Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
398 results · page 2 of 8
Aug 11, 2026The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version fCVE-2026-64934 · Other software · Quanovate Tech Inc. (operating as Mira / Mira Care) · reported by ics-cert@hq.dhs.govMedium 5.3
The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to evade vendor-side vulnerable-fleet analytics, suppress security update prompts to the user, and misrepresent patch-adoption metrics.
- Product
- Mira Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 11, 2026When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's live session token is appended to the URL as a query string paramCVE-2026-66832 · Other software · Quanovate Tech Inc. (operating as Mira / Mira Care) · reported by ics-cert@hq.dhs.govMedium 6.9
When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's live session token is appended to the URL as a query string parameter, and a persistent user identifier is included in the WebView's User-Agent header. Both are then transmitted to third-party web properties, referrer logs, and any JavaScript running in the WebView context.
- Product
- Mira Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 30, 2026IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could alloCVE-2026-12943 · Other software · IBM · reported by psirt@us.ibm.comCritical 9.8
IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.
- Product
- HMC V10.3.1050.0
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 17, 2026IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unautCVE-2026-14971 · Other software · IBM · reported by psirt@us.ibm.comLow 3.9
IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions.
- Product
- PowerVM Novalink
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 17, 2026IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request.CVE-2026-9171 · Other software · IBM · reported by psirt@us.ibm.comHigh 7.5
IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
- Product
- PowerVM Novalink
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 2, 2026Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce <= 12.10.3 versions.CVE-2026-57677 · WordPress plugins & themes · reported by PatchstackCritical 9.8
Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce <= 12.10.3 versions.
- What to do
- Update the plugin to the newest version.
Jun 16, 2026In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data.CVE-2026-46448 · Other software · OpenStack · reported by MITREMedium 5.4
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.
- Product
- Nova
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugs.launchpad.netopenwall.com
May 27, 2026The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.CVE-2026-48906 · Other software · tassos.gr · reported by security@joomla.orgCritical 9.3
The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.
- Product
- Novarain/Tassos Framework (plg_system_nrframework)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 13, 2026Improper sanitization of the `status` query parameter of the `/unprotected/nova_error` endpoint allows unauthenticated attacker to inject arbitrary HTTP header CVE-2026-32993 · Other software · WebPros · reported by support@hackerone.comHigh 8.3
Improper sanitization of the `status` query parameter of the `/unprotected/nova_error` endpoint allows unauthenticated attacker to inject arbitrary HTTP header to the response.
- Product
- cPanel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 8, 2026nova-toggle-5 enables fliping booleans in the index.CVE-2026-42202 · Other software · almirhodzic · reported by GitHubMedium 6.5
nova-toggle-5 enables fliping booleans in the index. Prior to version 1.3.0, the toggle endpoint (POST/nova-vendor/nova-toggle/toggle/{resource}/{resourceId}) was protected only by web + auth:<guard> middleware. Any user authenticated on the configured guard could call the endpoint and flip boolean attributes on any Nova resource — including users who do not have access to Nova itself (for example, frontend customers sharing the web guard with the Nova admin area). The endpoint also accepted an arbitrary attribute parameter, which meant a valid caller could toggle any boolean column on the underlying model — not just columns exposed as Toggle fields on the resource. This issue has been patched in version 1.3.0.
- Product
- nova-toggle-5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 8, 2026A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowing setting root permissions on arbitrary system files or directories.CVE-2026-29203 · Websites & servers · reported by support@hackerone.comMedium 5.3
A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowing setting root permissions on arbitrary system files or directories. That can cause DoS or local privilege escalation when an authenticated cPanel user places a symlink at a user-controlled legacy Nova path under their home directory.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 8, 2026novaGallery is a php image gallery.CVE-2026-42028 · Other software · novafacile · reported by GitHubMedium 5.3
novaGallery is a php image gallery. Prior to version 2.1.1, a path traversal vulnerability has been identified in novaGallery. This allows unauthenticated users to read image files outside the intended gallery root directory. This issue has been patched in version 2.1.1.
- Product
- novagallery
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 31, 2026A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x throCVE-2025-10551 · Other software · Dassault Systèmes · reported by 3DS.Information-Security@3ds.comHigh 8.7
A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
- Product
- ENOVIA Collaborative Industry Innovator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 18, 2026An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1.CVE-2026-24708 · Other software · OpenStack · reported by MITREHigh 8.2
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected.
- Product
- Nova
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugs.launchpad.netopenwall.com
Feb 10, 2026Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions.CVE-2026-1763 · Other software · GE Vernova · reported by GEPowerCVD@ge.comMedium 4.6
Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions.
- Product
- Enervista
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 10, 2026A vulnerability in GE Vernova Enervista UR Setup on Windows allows File Manipulation.This issue affects Enervista: 8.6 and prior versions.CVE-2026-1762 · Other software · GE Vernova · reported by GEPowerCVD@ge.comLow 2.9
A vulnerability in GE Vernova Enervista UR Setup on Windows allows File Manipulation.This issue affects Enervista: 8.6 and prior versions.
- Product
- Enervista
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 30, 2026Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc.CVE-2025-1395 · Other software · Codriapp Innovation and Software Technologies Inc. · reported by iletisim@usom.gov.trHigh 8.2
Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc. HeyGarson allows Fuzzing for application mapping. This issue affects HeyGarson: through 30012026. NOTE: The vendor was contacted and it was learned that the product is not supported.
- Product
- HeyGarson
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiberguvenlik.gov.trusom.gov.tr
Jan 29, 2026Stored Cross-Site Scripting (XSS) in RLE NOVA's PlanManager.CVE-2026-1469 · Other software · RLE NOVA · reported by cve-coordination@incibe.esMedium 6.9
Stored Cross-Site Scripting (XSS) in RLE NOVA's PlanManager. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting malicious payload through the ‘comment’ and ‘brand’ parameters in ‘/index.php’. The payload is stored by the application and subsequently displayed without proper sanitization when other users access it. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.
- Product
- PlanManager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2026Laravel Nova 3.7.0 contains a denial of service vulnerability that allows authenticated users to crash the application by manipulating the 'range' parameter.CVE-2020-36950 · Other software · Laravel Holdings Inc. · reported by VulnCheckHigh 8.7
Laravel Nova 3.7.0 contains a denial of service vulnerability that allows authenticated users to crash the application by manipulating the 'range' parameter. Attackers can send simultaneous requests with an extremely high range value to overwhelm and crash the server.
- Product
- Laravel Nova
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordnova.laravel.comnova.laravel.com
Jan 27, 2026beat-access for Windows version 3.0.3 and prior contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries.CVE-2026-21408 · Other software · FUJIFILM Business Innovation Corp. · reported by vultures@jpcert.or.jpMedium 5.4
beat-access for Windows version 3.0.3 and prior contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with SYSTEM privileges.
- Product
- beat-access for Windows
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 23, 2026Nova Blocks: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2026-24528 · WordPress plugins & themes · reported by PatchstackMedium 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pixelgrade Nova Blocks nova-blocks allows DOM-Based XSS.This issue affects Nova Blocks: from n/a through <= 2.1.9.
- Product
- Nova Blocks
- Affected
- up to 2.1.9
- What to do
- Affects up to 2.1.9. Update Nova Blocks to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Dec 30, 2025A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6.CVE-2025-15371 · Network & remote access · Tenda · reported by VulDBHigh 7.1
A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. Affected is an unknown function of the component Shadow File. Such manipulation with the input Fireitup leads to hard-coded credentials. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
- Product
- i24
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 24, 2025NovaRad NovaPACS Diagnostics Viewer 8.5.19.75 contains an unauthenticated XML External Entity (XXE) injection vulnerability in XML preference import settings.CVE-2018-25142 · Other software · NovaRad Corporation · reported by VulnCheckHigh 7.1
NovaRad NovaPACS Diagnostics Viewer 8.5.19.75 contains an unauthenticated XML External Entity (XXE) injection vulnerability in XML preference import settings. Attackers can craft malicious XML files with DTD parameter entities to retrieve arbitrary system files through an out-of-band channel attack.
- Product
- NovaPACS Diagnostics Viewer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexploit-db.comnovarad.net
Dec 19, 2025InnovaStudio WYSIWYG Editor 5.4 contains an unrestricted file upload vulnerability that allows attackers to bypass file extension restrictions through filename CVE-2023-53950 · Other software · innovastudio · reported by VulnCheckCritical 9.3
InnovaStudio WYSIWYG Editor 5.4 contains an unrestricted file upload vulnerability that allows attackers to bypass file extension restrictions through filename manipulation. Attackers can upload malicious ASP shells by using null byte techniques and alternate file extensions to circumvent upload controls in the asset manager.
- Product
- WYSIWYG Editor
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordinnovastudio.comexploit-db.com
Dec 8, 2025A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERICVE-2025-12956 · Other software · Dassault Systèmes · reported by 3DS.Information-Security@3ds.comHigh 8.7
A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
- Product
- ENOVIA Collaborative Industry Innovator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 13, 2025Insecure Direct Object Reference (IDOR) vulnerability in DeporSite of T-INNOVA.CVE-2025-41069 · Other software · T-Innova DeporSite · reported by cve-coordination@incibe.esMedium 5.3
Insecure Direct Object Reference (IDOR) vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in ‘/ajax/TInnova_v2/Formulario_Consentimiento/llamadaAjax/obtenerDatosConsentimientos’, which could lead to the exposure or alteration os confidential data.
- Product
- DSuite 2025
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 7, 2025Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova Smallworld on Windows, Linux allows File ManipulationCVE-2025-7719 · Other software · GE Vernova · reported by GEPowerCVD@ge.comMedium 5.3
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova Smallworld on Windows, Linux allows File Manipulation.This issue affects Smallworld: 5.3.5. and previous versions.
- Product
- Smallworld
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 7, 2025Improper Authentication vulnerability in GE Vernova Smallworld on Windows, Linux allows Authentication Abuse.This issue affects Smallworld: 5.3.3 and prior versCVE-2025-3222 · Other software · GE Vernova · reported by GEPowerCVD@ge.comCritical 9.3
Improper Authentication vulnerability in GE Vernova Smallworld on Windows, Linux allows Authentication Abuse.This issue affects Smallworld: 5.3.3 and prior versions for Linux, and 5.3.4. and prior versions for Windows.
- Product
- Smallworld
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 30, 2025Kanova Android App version 1.0.27 (package name com.karelane), developed by Karely L.L.C., contains improper access control vulnerabilities.CVE-2025-61119 · Other software · reported by MITREHigh 7.5
Kanova Android App version 1.0.27 (package name com.karelane), developed by Karely L.L.C., contains improper access control vulnerabilities. Attackers may gain unauthorized access to user details and obtain group information, including entry codes, by manipulating API request parameters. Successful exploitation could result in privacy breaches, unauthorized group access, and misuse of the platform.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 13, 2025A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x throughCVE-2025-10557 · Other software · Dassault Systèmes · reported by 3DS.Information-Security@3ds.comHigh 8.7
A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
- Product
- ENOVIA Collaborative Industry Innovator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 23, 2025Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P seriCVE-2025-9966 · Other software · Novakon · reported by office@cyberdanube.comHigh 7.3
Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).
- Product
- P series (P07, P10, P12, P15)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcyberdanube.comnovakon.com.tw
Sep 23, 2025Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue CVE-2025-9965 · Other software · Novakon · reported by office@cyberdanube.comCritical 9.3
Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).
- Product
- P series (P07, P10, P12, P15)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcyberdanube.comnovakon.com.tw
Sep 23, 2025No password for the root user is set in Novakon P series.CVE-2025-9964 · Other software · Novakon · reported by office@cyberdanube.comHigh 8.6
No password for the root user is set in Novakon P series. This allows phyiscal attackers to enter the console easily. This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).
- Product
- P series (P07, P10, P12, P15)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcyberdanube.comnovakon.com.tw
Sep 23, 2025A path traversal vulnerability in Novakon P series allows to expose the root file system "/" and modify all files with root permissions.CVE-2025-9963 · Other software · Novakon · reported by office@cyberdanube.comCritical 9.4
A path traversal vulnerability in Novakon P series allows to expose the root file system "/" and modify all files with root permissions. This way the system can also be compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).
- Product
- P series (P07, P10, P12, P15)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcyberdanube.comnovakon.com.tw
Sep 23, 2025A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication.This issue affects P series: P – V2001CVE-2025-9962 · Other software · Novakon · reported by office@cyberdanube.comCritical 10
A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 (commit d0f97fd9).
- Product
- P series (P07, P10, P12, P15)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcyberdanube.comnovakon.com.tw
Sep 22, 2025Improper Privilege Management vulnerability in GE Vernova S1 Agile Configuration Software on Windows allows Privilege Escalation.This issue affects S1 Agile ConCVE-2025-9038 · Other software · GE Vernova · reported by GEPowerCVD@ge.comHigh 7.5
Improper Privilege Management vulnerability in GE Vernova S1 Agile Configuration Software on Windows allows Privilege Escalation.This issue affects S1 Agile Configuration Software: 3.1 and previous version.
- Product
- S1 Agile Configuration Software
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 17, 2025Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc.CVE-2025-0419 · Other software · Zirve Information Technologies Inc. · reported by iletisim@usom.gov.trMedium 4.7
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. Zirve Nova allows Cross-Site Scripting (XSS). This issue affects Zirve Nova: from 235 through 20250131.
- Product
- Zirve Nova
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiberguvenlik.gov.trusom.gov.tr
Sep 9, 2025CWE-328: Use of Weak HashCVE-2025-55053 · Other software · Baicells · reported by cna@cyber.gov.ilMedium 6.5
CWE-328: Use of Weak Hash
- Product
- NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2025CWE-200 Exposure of Sensitive Information to an Unauthorized ActorCVE-2025-55052 · Other software · Baicells · reported by cna@cyber.gov.ilMedium 4.3
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
- Product
- NEUTRINO430, NOVA436Q, NOVA430e/430i, NOVA846, NOVA246, NOVA243, NOVA233, NOVA227
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2025CWE-1392: Use of Default CredentialsCVE-2025-55051 · Other software · Baicells · reported by cna@cyber.gov.ilCritical 10
CWE-1392: Use of Default Credentials
- Product
- NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2025CWE-1242: Inclusion of Undocumented FeaturesCVE-2025-55050 · Other software · Baicells · reported by cna@cyber.gov.ilCritical 9.8
CWE-1242: Inclusion of Undocumented Features
- Product
- NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2025Multiple CWE-78CVE-2025-55048 · Other software · Baicells · reported by cna@cyber.gov.ilCritical 9.8
Multiple CWE-78
- Product
- NEUTRINO430, NOVA436Q, NOVA430e/430i, NOVA846, NOVA246, NOVA243, NOVA233, NOVA227
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 2, 2025Lack of authorisation in Deporsite by T-INNOVA.CVE-2025-41031 · Other software · T-INNOVA · reported by cve-coordination@incibe.esMedium 6.9
Lack of authorisation in Deporsite by T-INNOVA. This vulnerability allows an unauthenticated attacker to change other users' profile pictures via a POST request using the parameters ‘IdPersona’ and “Foto” in ‘/ajax/TInnova_c/FotoUsuario/llamadaAjax/uploadImage’.
- Product
- Deporsite
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 2, 2025Lack of authorisation in Deporsite by T-INNOVA.CVE-2025-41030 · Other software · T-INNOVA · reported by cve-coordination@incibe.esMedium 6.9
Lack of authorisation in Deporsite by T-INNOVA. This vulnerability allows an unauthenticated attacker to obtain information from other users via GET ‘/ajax/TInnova_v2/Integrantes_Recurso_v2_1/llamadaAjax/buscarPersona’ using the ‘dni’ parameter.
- Product
- Deporsite
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 25, 2025Information disclosure and exposure of authentication FTP credentials over the debug port 1604 in the MINOVA TTA service.CVE-2025-7426 · Other software · MINOVA Information Services GmbH · reported by vulnerability@ncsc.chCritical 9.3
Information disclosure and exposure of authentication FTP credentials over the debug port 1604 in the MINOVA TTA service. This allows unauthenticated remote access to an active FTP account containing sensitive internal data and import structures. In environments where this FTP server is part of automated business processes (e.g. EDI or data integration), this could lead to data manipulation, extraction, or abuse. Debug ports 1602, 1603 and 1636 also expose service architecture information and system activity logs
- Product
- TTA
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 5, 2025The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that gCVE-2025-2611 · Other software · ICT Innovations · reported by VulnCheckCritical 9.3
The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are known to be vulnerable.
- Product
- ICTBroadcast
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comvulncheck.com
Aug 4, 2025A vulnerability, which was classified as problematic, has been found in cronoh NanoVault up to 1.2.1.CVE-2025-8535 · Other software · cronoh · reported by VulDBLow 2
A vulnerability, which was classified as problematic, has been found in cronoh NanoVault up to 1.2.1. This issue affects the function executeJavaScript of the file /main.js of the component xrb URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- NanoVault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddrive.google.comgist.github.com
Aug 4, 2025Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs.CVE-2025-48499 · Other software · FUJIFILM Business Innovation Corp. · reported by vultures@jpcert.or.jpMedium 6.9
Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP (Internet Printing Protocol) or LPD (Line Printer Daemon) packet may cause a denial-of-service (DoS) condition on an affected MFP. Resetting the MFP is required to recover from the denial-of-service (DoS) condition.
- Product
- DocuPrint CP225 w
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 21, 2025marshmallow-packages/nova-tiptap is a rich text editor for Laravel Nova based on tiptap.CVE-2025-54082 · Other software · marshmallow-packages · reported by GitHubHigh 8.1
marshmallow-packages/nova-tiptap is a rich text editor for Laravel Nova based on tiptap. Prior to 5.7.0, a vulnerability was discovered in the marshmallow-packages/nova-tiptap Laravel Nova package that allows unauthenticated users to upload arbitrary files to any Laravel disk configured in the application. The vulnerability is due to missing authentication middleware (Nova and Nova.Auth) on the /nova-tiptap/api/file upload endpoint, the lack of validation on uploaded files (no MIME/type or extension restrictions), and the ability for an attacker to choose the disk parameter dynamically. This means an attacker can craft a custom form and send a POST request to /nova-tiptap/api/file, supplying a valid CSRF token, and upload executable or malicious files (e.g., .php, binaries) to public disks such as local, public, or s3. If a publicly accessible storage path is used (e.g. S3 with public access, or Laravel’s public disk), the attacker may gain the ability to execute or distribute arbitrary files — amounting to a potential Remote Code Execution (RCE) vector in some environments. This vulnerability was fixed in 5.7.0.
- Product
- nova-tiptap
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 30, 2025A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPCVE-2025-4991 · Other software · Dassault Systèmes · reported by 3DS.Information-Security@3ds.comHigh 8.7
A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
- Product
- Collaborative Industry Innovator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.