CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In the Linux kernel, a vulnerability was resolved in UML time-travel mode where sched_yield by userspace may not actually cause scheduling as no time has passed. This can cause extreme slowdown or even deadlock depending on kernel configuration (CONFIG_UML_MAX_USERSPACE_ITERATIONS). The workaround accounts time to the process whenever it executes a sched_yield syscall.
In the Linux kernel, the iommu subsystem does not clear iommu-dma ops on cleanup after an iommu_device_register() error. This can leave devices hooked to iommu-dma and lead to crashes in iommu-dma.
In the Linux kernel, the drm/amd/display driver had a bug causing a hang when link training failed. The enable_streams function assumed link training succeeded and selected the PHY clock, leading to a hang on register write when training had actually failed.
W jądrze Linuxa rozwiązano podatność związaną z nieprawidłowym czyszczeniem wpisów FDB, MDB i VLAN podczas odłączania. Problem polegał na tym, że niektóre sterowniki mogły pozostawiać te wpisy, co prowadziło do ostrzeżeń podczas odłączania.
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Guard Possible Null Pointer Dereference. In some situations, dc->res_pool may be null. Check if pointer is null before dereference.
In the Linux kernel, the debugfs hang_hws interface in the drm/amdkfd module crashes the kernel with a NULL pointer access when MES is used, because dqm->packet_mgr is not set up for the MES path. The fix skips GPUs with MES for this interface until support is added.
In the Linux kernel, the spi: fsl-qspi driver uses devm functions for resource management, but the legacy remove function is called during device detach, causing a kernel panic. The issue can be triggered by unbinding the device on i.MX8MQ.
Improper Input Validation vulnerability in Sparx Systems Pro Cloud Server's WebEA model search field allows Cross-Site Scripting (XSS). This issue affects Pro Cloud Server: earlier than 6.0.165.
A bug in the Linux kernel's memory reclaim path (mm/vmscan) attempts to reclaim hwpoison (hardware-poisoned) folios, leading to a VM_BUG_ON_FOLIO in add_to_swap when the hwpoisoned page remains on the LRU list with the uptodate flag cleared. The fix skips hwpoisoned pages in shrink_folio_list() and unmaps them earlier.
A bug in the Linux kernel's niu network driver causes a fatal trap (kernel panic) on SPARC systems during MSI-X initialization. The issue is that reads from MSI-X table entries occur before the ENTRY_DATA register is written, which the hardware requires. To prevent this, the flag PCI_DEV_FLAGS_MSIX_TOUCH_ENTRY_DATA_FIRST is set.
A false kmemleak warning for BPF percpu hashmap was fixed in the Linux kernel. The root cause was a non-8-byte aligned store of the percpu pointer in htab_elem_set_ptr(), which prevented kmemleak from detecting the pointer and caused it to report a memory leak.
In the Linux kernel, the ntfs3 filesystem lacks synchronization between write operations and ioctl calls that clear the file's compression flag. If a user clears the compression flag during a write, the kernel selects incorrect operations and triggers a NULL pointer dereference, causing a kernel oops.
Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and generates a session file on the server at '/var/lib/php/sessions'. Such session files are named 'sess_[session_value]', where '[session_value]' is provided to the client in a 'Set-Cookie' response header. Craft CMS stores the return URL requested by the client without sanitizing parameters. Consequently, an unauthenticated client can introduce arbitrary values, such as PHP code, to a known local file location on the server. Craft CMS versions 5.7.5 and 4.15.3 have been released to address this issue.
Gnuplot is affected by a heap buffer overflow at function utf8_copy_one.
A flaw was found in Quay where when an organization acts as a proxy cache, and a user or robot pulls an image that hasn't been mirrored yet, they are granted 'Admin' permissions on the newly created repository.
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.
A stored cross-site scripting (XSS) vulnerability was found in the Edit Profile feature of DBSyncer v2.0.6. Attackers can inject malicious HTML or JavaScript via the Nickname parameter, leading to script execution in other users' browsers.
A SQL injection vulnerability in the search functionality of the tickets.php page in osTicket <=1.17.5 allows authenticated attackers to execute arbitrary SQL commands via the combination of 'keywords' and 'topic_id' URL parameters.
An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC (in AV over IP products) versions v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute arbitrary commands with root privileges.
Wersje Mojolicious od 7.28 do 9.45 dla Perla generują słabe sekrety HMAC dla ciasteczek sesyjnych domyślnie przy użyciu narzędzia 'mojo generate app'. Słaby sekret jest zapisywany w pliku konfiguracyjnym aplikacji, co może umożliwić atakującemu przeprowadzenie ataku brute force na klucze sesji aplikacji.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS