CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.11)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System version 1.3.0, allowing for SQL injection via manipulation of the argument fCircuitids in an unknown function of the file /SubstationWEBV2/main/elecMaxMinAvgValue.
A vulnerability was detected in Edimax BR-6208AC up to version 1.02, affecting an unknown function of the file /goform/setWAN. Manipulating the argument pptpDfGateway results in buffer overflow.
A vulnerability has been detected in Edimax BR-6428nC up to version 1.16, affecting an unknown function of the file /goform/setWAN. Manipulation of the argument pptpDfGateway leads to buffer overflow.
The NEX-Forms – Ultimate Forms Plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via POST parameter key names in the submit_nex_form() function in versions up to and including 9.1.11 due to insufficient input sanitization and output escaping.
A security flaw has been discovered in YunaiV yudao-cloud up to version 2026.01, affecting the getAccessToken function in the OAuth2TokenServiceImpl.java file. Manipulating this function leads to improper authentication, which can be exploited in remote attacks.
A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to version 1.2.8. The issue affects the function start_lan in the file /apply.cgi, where manipulation of the argument Channel/ApCliSsid leads to buffer overflow.
A flaw has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to version 1.2.8 in the start_single_service function of the Web Management Interface. Manipulating the arguments vpn_pptp_server/vpn_l2tp_server can lead to buffer overflow.
A flaw has been found in Jinher OA 1.0 that allows SQL injection through manipulation of the DeptIDList argument in the /C6/JHSoft.Web.PlanSummarize/UserSel.aspx file. The attack can be carried out remotely.
A vulnerability was identified in MikroTik RouterOS 6.49.8 affecting the ASN1_STRING_data function in the nova/lib/www/scep.p library of the SCEP Endpoint component. Manipulation of the transactionID/messageType arguments leads to an out-of-bounds read.
A vulnerability has been found in ChatGPTNextWeb NextChat up to version 2.16.1, affecting the function addMcpServer in the file app/mcp/actions.ts. The manipulation leads to improper authorization, allowing for remote exploitation.
A vulnerability was identified in the Online Hospital Management System version 1.0, affecting an unknown function in the /viewappointment.php file. Manipulation of the delid argument leads to SQL injection.
A vulnerability has been found in innocommerce InnoShop up to version 0.7.8, affecting the function InstallServiceProvider::boot in the file innopacks/install/src/InstallServiceProvider.php. Manipulation of this function leads to improper authentication.
The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference. Versions up to and including 6.7.25 lack validation on the 'customerid' user controlled key, allowing authenticated attackers with Vendor-level access and above to delete arbitrary users, including Administrators.
The Salon Booking System – Free Version plugin for WordPress is vulnerable to Arbitrary File Read in versions up to and including 10.30.25. This is due to the public booking flow accepting attacker-controlled file-field values and later using those stored values as trusted paths for email attachments.
The Paid Memberships Pro plugin for WordPress is vulnerable to unauthorized modification and disruption of Stripe webhook configuration in all versions up to and including 3.6.5. Missing capability checks on AJAX handlers allow authenticated attackers with Subscriber-level access and above to delete, create, or rebuild the Stripe webhook, disrupting payment processing.
The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'object_ids' and 'exclude_object_ids' parameters in all versions up to and including 1.13.18. This is due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query.
The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'map_post_type' parameter in all versions up to and including 1.13.18. The issue arises from improper input handling, allowing unauthenticated attackers to inject additional SQL queries.
The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'sort' parameter in all versions up to and including 1.13.18. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
The School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify a specific parameter to read and modify other users' data.
CTMS and CPAS developed by Sunnet have an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute malicious scripts, thereby enabling arbitrary code execution on the server.