CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.07)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups. All versions before 7.14.3 are affected.
A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to obtain sensitive information. Successful exploitation requires an attacker to first obtain a valid agent authentication token.
A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write unauthorized objects. Successful exploitation requires an attacker to first obtain a valid agent authentication token.
Input Validation vulnerability in Apache Airflow ODBC and MSSQL Providers. It requires DAG code to use `get_sqlalchemy_connection` and access to connection resources to exploit it.
The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.0.0. This is due to a missing capability check on the ajax_store_save() function, allowing authenticated attackers with minimal permissions, such as a subscriber, to modify plugin settings and inject malicious web scripts.
The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.0.0. This is due to missing nonce validation on the ajax_store_save() function, allowing unauthenticated attackers to modify plugin settings and inject malicious web scripts via a forged request.
The MainWP Child plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 4.4.1.1 due to insufficient controls on the storage of back-up files. This allows unauthenticated attackers to extract sensitive data, including the entire installations database, if a backup occurs and the deletion of the back-up files fails.
The EmbedPress plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key in the 'lock_content_form_handler' and 'display_password_form' functions in versions up to and including 3.7.3. This allows unauthenticated attackers to decrypt and view password protected content.
DataEase is a data visualization analysis tool that, in affected versions, has a missing authorization check. This allows unauthorized users to manipulate dashboards created by the administrator.
DataEase, a data visualization analysis tool, has a privilege bypass vulnerability that allows ordinary users to access the user database. Exposed information includes md5 hashes of passwords, usernames, email addresses, and phone numbers.
OpenFGA versions v1.1.0 and prior are vulnerable to a DoS attack when Check and ListObjects calls are executed against authorization models that contain circular relationship definitions. Users are affected if they are using these versions and executing these calls on vulnerable models.
An authenticated LXCA user with elevated privileges may delete folders in the LXCA filesystem through a specifically crafted web API call due to insufficient input validation.
An authenticated LXCA user with elevated privileges may replace filesystem data through a specifically crafted web API call due to insufficient input validation.
BigBlueButton, an open-source virtual classroom, has a Server-Side Request Forgery (SSRF) vulnerability in affected versions that allows users to supply a URL for downloading presentations without prior validation. An update to the `followRedirect` method has been made to validate all URLs used for presentation downloads.
Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in the 'Admin Name' field on the Admin Profile page.
An issue was discovered in MediaWiki before 1.35.11, and in versions 1.36.x through 1.38.x before 1.38.7, and 1.39.x before 1.39.4, allowing XSS in the partial blocks feature in BlockLogFormatter.php.
The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira versions 2.0.0 through 2.17.1, User Management for Confluence versions 2.0.0 through 2.15.24, and User Management for Bitbucket versions 2.2.2 through 2.15.24.
INEX IXP-Manager versions before 6.3.1 are vulnerable to XSS attacks. This affects files such as list-preamble.foil.php, page-header-preamble.foil.php, edit-form.foil.php, overview.foil.php, cust.foil.php, and view.foil.php.
A critical vulnerability was found in Campcodes Retro Cellphone Online Store version 1.0. Manipulation of the username/password arguments in the /admin/index.php file leads to SQL injection, which can be executed remotely.
The Lana Text to Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the 'lana_text_to_image' and 'lana_text_to_img' shortcode in versions up to and including 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes.