CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The egg-mkfont utility in Panda3D up to version 1.10.16 contains an uncontrolled format string vulnerability. The -gp (glyph pattern) option is used directly as the format string for sprintf() with only one argument, allowing an attacker to read stack values and write them into .egg and .png files.
Wersje Bio-Formats do 8.3.0 wykonują niebezpieczną deserializację plików pamięci podręcznej (.bfmemo) kontrolowanych przez atakującego podczas przetwarzania obrazów. Klasa loci.formats.Memoizer automatycznie ładuje i deserializuje pliki pamięci bez walidacji i kontroli integralności.
Wersje Bio-Formats do 8.3.0 zawierają podatność typu XML External Entity (XXE) w komponencie parsowania metadanych Leica Microsystems. Użycie niewłaściwie skonfigurowanego DocumentBuilderFactory pozwala na rozbudowę zewnętrznych encji oraz ładowanie zewnętrznych DTD, co może prowadzić do nieautoryzowanych żądań sieciowych oraz problemów z dostępem do lokalnych zasobów systemowych.
A global buffer overflow vulnerability exists in the untgz utility (contrib/untgz) in zlib versions up to and including 1.3.1.2. The issue is limited to the standalone demonstration tool and does not affect the core zlib compression library. The flaw occurs when a user executes untgz with an excessively long archive name on the command line, causing an out-of-bounds write in a fixed-size global buffer.
The iccDEV library before version 2.3.1.2 has a heap-buffer-overflow in the `CIccXmlArrayType::ParseText()` function. This affects users processing ICC color profiles. Version 2.3.1.2 contains a patch, no known workarounds.
The iccDEV library before version 2.3.1.2 has an Undefined Behavior runtime error. This affects users processing ICC color profiles. Version 2.3.1.2 contains a patch, no known workarounds.
LibreChat version 0.8.1-rc2 does not enforce proper access control for file uploads to an agents file context and file search. An authenticated attacker with access to the agent ID can change the behavior of arbitrary agents by uploading new files, even without permissions for that agent. Fixed in version 0.8.2-rc2.
An unused webshell in MicroServer allows unlimited login attempts, with sudo rights on certain files and directories. An attacker with admin access to MicroServer can gain limited shell access, enabling persistence through reverse shells, and the ability to modify or remove data stored in the file system.
An unused function in MicroServer can start a reverse SSH connection to a vendor registered domain, without mutual authentication. An attacker on the local network with admin access to the web server, and the ability to manipulate DNS responses, can redirect the SSH connection to an attacker controlled device.
Tarkov Data Manager to narzędzie do zarządzania danymi przedmiotów w Tarkov. Przed wprowadzeniem poprawki, istniała podatność na ślepą iniekcję SQL opartą na czasie w punktach końcowych edycji webhooków i API skanera, co pozwalało uwierzytelnionemu atakującemu na wykonywanie dowolnych zapytań SQL w bazie danych MySQL.
The iccDEV library before version 2.3.1.2 is vulnerable to heap-buffer-overflow in `CIccLocalizedUnicode::GetText()`. This issue has been patched in version 2.3.1.2.
The iccDEV library before version 2.3.1.2 is vulnerable to heap-buffer-overflow in `IccTagXml()`. This issue has been patched in version 2.3.1.2.
W podatności CVE-2026-0669 występuje niewłaściwe ograniczenie ścieżki do zastrzeżonego katalogu w rozszerzeniu CSS MediaWiki, co umożliwia atak typu Path Traversal. Problem dotyczy wersji 1.44, 1.43 oraz 1.39 rozszerzenia CSS MediaWiki.
An attacker with a network connection could detect credentials in clear text.
The absence of permissions control for the user XXX allows the current configuration in the sudoers file to escalate privileges without any restrictions.
An attacker with network access and valid credentials can, due to the unsecured (unencrypted) MQTT protocol, write to server topics on the board controlling MQTT communications.
The MCP server filesystem-mcp version 0.5.8 contains a critical path traversal vulnerability in the read_content tool. The vulnerability arises from improper symlink handling in path validation, allowing attackers to bypass directory restrictions and access files outside the intended scope.
fast-filesystem-mcp version 3.4.0 contains a critical path traversal vulnerability in file operation tools including fast_read_file. The vulnerability arises from improper path validation that fails to resolve symbolic links, allowing attackers to bypass directory access restrictions.
OpenAirInterface CN5G AMF up to version 2.0.1 has a logical error when processing JSON format requests. Unauthorized remote attackers can send malicious JSON data to the AMF's SBI interface to launch a denial-of-service attack.
OpenAirInterface CN5G AMF up to version 2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized remote attackers can launch a denial-of-service attack and potentially execute malicious code by sending an imsi string longer than 1000 to port N1.