CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The vulnerability in isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service by sending an ISAKMP packet with a malformed Cert Request payload, leading to an integer underflow in a malloc operation.
PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR parameter to reference a URL on a remote web server that contains functions.inc.php.
PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL on a remote web server that contains user_list_info_box.inc.
Vulnerability in picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the $CONFIG['impath'] or $CONFIG['jpeg_qual'] parameters.
SMC Barricade broadband routers 7008ABR and 7004VBR have remote administration enabled by default, allowing remote attackers to gain access by connecting to port 1900.
Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element.
SQL injection vulnerability in Video Gallery Module 0.1 Beta 5 for PHP-Nuke. An attacker can inject arbitrary SQL code via clipid or catid parameters in viewclip, viewcat, or voteclip actions.
The Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers and local users to gain administrative access by providing the admin username followed by a password that is the maximum allowed length, then pressing the enter key after the resulting error message.
Cross-site request forgery (CSRF) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary code by including the code in an image tag or a link.
The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploading files that include scripting code such as Javascript.
In the blocker.php script of Protector System 1.15b1, a vulnerability was found that allows bypassing SQL injection protection. An attacker can use URL-encoded apostrophe characters (%27) to execute limited SQL commands.
SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password parameter.
A buffer overflow vulnerability in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field.
SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as "%2527", which is translated to "'", as demonstrated using the phorum_uriauth parameter to list.php.
PHP remote file inclusion vulnerability in album_portal.php of phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter.
Solaris 9 patches 113579-02 through 113579-05 and 114342-02 through 114342-05 fail to properly restrict access to secure NIS maps, allowing local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname.
PHP remote file inclusion vulnerability in affich.php of Gemitel 3.50 allows remote attackers to execute arbitrary PHP code via the base parameter.
The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does.
The lserver program in SAP DB version 7.3 and earlier uses the current working directory to find and execute the lserversrv program. This allows local users to gain privileges with a malicious lserversrv called from a directory that has a symlink to the lserver program.
SAP R/3 versions from 2.0B to 4.6D installs several clients with default users and passwords, allowing remote attackers to gain privileges via accounts such as SAP*, SAPCPIC, DDIC, EARLYWATCH, or TMSADM.