CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Joomla Component vRestaurant version 1.9.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the keysearch parameter. Attackers can send POST requests to the menu-listing-layout endpoint with crafted SQL payloads in the keysearch parameter to extract database table names and sensitive information.
Joomla! Component VMap version 1.9.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the latlngbound parameter.
The J-BusinessDirectory component version 4.9.7 for Joomla! contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the type parameter. Attackers can send GET requests to index.php with the parameters option=com_jbusinessdirectory&task=categories.getCategories and inject UNION-based SQL statements to extract database information including schema names and sensitive data.
The Joomla Component J-ClassifiedsManager version 3.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters.
The Joomla Component J-MultipleHotelReservation version 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hotel_id parameter.
Joomla J-CruisePortal version 6.0.4 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the guest_adult parameter. Attackers can send POST requests to the cruises endpoint with crafted SQL payloads in the guest_adult parameter.
The libaom library (reference AV1 codec implementation) contains a remote code execution vulnerability. Insufficient bounds validation in the AV1 encoder's SVC layer ID control allows an attacker to supply crafted video frames that can overwrite encoder context structures.
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC layer ID control function allows setting a spatial_layer_id exceeding the configured number of layers, causing an out-of-bounds heap read of approximately 40,728 bytes.
An arbitrary address write vulnerability in libaom, the reference AV1 codec implementation, allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via a missing bounds check in the SVC layer ID control function. An attacker who can supply frames to a network-facing libaom encoder with SVC enabled could exploit this for denial of service or potential code execution.
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects.
PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. In versions prior to 2.5.1, there is a vulnerability that allows shell command injection due to improper validation of binary paths.
A vulnerability was found in QEMU's virtio-snd driver. The `virtio_snd_pcm_in_cb` function does not check if the iov buffer is large enough for audio data, potentially leading to a heap out-of-bounds write. This issue is due to an incomplete fix for CVE-2024-7730.
Joomla JHotelReservation version 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the rooms parameter. Attackers can send POST requests to the search-hotels endpoint with crafted SQL payloads in the rooms parameter to extract sensitive database information including version details.
The jCart component for OpenCart 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the product_id parameter.
The Joomla! Extra Search component version 2.2.8 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the establename parameter. Attackers can send GET requests to index.php with the option=com_extrasearch parameter and malicious SQL in the establename field to extract sensitive database information.
The Joomla Component Myportfolio version 3.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the pid parameter. Attackers can send GET requests to index.php with malicious pid values in the task=project&view=grid endpoint to extract sensitive database information.
Joomla Payage version 2.05 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the aid parameter. Attackers can send GET requests to index.php with malicious aid values in the make_payment task to extract sensitive database information.
The Joomla Component JoomRecipe version 1.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the category parameter. Attackers can send GET requests to the all-recipes endpoint with malicious SQL payloads in the category path segment to extract sensitive database information.
The JoomRecipe component version 1.0.4 for Joomla contains a blind SQL injection vulnerability in the search_author parameter on the search results page. Attackers can inject SQL code through POST requests to the search endpoint.
The Joomla! Component SIMGenealogy version 2.1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries. Attackers can send GET requests to index.php with the parameters option=com_simgenealogy and view=latest, injecting malicious SQL in the type parameter to extract sensitive database information.