CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public REST API output, allowing unauthenticated users to read details a site has chosen to hide on published listings, such as the asking price, sold price, street address and exact map coordinates.
Hidden functionality exists in multiple DVRs provided by Atsumi Electric Co., Ltd. A user who can log in with administrator privileges may upgrade the affected product to unauthorized firmware.
UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS) condition.
An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0. An authenticated attacker can escalate privileges by modifying the login_privilege data on the affected device.
Missing authentication for a critical function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests. The router returns device identification information and switches into a specific mode, which may prevent self-recovery under abnormal conditions.
An out-of-bounds write issue was addressed with improved bounds checking. The issue is fixed in macOS Sequoia 15.8 and macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
A privacy issue was addressed with improved checks. The issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.
An authorization issue was addressed with improved state management. The flaw affects iOS 27, iPadOS 27 and macOS Golden Gate 27. An app may be able to access sensitive user data.
An out-of-bounds read was addressed with improved bounds checking. The flaw affects iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.
A denial-of-service issue was addressed with improved input validation. The flaw affects iOS 26.7, iPadOS 26.7, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to cause a denial-of-service.
A double free issue was addressed with improved memory management. The flaw affects iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27 and watchOS 27. An app may be able to cause unexpected system termination.
An input validation issue was addressed with improved input validation. The flaw affects iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7. Processing a maliciously crafted image may lead to unexpected process termination.
An out-of-bounds read was addressed with improved bounds checking. The flaw affects iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27 and watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.
An authorization issue was addressed with improved state management. The flaw affects iOS 27 and iPadOS 27. An app may be able to access sensitive user data.
An out-of-bounds write issue was addressed with improved bounds checking. The flaw affects iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.
An out-of-bounds write vulnerability in iOS, iPadOS and macOS was fixed with improved bounds checking. An app may be able to cause unexpected system termination.
A vulnerability in macOS Golden Gate 27 allowed an app to disclose kernel memory. The issue was fixed by removing the vulnerable code.
A vulnerability in macOS Golden Gate 27 stemmed from excessive entitlements granted to apps, allowing access to user-sensitive data. The issue was fixed by removing additional entitlements.
An authorization issue in macOS Golden Gate 27 allowed an app to access sensitive user data. The issue was fixed with improved state management.
A path handling issue in macOS Golden Gate 27 allowed an app to access protected user data. It was fixed with improved validation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS