CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Wtyczka Copify dla WordPressa jest podatna na atak typu Cross-Site Request Forgery w wersjach do 1.3.0 włącznie. Problem wynika z braku walidacji nonce na stronie CopifySettings, co umożliwia nieautoryzowanym atakującym aktualizację ustawień wtyczki oraz wstrzykiwanie złośliwych skryptów webowych poprzez sfałszowane żądanie.
W repozytorium GitHub nuitka/nuitka przed wersją 0.9 występuje podatność na wstrzykiwanie kodu. Atakujący może wykorzystać tę lukę do wykonania złośliwego kodu.
An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is a buffer overflow in ptrace PEEKUSER and POKEUSER (aka PEEKUSR and POKEUSR) when accessing floating point registers.
The package gatsby-plugin-mdx before 2.14.1, from 3.0.0 and before 3.15.2 are vulnerable to Deserialization of Untrusted Data when passing input through to the gray-matter package, due to its default configurations that are missing input sanitization. Exploiting this vulnerability is possible when passing input in both webpack (MDX files in src/pages or MDX file imported as a component in frontend / React code) and data mode (querying MDX nodes via GraphQL). Workaround: If an older version of gatsby-plugin-mdx must be used, input passed into the plugin should be sanitized ahead of processing.
A vulnerability in TP-Link Router AX50 firmware 210730 and older allows remote code execution via importing a malicious backup file through the web interface. The issue is caused by improper validation of imported data.
Das U-Boot version 2022.01 has a Buffer Overflow vulnerability, which is different from the issue described in CVE-2022-30552.
A vulnerability in Advanced Installer 19.3 and earlier, and many products using the Advanced Updater, allows remote code execution via the CustomDetection parameter in the update check function. Exploitation requires a user to start an affected installation to trigger the update check.
A denial of service vulnerability exists in TOTOLINK EX1200T firmware version V4.1.2cu.5215. The flaw is located in the RebootSystem function within the file lib/cste_modules/system, allowing remote system reboot.
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php. This allows an attacker to manipulate database queries.
A vulnerability in Flower, a web UI for the Celery framework, allows bypassing OAuth authentication. An attacker can access the Flower API to invoke arbitrary Celery RPC calls or shut down task nodes, causing denial of service.
libcurl has an issue with reusing previously created connections even when TLS or SSH-related options have been changed that should prohibit reuse. Several TLS and SSH settings were left out from the configuration match checks, making them match too easily.
libcurl provides the `CURLOPT_CERTINFO` option to allow applications to request details about a server's certificate chain. Due to an erroneous function, a malicious server could make libcurl built with NSS get stuck in a never-ending busy-loop when trying to retrieve that information.
An information disclosure vulnerability exists in curl versions 7.65.0 to 7.82.0 that allows reusing a connection using an IPv6 address with a different zone id.
A vulnerability in ACEweb Online Portal 3.5.065 allows an unauthenticated attacker to capture SMB hashes by specifying an external UNC path when uploading a file. The attacker can trick the victim server into disclosing the username and password hash of the user running the ACEweb Online software.
ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the txtFilePath parameter in attachments.awp.
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights.
Wersje Dell PowerScale OneFS od 8.2.0.x do 9.3.0.x zawierają lukę związaną z słabymi wymaganiami dotyczącymi haseł. Administrator może utworzyć konto bez hasła, co stwarza ryzyko dla bezpieczeństwa.
An out-of-bounds write issue in Apple systems was addressed with improved bounds checking. This affects tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1, and iPadOS 15.4.1. An application may execute arbitrary code with kernel privileges.
An improper authentication vulnerability exists in curl versions 7.33.0 to 7.82.0 which might allow reuse of OAUTH2-authenticated connections without properly ensuring that the connection was authenticated with the same credentials. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S), and LDAP(S) (openldap only).
Gibbon v23 does not generate a new session ID after user authentication, making it vulnerable to session fixation attacks. An attacker can force a victim to use a known session ID and then hijack the session after login.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS