CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Microsoft Edge (Chromium-based) allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges on the system.
A vulnerability in Microsoft Edge for Android allows spoofing, which may lead to user data theft. An attacker can exploit this flaw to impersonate trusted sources.
A vulnerability in Microsoft Edge (Chromium-based) allows for spoofing, which may lead to unauthorized access to user data.
A sensitive information leak issue has been discovered in GitLab EE affecting all versions from 16.0 to 16.0.6 and from 16.1 to 16.1.1. It allows access to titles of private issues and MRs.
WebBoss.io CMS before version 3.7.0.1 contains a reflected XSS vulnerability.
A Cross-site Scripting (XSS) vulnerability - Reflected exists in the GitHub repository pimcore/pimcore prior to version 10.6.4.
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository pimcore/pimcore prior to version 10.6.4, allowing for the storage of malicious code.
In the GitHub repository pimcore/pimcore prior to version 10.6.4, there is a vulnerability that allows the exposure of sensitive information to unauthorized actors.
A critical vulnerability was found in Hospital Management System version 1.0. The issue affects some unknown processing of the file patientprofile.php, where manipulation of the argument address leads to SQL injection.
A critical vulnerability was found in Hospital Management System version 1.0, affecting unknown code in the file patientappointment.php. Manipulation of the arguments loginid, password, mobileno, appointmentdate, appointmenttime, patiente, dob, doct, and city leads to SQL injection.
A critical vulnerability was found in Hospital Management System version 1.0. Manipulation of the 'address' argument in the patient.php file leads to SQL injection, which can be executed remotely.
A critical vulnerability was found in Hospital Management System version 1.0, affecting some unknown functionality of the file patientforgotpassword.php. Manipulation of this file leads to SQL injection.
A critical vulnerability has been found in Campcodes Beauty Salon Management System version 1.0. Manipulation of the id argument in the edit_product.php file leads to SQL injection, allowing for remote attacks.
A critical vulnerability was found in SourceCodester House Rental and Property Listing System version 1.0. The issue affects an unknown function in the btn_functions.php file, leading to unrestricted file uploads.
A vulnerability was found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0 that allows unrestricted file uploads by manipulating the userFile argument in the /Service/FileHandler.ashx file.
A vulnerability was found in the Chengdu Flash Flood Disaster Monitoring and Warning System that allows unrestricted file uploads by manipulating the 'file' argument in the /Controller/Ajaxfileupload.ashx file.
A critical vulnerability was found in IBOS OA 4.5.5, affecting the actionEdit function of the file ?r=officialdoc/officialdoc/edit of the Mobile Notification Handler component. Manipulation of this function leads to SQL injection.
A critical vulnerability was found in IBOS OA version 4.5.5, affecting unknown processing of the file ?r=article/category/del in the Delete Category Handler component. Manipulation of this file leads to SQL injection.
A critical vulnerability has been found in the Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. It affects unknown code in the file /App_Resource/UEditor/server/upload.aspx, leading to unrestricted file uploads.
A critical vulnerability was found in the Gen Technology Four Mountain Torrent Disaster Prevention and Control of Monitoring and Early Warning System affecting an unknown part of the file /Duty/AjaxHandle/UploadFloodPlanFileUpdate.ashx. Manipulation of the argument Filedata leads to unrestricted file uploads.