CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
DBI for Perl before version 1.648 saves error messages in a limited-size buffer (200 bytes) without length control. Attackers who can influence error text may cause a buffer overflow.
QuMagie contains an authorization bypass vulnerability through a user-controlled key, allowing remote attackers to gain unintended privileges. The vulnerability is fixed in version 2.9.1.
Zephyr OS has a memory corruption vulnerability in the HTTP server WebSocket upgrade path. An unauthenticated remote attacker can trigger it by sending a crafted Sec-WebSocket-Key header. The bounded copy does not guarantee NUL termination, leading to out-of-bounds read/write on stack.
SAP NetWeaver Application Server ABAP and ABAP Platform allow an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity information, leading to unauthorized access to sensitive user data and potential disruption of normal system usage.
SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to manipulate parameters in an HTTP logon request, enabling path traversal and processing of the included file. This can lead to reading, modifying, or denying access to data.
Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker can send a crafted RFC request that exploits logical errors in memory management, leading to memory corruption. This could lead to a high impact on the confidentiality, integrity, and availability of the application.
Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Use-after-free vulnerability in the Navigation component of Google Chrome prior to 149.0.7827.103 allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium severity: High.
Google Chrome on Linux prior to version 149.0.7827.103 has an integer overflow vulnerability in the UI component. A remote attacker can use a crafted HTML page to potentially perform a sandbox escape.
Use-after-free vulnerability in the CameraCapture component of Google Chrome on Mac prior to version 149.0.7827.103. A remote attacker could potentially escape the sandbox via a crafted HTML page.
Use-after-free vulnerability in the Network component of Google Chrome prior to 149.0.7827.103. A remote attacker can execute arbitrary code inside a sandbox via a crafted HTML page.
Use-after-free vulnerability in the Printing component of Google Chrome prior to version 149.0.7827.103. A remote attacker could potentially escape the sandbox via a crafted HTML page.
Use-after-free vulnerability in the Gamepad component of Google Chrome on Windows prior to version 149.0.7827.103. A remote attacker could potentially escape the sandbox via a crafted HTML page.
YesWiki before version 4.6.6 contains an unsafe execution vulnerability in the Bazar form field calculator (CalcField.php), where the application attempts to sanitize mathematical formulas using a complex regular expression before passing them to eval(), which is vulnerable to ReDoS and can lead to arbitrary PHP code execution.
Improper neutralization of triple-quote characters in AgentCore CLI before v0.14.2 during Python code generation. An authenticated remote attacker can execute arbitrary code on AWS AgentCore Runtime and on the local environment of another user in the same AWS account.
In the Linux kernel, a bug in the extract_kvec_to_sg function within the scatterlist library causes incorrect length calculations when extracting data from a kvec to a scatterlist. This can result in an sglist entry exceeding the page size, which is unintended. The vulnerability was introduced in kernel v6.3 and affects v6.5+.
AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthenticated attackers to gain full admin access by supplying a path traversal sequence in the Admin-Token cookie, exploiting unsanitized string concatenation in the token file path construction within the authglinet middleware.
OpenBullet2 through version 0.3.2 has an authentication bypass vulnerability in the API key authentication middleware. Unauthenticated attackers can gain admin access by supplying an empty X-Api-Key header value, as it is compared against a default empty AdminApiKey string.
A vulnerability in Flowise prior to version 3.1.2 allows an authenticated attacker to achieve remote code execution by submitting arbitrary JavaScript to the Custom JS Function node. Missing authorization on the POST /api/v1/node-custom-function endpoint.
Flowise prior to version 3.1.2 has a mass assignment vulnerability in the assistant update endpoint. An authenticated user can modify server-controlled properties such as workspaceId, createdDate, and updatedDate. Due to missing server-side validation and authorization checks, an attacker can manipulate the workspaceId field and reassign assistants to arbitrary workspaces.