CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability was found in Campcodes Beauty Salon Management System 1.0 that allows cross site scripting (XSS) attacks through manipulation of the searchdata argument in the /admin/search-appointment.php file. The attack can be launched remotely.
A vulnerability was found in Campcodes Beauty Salon Management System 1.0 that allows cross-site scripting (XSS) attacks through manipulation of the inv_id argument in the /admin/invoice.php file.
A vulnerability was found in Campcodes Beauty Salon Management System 1.0 that allows cross site scripting attacks through manipulation of the id argument in the /admin/edit_category.php file.
A vulnerability has been found in Campcodes Beauty Salon Management System 1.0, allowing cross site scripting through manipulation of the id argument in the /admin/edit_product.php file. The attack can be initiated remotely.
A vulnerability classified as problematic was found in Campcodes Beauty Salon Management System 1.0. Manipulation of the 'name' argument in the /admin/add-category.php file leads to cross site scripting.
REDCap versions 12.0.26 LTS and 12.3.2 Standard allow SQL Injection via scheduling, repeatforms, purpose, app_title, or randomization.
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages, leading to an infinite loop and causing a denial of service.
A vulnerability was found in Travelmate Travelable Trek Management Solution 1.0 in the Comment Box Handler functionality, allowing for cross-site scripting (XSS) attacks through manipulation of the comment argument. The attack may be launched remotely, but its exploitation is complex.
A vulnerability was found in phpscriptpoint Insurance 1.2, affecting an unknown functionality of the file /search.php. The manipulation leads to cross site scripting (XSS) attacks.
A vulnerability was found in phpscriptpoint Insurance 1.2, classified as problematic. It affects an unknown function of the file /page.php, leading to cross site scripting attacks.
A vulnerability has been found in phpscriptpoint Car Listing version 1.6, affecting unknown code in the /search.php file. Manipulation of the argument country/state/city leads to cross site scripting.
A vulnerability classified as problematic was found in phpscriptpoint Ecommerce version 1.15. Manipulation of the 'id' argument in the /product.php file leads to cross site scripting.
A vulnerability has been identified in phpscriptpoint Ecommerce version 1.15 that allows cross site scripting (XSS) attacks through manipulation of the 'slug' argument in the /blog-single.php file.
A vulnerability was found in phpscriptpoint JobSeeker 1.5 that allows cross site scripting (XSS) attacks through manipulation of arguments in the /search-result.php file. The attack can be launched remotely.
A vulnerability was found in phpscriptpoint BloodBank 1.1, rated as problematic. This issue affects some unknown processing of the file page.php, leading to cross site scripting attacks.
A vulnerability classified as problematic was found in mooSocial mooDating version 1.2. It affects an unknown function of the file /find-a-match of the URL Handler component, leading to cross site scripting attacks.
A vulnerability has been identified in mooSocial mooDating version 1.2 that leads to cross site scripting (XSS) attacks through manipulation of the /users/view file in the URL Handler component. The attack can be initiated remotely.
A vulnerability was found in mooSocial mooDating version 1.2 that allows cross site scripting (XSS) attacks through manipulation of code in the /users file of the URL Handler component. The attack can be initiated remotely.
A vulnerability has been found in mooSocial mooDating version 1.2 that leads to cross site scripting (XSS) attacks. The issue affects an unknown part of the file /pages of the URL Handler component, allowing for remote exploitation.
A vulnerability was found in mooSocial mooDating 1.2, rated as problematic. It affects some unknown functionality of the file /friends/ajax_invite of the component URL Handler, leading to cross site scripting attacks.