CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
After successful authentication as a user in multiple Codesys products in multiple versions, specifically crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition.
After successful authentication as a user in multiple Codesys products in multiple versions, specifically crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition.
After successful authentication as a user in multiple Codesys products in multiple versions, specifically crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can lead to a denial-of-service condition.
In multiple versions of Codesys products, after successful user authentication, specifically crafted network communication requests with inconsistent content can cause the CmpAppBP component to read from an invalid address, potentially leading to a denial-of-service condition.
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition.
In multiple versions of Codesys products, after successful user authentication, specifically crafted network communication requests with inconsistent content can cause the CmpAppBP component to read from an invalid address, potentially leading to a denial-of-service condition.
In multiple versions of Codesys products, after successful user authentication, specifically crafted network communication requests with inconsistent content can cause the CmpAppBP component to read from an invalid address, potentially leading to a denial-of-service condition.
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition.
In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can utilize the CmpApp component to download files with any file extensions to the controller. Unlike regular file downloads via CmpFileTransfer, no filtering of certain file types is performed here.
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition.
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition.
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition.
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition.
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition.
In multiple Codesys products in multiple versions, after successful authentication as a user, specifically crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition.
A critical vulnerability was found in the Byzoro Smart S85F Management Platform up to version 20230722. Manipulation of the argument file_upload leads to unrestricted file uploads, allowing for remote attacks.
A critical vulnerability was found in the Byzoro Smart S85F Management Platform up to version 20230722. The issue affects some unknown processing of the file importhtml.php, where manipulation of the sql argument leads to command injection.
A vulnerability has been found in Academy LMS 6.0 that leads to cross site scripting attacks. The issue affects unknown code in the file /academy/home/courses, and manipulation of the argument query/sort_by allows for remote attacks.
A vulnerability has been found in PHP Jabbers Rental Property Booking 2.0 that allows cross site scripting attacks through manipulation of the index argument in the /index.php file. The attack can be launched remotely.
A vulnerability was found in PHP Jabbers Taxi Booking 2.0 that allows cross site scripting (XSS) attacks through manipulation of the index argument in the /index.php file. The attack can be launched remotely.