CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
W podatności CVE-2025-68506 występuje niewłaściwa kontrola nazwy pliku w instrukcji Include/Require w programie PHP, co prowadzi do lokalnego włączenia pliku PHP. Problem ten dotyczy Docket Cache w wersjach od n/a do 24.07.03.
W podatności CVE-2025-68496 występuje niewłaściwa neutralizacja specjalnych elementów używanych w poleceniach SQL, co prowadzi do ataku typu Blind SQL Injection w wtyczce User Feedback: userfeedback-lite. Problem dotyczy wersji od n/a do 1.10.0 włącznie.
Podatność CVE-2025-68038 dotyczy deserializacji niezaufanych danych w wtyczce Icegram Express Pro, co pozwala na wstrzyknięcie obiektów. Problem ten dotyczy wersji Icegram Express Pro od n/a do poniżej 5.9.14.
Podatność CVE-2025-67909 dotyczy wtyczki Membership For WooCommerce, która pozwala na obejście autoryzacji poprzez kontrolowany przez użytkownika klucz. Problem ten występuje w wersjach od n/a do 3.0.3.
W podatności CVE-2025-67622 występuje problem Cross-Site Request Forgery (CSRF) w wtyczce Evergreen Post Tweeter, który umożliwia atak typu Stored XSS. Problem ten dotyczy wersji Evergreen Post Tweeter od n/a do 1.8.9.
A vulnerability has been identified in the Linux kernel related to the validation of lmac type in the octeontx2-af module. Upon physical link change, the firmware may return an invalid lmac_type_id, leading to kernel panic.
A vulnerability has been identified in the Linux kernel related to reading extended attributes in the NTFS file system. The ntfs_read_ea function fails to return a proper error code for inconsistent attributes, which may lead to unpredictable memory accesses.
In the Linux kernel, the Bluetooth HIDP driver has a race condition in hidp_session_thread that can lead to use-after-free. The issue occurs when the timer is active while hidp_del_timer is called, and after session release, a kernel panic may occur. The fix is to use del_timer_sync instead of del_timer.
In the Linux kernel, there is a NULL pointer dereference vulnerability in subflow_syn_recv_sock() during early fallback to TCP in the fastopen path. The subflow context is deleted, and the fastopen path does not handle it, leading to a crash.
W podatności CVE-2023-36525 występuje niewłaściwa neutralizacja specjalnych elementów używanych w poleceniach SQL, co prowadzi do możliwości przeprowadzenia ataku typu Blind SQL Injection w WPJobBoard. Problem dotyczy wersji WPJobBoard od n/a do 5.9.0.
In the Linux kernel, the accel/ivpu driver has a page fault in ivpu_bo_unbind_all_bos_from_context(). BO is added to vdev->bo_list in ivpu_gem_create_object(), but when drm_gem_shmem_create() fails, the BO is not fully created and ivpu_gem_bo_free() is not called, leaving a deleted BO on the list.
A vulnerability in the Linux kernel's asymmetric_key_generate_id function can cause integer overflow when adding binary blob lengths and the size of an asymmetric_key_id structure. An attacker could exploit this by providing malicious X.509 certificate fields, such as ASN.1 INTEGER serial numbers or issuer names, leading to a potential buffer overflow.
In the Linux kernel, a NULL pointer dereference vulnerability was found in the RDMA/rxe driver. It occurs when ibv_modify_srq() is called twice in succession under specific error conditions – the first call may set srq->rq.queue to NULL, and the second call crashes when accessing that pointer.
In the Linux kernel, the coresight tmc driver lacks the event handle in the path. The handle is essential for retrieving the AUX_EVENT of each CPU in perf mode. This causes an oops when using perf record with cs_etm.
In the Linux kernel, the ntfs3 filesystem has a vulnerability due to missing initialization of the run_lock for the $Extend inode. After setting the inode mode to a regular file, a truncate call can lead to an uninitialized lock error.
In the Linux kernel, the NTFS3 filesystem (ntfs3) does not initialize allocated memory before use. The __getname() function uses kmem_cache_alloc() without zeroing, leading to uninitialized values and potential security issues.
A bug in the Linux kernel mt76 WiFi drivers causes a system crash when using the wed_hif2 interface (e.g., for 6GHz link). The issue stems from incorrect WED device references in callbacks, which always assumed the primary WED device.
In the SPI driver for the CH341 chip in the Linux kernel, an out-of-bounds memory access vulnerability was found. The issue stems from incorrect calculation of copied data length, which includes the command header byte, leading to buffer overflow.
A vulnerability in the Linux kernel's NFSv4/pNFS filesystem causes a crash when attempting to reference a null layout in pnfs_layoutcommit_inode. The issue is due to not clearing the NFS_INO_LAYOUTCOMMIT flag, leading to a NULL pointer dereference.
In the Linux kernel, in the ALSA firewire-motu driver, a buffer overflow vulnerability was found in the hwdep_read() function when handling DSP events. If a user provides a buffer smaller than 8 bytes, more data than requested may be written, potentially leading to data disclosure or a crash.