CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Version 1.6.3 of eyoucms was found to contain an information disclosure vulnerability via the component /custom_model_path/recruit.filelist.txt.
A vulnerability has been found in Bug Finder Foody Friend 1.0 that allows unrestricted file uploads by manipulating the profile_picture argument in the /user/profile file of the Profile Picture Handler component.
A critical vulnerability was found in Bug Finder ChainCity Real Estate Investment Platform 1.0, affecting an unknown functionality of the file /property in the GET Parameter Handler component. Manipulation of the argument name leads to SQL injection.
A critical vulnerability was found in Weaver e-cology, affecting unknown processing of the file filelFileDownloadForOutDoc.class in the HTTP POST Request Handler component. Manipulating the argument fileid with the input 1+WAITFOR+DELAY leads to SQL injection.
A vulnerability was found in Beijing Netcon NS-ASG 6.3, affecting an unknown part of the file /admin/test_status.php. The manipulation leads to direct request, which may be exploited by attackers.
Version 10.9.1.42602 of Office Suite Premium was found to contain a reflected XSS vulnerability via the filter parameter at /api?path=files.
The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory without authentication, exposing sensitive information such as command history and screenshots of the file being processed.
Alkacon OpenCMS version 15.0 has an arbitrary file upload vulnerability in the /workplace#!explorer component that allows attackers to execute arbitrary code by uploading a crafted PNG file.
Version 10.9.1.42602 of Office Suite Premium was found to contain a reflected XSS vulnerability via the id parameter at /api?path=profile.
Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting vulnerability via the cat_id parameter at /shop/?module=shop&action=search.
A critical vulnerability was found in IBOS OA 4.5.5, affecting the actionExport function of the file ?r=contact/default/export of the Personal Office Address Book component. Manipulation of this function leads to SQL injection.
Omnis Studio 10.22.00 has incorrect access control, allowing 'always private' Omnis libraries to be opened. Although this feature is supposed to be an irreversible operation, implementation issues allow bypassing specific checks.
Omnis Studio 10.22.00 has incorrect access control, allowing locked classes in Omnis libraries to be unlocked. This violates the expected behavior of an 'irreversible operation', enabling actions such as deleting, viewing, or modifying these classes.
IceWarp version 10.2.1 was found to have a cross-site scripting (XSS) vulnerability via the color parameter. An attacker can inject malicious JavaScript code that executes in the victim's browser.
A vulnerability was found in Samba's SMB2 packet signing mechanism. SMB2 packet signing is not enforced if an admin configured 'server signing = required' or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory.
CVE-2023-34968 is a path disclosure vulnerability in Samba that allows the server-side absolute path of shares, files, and directories to be disclosed in search query results. An attacker can exploit this flaw to view information contained in the disclosed path.
A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. The issue occurs when parsing Spotlight mdssvc RPC packets, potentially leading to a crash of the mdssvc worker process when a malicious client calls the dalloc_value_for_key() function.
A vulnerability classified as problematic has been found in Aures Komet up to version 20230509, affecting the Kiosk Mode component. Manipulation leads to improper access controls, allowing an attack on the physical device.
The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to and including 5.8.1 due to the plugin adding the API key to the source code of any page running the MailChimp block. This allows unauthenticated attackers to obtain a site's MailChimp API key.
HashiCorp Nomad and Nomad Enterprise versions 0.11.0 up to 1.5.6 and 1.4.1 have a vulnerability in the HTTP search API that can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy.