CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.01)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Ninja Forms Contact Form plugin versions up to 3.6.25 contains an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.
The WPFunnels plugin for WordPress versions up to 2.7.16 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious JavaScript code.
The Radio Forge Muses Player with Skins plugin in versions <= 2.5 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious JavaScript code.
The RadiusTheme Variation Swatches for WooCommerce plugin versions <= 2.3.7 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious JavaScript code.
The RadiusTheme Variation Images Gallery plugin for WooCommerce versions <= 2.3.3 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.
The WPKube Authors List plugin versions <= 2.0.2 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious JavaScript code.
The issue was addressed with improved memory handling. This issue may lead to arbitrary code execution when processing web content.
The issue was addressed with improved checks. A remote user may be able to cause a denial-of-service.
The issue was addressed with improved checks. This issue may lead to arbitrary code execution when processing web content.
The issue was addressed with improved checks. This issue may lead to arbitrary code execution when processing web content.
The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.
The issue involves the ability of a website to bypass the Same Origin Policy. It has been addressed with improved checks in iOS, iPadOS, tvOS, macOS, Safari, and watchOS.
A path handling issue was addressed with improved validation. An app may be able to gain root privileges.
The issue was addressed with improved checks. An app may be able to modify protected parts of the file system.
The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.
The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.
The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.
The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.
A use-after-free issue was addressed with improved memory management. This issue is fixed in several versions of Apple operating systems.
The issue was addressed with improved checks. This issue may lead to arbitrary code execution when processing web content.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS