CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to inc_types_graph.php with crafted SQL payloads to extract sensitive database information including schema names.
SQL Injection vulnerability in Open ISES Project 3.30A allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to sever_graph.php with crafted SQL payloads to extract sensitive database information including schema names.
SQL injection vulnerability in Open ISES Project 3.30A allows unauthenticated attackers to execute arbitrary SQL queries via the 'id' parameter in GET requests to the ajax/form_post.php endpoint. Attackers can extract sensitive database information including schema names.
The Open ISES Project version 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the tick_lat and tick_lng parameters. Attackers can send GET requests to nearby.php with crafted SQL payloads to extract sensitive database information including usernames, database names, and version details.
The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the frm_passwd parameter. Attackers can send POST requests to main.php with crafted SQL payloads to extract sensitive database information including usernames, database names, and version details.
A vulnerability in Heatmiser Wifi Thermostat 1.7 allows unauthenticated attackers to retrieve administrative credentials by accessing the networkSetup.htm page. Attackers can request this endpoint and extract plaintext username and password values from HTML form fields to gain administrative access to the thermostat.
Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the feature_id parameter of boards_buttons/update_feature.php. The feature_id value is concatenated directly into SQL statements without sanitization, allowing attackers to send a crafted GET request with a UNION-based payload to extract sensitive database information including the current user, database name, and DBMS version.
Kados R10 GreenBee contains an SQL injection vulnerability in boards_buttons/update_release.php. Unauthenticated attackers can inject arbitrary SQL queries via the release_id parameter, which is directly concatenated into SQL statements without sanitization. Attackers can send a crafted GET request with a UNION-based payload to extract sensitive database information such as the current user, database name, and DBMS version.
MaxOn ERP Software versions 8.x-9.x contain an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries through the nomor, user, and jenis parameters in the log_activity function. Attackers can send POST requests to /index.php/user/log_activity with malicious SQL code in these parameters to extract sensitive database information including version and database names.
A vulnerability in HaPe PKH 1.1 allows unauthenticated attackers to delete arbitrary records by sending a crafted request specifying the target record's ID. The endpoints admin/modul/mod_pengurus/aksi_pengurus.php and admin/modul/mod_update/aksi_update.php do not verify privileges before performing deletion operations.
An SQL injection vulnerability in HaPe PKH 1.1 allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'desa' POST parameter sent to lap-peserta-perdesa-pdf.php. Attackers can send a crafted request with a time-based blind payload to infer and extract sensitive database information.
An SQL injection vulnerability in HaPe PKH 1.1 allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'nama_kelompok' POST parameter sent to lap-anggota-kelompok-pdf.php. Attackers can send a crafted request with a time-based blind payload to infer and extract sensitive database information.
HaPe PKH 1.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to bypass file type validation and upload malicious files. Through endpoints aksi_foto.php, aksi_user.php, and aksi_kecamatan.php, they can upload PHP files and execute arbitrary code on the server.
HaPe PKH 1.1 contains multiple SQL injection vulnerabilities in admin/media.php that allow attackers to manipulate database queries via the 'id' parameter. An unauthenticated attacker can exploit the desa module, while authenticated users can exploit pengurus, fasilitas, and kelompok modules, leading to extraction of sensitive data such as current user, database name, and DBMS version.
An SQL injection vulnerability in E-Registrasi Pencak Silat 18.10 allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id_partai parameter. Attackers can send GET requests to monitor_nilai.php with crafted SQL payloads to extract sensitive database information including admin credentials and user data.
Free MP3 CD Ripper 2.8 has a stack-based buffer overflow in WMA file processing, allowing local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Convert function, enabling arbitrary code execution via ROP gadgets and shellcode injection.
Zechat 1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the uname parameter. Attackers can send crafted requests to profile.php with UNION-based SQL injection payloads to retrieve table names, column names, and sensitive data from the information_schema database.
The mcp-security library in Spring AI prior to version 0.1.9 fails to implement mandatory SSRF mitigations, processing untrusted URLs for OAuth discovery without verifying if targets are malicious or internal. This only affects installations with Dynamic Client Registration (DCR) enabled.
Falco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pagebuilder module, allowing remote attackers to upload arbitrary files and achieve remote code execution. The vulnerability is due to insufficient validation of uploaded file types and executable content.
A stack-based buffer overflow vulnerability was found in the TRENDnet TEW-432BRP firmware version 3.10B20, specifically in the formWPS function of the /goform/formWPS file. Remote manipulation of the peerPin argument triggers the overflow. The vendor states the product has been end-of-life for 15 years and will not be fixed.