CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
SQL injection vulnerability in search.php of MyBulletinBoard (MyBB) versions 1.00 Release Candidate 1 through 4. A remote attacker can execute arbitrary SQL commands via the uid parameter.
A buffer overflow vulnerability in WinAce 2.6.0.5 and possibly earlier versions allows remote attackers to execute arbitrary code via a temporary (.tmp) file containing an entry with a long file name.
The vulnerability in includes/common.php in RunCMS 1.2 and earlier uses the extract function with EXTR_OVERWRITE on HTTP POST variables, allowing remote attackers to overwrite arbitrary variables, potentially leading to arbitrary code execution.
Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP programs via '..' sequences in the SITE_Path parameter to menu_dx.php or CONTENTS_Dir parameter to menu_sx.php.
SQL injection vulnerability in the Downloads module of PostNuke 0.760-RC4b allows administrators to execute arbitrary SQL commands via the 'show' parameter in dl-viewdownload.php.
SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to admin/PhpMyExplorer/editerfichier.php, then editing the desired file to contain the PHP code, as demonstrated using header.php in the fichier parameter. NOTE: it is possible that this vulnerability stems from PhpMyExplorer, which is a separate package.
Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the addquery and subquery parameters in the newbb plus module, the forum parameter in newtopic.php, edit.php, and reply.php of the newbb plus module, and the msg_id parameter in print.php of the messages module.
Vulnerability in Mantis 0.19.0a1 through 1.0.0a3 in core/database_api.php, with register_globals enabled, allows remote attackers to connect to internal databases by modifying the g_db_type variable and monitoring the speed of responses.
PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via the SITE_Path parameter to menu_dx.php or CONTENTS_Dir parameter to menu_sx.php.
An unknown vulnerability in the Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass authentication.
A buffer overflow vulnerability in the Log-SCR function of WinFtp Server 1.6.8 allows a remote attacker to cause a denial of service (application crash) and potentially execute arbitrary code via a long request.
The vulnerability in EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 is due to improper verification of authentication tokens. A remote attacker can modify an authentication token to gain unauthorized privilege escalation.
The vulnerability in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 relies on AUTH_UNIX authentication, which uses user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.
The vulnerability in nquser.php in Virtual Edge Netquery 3.11 allows a remote attacker to execute arbitrary system commands by injecting shell metacharacters into the host parameter of a dig query.
The vulnerability in the SpellChecker plugin in DTLink AreaEdit before version 0.4.3 allows remote attackers to execute arbitrary system commands by injecting shell metacharacters into the 'dictionary' parameter (also known as the 'lang' variable) in the aspell_setup.php file.
An unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion Prevention System versions 5.0(1) and 5.0(2) allows local users with OPERATOR or VIEWER privileges to gain additional privileges via unknown vectors.
Buffer overflow in Sysinternals Process Explorer 9.23 and earlier versions before 9.25 allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.
SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the x or y parameters.
Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the letter parameter in login/member.php or the im_receiver parameter in login/imcenter.php.
Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM/CAFT) versions 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.