CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
SAP CRM, 7.01, 7.02, 7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs.
The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition, causing the constraint to be ignored and allowing unauthorised users to access protected web application resources.
Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded, so depending on the order Servlets were loaded some security constraints might not be applied, exposing resources to unauthorised users.
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass file policies configured to block files transmitted via the BitTorrent protocol. The issue is due to incorrect detection of BitTorrent handshake messages. An attacker could exploit this by sending a crafted BitTorrent connection request to an affected device.
An elevation of privilege vulnerability in the Android kernel file system. Affects the Android kernel (Android ID A-31269937).
Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) that auto-initiated from the customer's appliance to Cisco's SSH Hubs. This tunnel allowed authorized personnel from the Cisco Umbrella team to access the appliance remotely without explicit customer approval.
An issue was discovered in Pivotal Spring Web Flow through 2.4.5. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property (disabled by default) can be vulnerable to malicious EL expressions in view states that process form submissions without explicit data binding property mappings. NOTE: this issue exists because of an incomplete fix for CVE-2017-4971.
The admin_edit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enable_password field, allowing admins to discover a hashed password by reading the audit log.
PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. Packager-authored startup implementations use a log file name that the database superuser can replace with a symbolic link, and as root they open(), chmod() and/or chown() this log file name.
Zidentyfikowano podatność w kontrolerach automatyki Siemens APOGEE PXC i TALON TC BACnet we wszystkich wersjach poniżej V3.5. Podatność na przejście katalogu może umożliwić zdalnemu atakującemu z dostępem do sieci uzyskanie informacji o strukturze systemu plików urządzeń.
Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF.
A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches allows an unauthenticated, adjacent attacker to crash a C6800-16P10G or C6800-16P10G-XL line card, causing a denial of service (DoS). It stems from a memory management issue; the attacker creates a large number of VPLS-generated MAC entries in the MAC address table.
A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 allows an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service (DoS). It is due to misclassification of Ethernet frames; the attacker sends a crafted Ethernet frame.
Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.
A flaw in the Linux kernel (as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2) when booted with UEFI Secure Boot enabled allows local users to bypass intended securelevel/secureboot restrictions through improper handling of the secure_boot flag across kexec reboot.
There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack.
An illegal memory access was found in ncurses 6.0 in the fmt_entry function in progs/dump_entry.c, potentially leading to a remote denial of service attack.
An illegal memory access was found in ncurses 6.0 in the dump_uses() function in progs/dump_entry.c, potentially leading to a remote denial of service attack.
An illegal memory access was found in ncurses 6.0 in the postprocess_termcap() function in parse_entry.c, leading to a remote denial of service attack.
An illegal memory access was found in ncurses 6.0 in the _nc_read_entry_source() function in progs/tic.c, potentially leading to a remote denial of service attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS