CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A user with the Contributor role can remotely execute code (RCE) in Cwicly versions up to 1.4.4.
The Piotnet Addons For Elementor Pro plugin versions up to 7.1.67 contains a vulnerability allowing unauthenticated arbitrary file upload.
Sandbox escape in the Remote Settings Client component. Fixed in Firefox 154, Thunderbird 154, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 140.15, and Thunderbird 153.2.
A stack-based buffer overflow vulnerability has been detected in the DHCP blobmsg Handler of the /sbin/netifd file in TRENDnet TEW-WLC100P version 12.07b01. The attack must be carried out from within the local network.
Internally found bugs in Thunderbird ESR 140.13, Thunderbird ESR 153.0, and Thunderbird 153 showed evidence of memory corruption or another security-relevant defect. Fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Internally found bugs in Thunderbird 153 showed evidence of memory corruption or another security-relevant defect. Fixed in Firefox 154 and Thunderbird 154.
Internally found bugs in Thunderbird ESR 153.0 and Thunderbird 153 showed evidence of memory corruption or another security-relevant defect. Fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Internally found bugs in Thunderbird ESR 140.13, Thunderbird ESR 153.0, and Thunderbird 153 showed evidence of memory corruption or another security-relevant defect. Fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Integer overflow in the Graphics component. Fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Side-channel vulnerability in the Web Audio component. Fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Vulnerability in the Storage: Cache API component involving a mitigation bypass. The flaw was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, and Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Use-after-free vulnerability in the DOM: Core & HTML component. The flaw was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, and Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Use-after-free in the Graphics: ImageLib component of Firefox and Thunderbird. Fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Use-after-free in the Graphics: Text component of Firefox and Thunderbird. Fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Use-after-free in the JavaScript: WebAssembly component of Firefox and Thunderbird. Fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS