CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Buffer Overflow vulnerability in JerryScript Project version 3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c.
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.
An issue was discovered in the kdmserver service on LeEco LeTV X43 version V2401RCN02C080080B04121S, allowing attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS).
CVE-2023-39939 describes an SQL injection vulnerability in LuxCal Web Calendar prior to version 5.2.3M (MySQL version) and prior to version 5.2.3L (SQLite version). This allows a remote unauthenticated attacker to execute arbitrary queries against the database, potentially obtaining or altering information.
TP-Link TL-WR941ND V6 devices were found to contain a buffer overflow via the pSize parameter at /userRpm/PingIframeRpm.
D-Link DAP-2660 version 1.13 was found to have a buffer overflow vulnerability via the f_ipv6_enable parameter at /bsc_ipv6. This vulnerability can be exploited by sending a crafted POST request.
Version 1.13 of the D-Link DAP-2660 contains a buffer overflow vulnerability in the /adv_resource component. This vulnerability can be exploited via a crafted GET request.
Models TP-Link WR841N V8, TL-WR940N V2, and TL-WR941ND V5 were found to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm.
The TOTOLINK X5000R B20210419 device was found to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg interface.
TOTOLINK X5000R_V9.1.0cu.2089_B20211224 and X5000R_V9.1.0cu.2350_B20230313 were found to contain a remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function.
An OS command injection vulnerability was discovered in iBSG v3.5 by N.V.K.INTER CO., LTD. (NVK). The flaw exists in the system_hostname parameter at /manage/network-basic.php, allowing shell metacharacters to be injected.
A hardcoded root password was discovered in N.V.K.INTER CO., LTD. (NVK) iBSG v3.5. This allows attackers to log in with root privileges via SSH.
A SQL injection vulnerability was discovered in iBSG v3.5 by N.V.K.INTER CO., LTD. (NVK) via the a_passwd parameter at /portal/user-register.php. This flaw allows an attacker to manipulate database queries.
There is an OS command injection vulnerability in ELECOM wireless LAN routers that allows an attacker to execute arbitrary OS commands by sending a specially crafted request. This affects all versions of models WRC-F1167ACF, WRC-1750GHBK, WRC-1167GHBK2, WRC-1750GHBK2-I, and WRC-1750GHBK-E.
A buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code.
A hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands.
A buffer overflow vulnerability was discovered in the D-Link DIR-880 A1_FW107WWb08 device via the fgets function.
The Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 device was found to contain a buffer overflow vulnerability in the function FUN_00010e34().
Version 1.0.0.18 of the Tenda WH450 has a buffer overflow vulnerability in the fgets function.
A buffer overflow vulnerability was discovered in D-Link DIR-880 A1_FW107WWb08 via the function FUN_0001be68.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS