_list.
The Mail Masta plugin version 1.0 for WordPress has a SQL injection vulnerability that can be exploited by users with admin access. The issue is present in the ./inc/lists/edit-list.php file with the GET Parameter: id.
The Mail Masta plugin version 1.0 for WordPress has a SQL injection vulnerability that can be exploited by users with admin access. The issue is present in the ./inc/lists/add_member.php file with the GET Parameter: filter_list.
The Mail Masta plugin version 1.0 for WordPress has a SQL injection vulnerability that can be exploited by users with admin access. The issue is present in the ./inc/campaign/view-campaign.php file with the GET Parameter: id.
The Mail Masta plugin version 1.0 for WordPress has a SQL injection vulnerability that can be exploited by users with admin access. The issue is present in the ./inc/campaign/view-campaign-list.php file with the GET Parameter: id.
iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file.
Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size, which can be filled within minutes. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition for telephone, Internet, and TV services.
CVE-2017-6549 describes a session hijack vulnerability in ASUS routers that allows remote attackers to steal any active admin session. This affects multiple router models with specific firmware versions.
Buffer overflows in the networkmap function on ASUS RT-N56U, RT-N66U, RT-AC66U, and other routers allow remote attackers to execute arbitrary code. The issue affects routers with firmware versions prior to 3.0.0.4.380.7378 and other listed models.
Tenable Nessus before 6.10.2 (as used alone or in Tenable Appliance before 4.5.0) was found to contain a flaw that allowed a remote, authenticated attacker to upload a crafted file that could be written to anywhere on the system. This could be used to subsequently gain elevated privileges on the system.
An issue was discovered in Tableau Server versions 7.0 to 10.1.3 and Wonderware Intelligence versions 2014R3 and prior related to a default system account. This account is difficult to configure with non-default credentials after installation, and changing the default credentials is not documented.
CVE-2017-0528 describes an elevation of privilege vulnerability in the kernel security subsystem that allows a local malicious application to execute code in the context of a privileged process. This issue is rated as High due to being a general bypass for kernel level defense mechanisms.