CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The set_add method did not check values for newlines, colons, or pipes, allowing additional metrics to be injected from untrusted sources.
The Ajax Load More WordPress plugin before version 7.8.4 does not sanitize and escape a parameter before outputting it back on the page, leading to a Reflected Cross-Site Scripting vulnerability.
The WP Maps plugin for WordPress before version 4.9.3 does not properly sanitize a parameter before using it in a file path, allowing authenticated users to perform Local File Inclusion attacks.
The WP Photo Album Plus WordPress plugin before version 9.1.11.001 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.
The Autoptimize plugin before version 3.1.15, Clearfy Cache plugin before version 2.4.2, and Speed Optimizer plugin before version 7.7.9 are vulnerable to unauthenticated Stored Cross-Site Scripting (XSS). They exploit a predictable replacement hash during the HTML minification process, allowing arbitrary HTML attributes to be injected.
A flaw has been found in project hospital-management-system-in-php 1.0 in the function getAllPatientDetail of the file update_info.php, related to GET Parameter Handler. Manipulating the argument appointment_no can lead to SQL injection.
A vulnerability has been found in Edimax BR-6428NS 1.10 affecting the function formPPTPSetup of the file /goform/formPPTPSetup. Manipulation of the argument pptpUserName leads to buffer overflow, allowing for remote attack.
A flaw has been found in Edimax BR-6428NS version 1.10 affecting the function formL2TPSetup in the file /goform/formL2TPSetup. Manipulation of the argument L2TPUserName causes buffer overflow, allowing for remote attack initiation.
A security flaw has been discovered in linlinjava litemall up to version 1.8.0, affecting the list function in the WxGoodsController.java file. Manipulating this function leads to SQL injection vulnerabilities.
A vulnerability was found in vercel ai up to version 3.0.97, concerning the function validateDownloadUrl in the file packages/provider-utils/src/download-blob.ts of the component provider-utils. This manipulation leads to server-side request forgery.
A security vulnerability has been detected in H3C Magic B3 up to version 100R002, affecting the UpdateWanParams function in the /goform/aspForm file. Manipulation of the param argument leads to buffer overflow.
Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes.
A vulnerability was identified in xiandafu beetl up to version 3.20.2, concerning a function in the SpELFunction.java file. Manipulation leads to improper neutralization of special elements used in expression language.
A vulnerability was identified in Metasoft 美特软件 MetaCRM up to version 6.4.0 Beta06, affecting an unknown function of the file /common/jsp/upload3.jsp. Manipulating the argument File can lead to unrestricted file uploads.
A vulnerability was found in adenhq hive up to version 0.11.0, affecting the function _read_events_tail in the file core/framework/server/routes_sessions.py of the Delete Request Handler component. Manipulating this function leads to path traversal.
A vulnerability has been found in fishaudio Bert-VITS2 affecting the generate_config function in the webui_preprocess.py file of the Gradio Interface component. Manipulation of the data_dir argument leads to path traversal, allowing remote attacks.
A flaw has been found in fishaudio Bert-VITS2 affecting the function _get_all_models in the file hiyoriUI.py of the Model Handler component. This vulnerability allows for path traversal attacks that can be initiated remotely.
Zechat version 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can exploit the v parameter to confirm vulnerability and extract data.
Zechat version 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names.
The Nordex N149/4.0-4.5 Wind Turbine Web Server version 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the login parameter in login.php. Attackers can submit crafted POST requests with SQL injection payloads in the login field to extract sensitive database information and bypass authentication mechanisms.