CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.
Starcharge Nova 360 Cabinet (up to version 1.3.0.0.7b102) and Titan 180 Premium (up to version 1.3.0.0.6) are affected by an Improper Input Validation vulnerability. The issue is fixed in versions Beta1.3.0.1.0 and 1.3.0.0.9 respectively.
A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object.
Starcharge Nova 360 Cabinet and Titan 180 Premium products are vulnerable to Directory Traversal via main.cgi. This flaw allows unauthorized access to files outside the web root directory.
Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials. This means that passwords or keys are embedded in the software, making it easier for an attacker to gain unauthorized access.
Wtyczka WP Visitor Statistics (Real Time Traffic) dla WordPressa przed wersją 4.8 nieprawidłowo sanitizuje i ucieka refUrl w akcji AJAX refDetails, dostępnej dla każdego uwierzytelnionego użytkownika. To może pozwolić użytkownikom z rolą tak niską jak subskrybent na przeprowadzenie ataków SQL injection.
W Mbed TLS przed wersją 2.28.0 oraz 3.x przed wersją 3.1.0, funkcje psa_cipher_generate_iv i psa_cipher_encrypt mogą umożliwiać obejście polityki lub odszyfrowanie oparte na oracle, gdy bufor wyjściowy znajduje się w lokalizacjach pamięci dostępnych dla nieufnej aplikacji.
Konsola VMware Workspace ONE UEM w wersjach 20.0.8 przed 20.0.8.37, 20.11.0 przed 20.11.0.40, 21.2.0 przed 21.2.0.27 oraz 21.5.0 przed 21.5.0.37 zawiera podatność SSRF. Problem ten może umożliwić złośliwemu aktorowi z dostępem do sieci UEM wysyłanie swoich żądań bez uwierzytelnienia oraz uzyskanie dostępu do wrażliwych informacji.
A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before V1_211117 allows a remote unauthenticated attacker to send a specially crafted HTTP request and receive a misconfigured HTTP/0.9 response, potentially leading into a cache poisoning attack.
The vulnerability in FiberHome ONU GPON AN5506-04-F RP2617 allows OS command injection. An authenticated attacker can send commands as root via the ping diagnostic tool by bypassing the IP address field and concatenating commands with a semicolon.
In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
A spoofing vulnerability in AppX installer for Microsoft Windows. An attacker could craft a malicious attachment for phishing campaigns and convince the user to open it. Users with fewer user rights could be less impacted than those with administrative rights. As of December 27, 2023, Microsoft updated the installer to disable the ms-appinstaller protocol by default.
A vulnerability in Microsoft Office allows for remote code execution through the processing of malicious graphics. An attacker can exploit this flaw to take control of the victim's system.
A vulnerability in Microsoft Excel allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
A vulnerability in the Windows Common Log File System (CLFS) driver allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. This can lead to remote code execution through unauthorized JNDI requests.
A path traversal vulnerability exists in the web interface of Netgear RAX35, RAX38, and RAX40 routers before firmware version v1.0.4.102. A remote unauthenticated attacker can send a specially crafted HTTP packet to access sensitive restricted files of the web application.
An HTTP request smuggling vulnerability in TP-Link AX10v1 before v1_211117 allows a remote unauthenticated attacker to perform a DoS attack on the web application by sending a specially crafted HTTP packet.
Wykryto problem w Trusted Firmware OP-TEE Trusted OS do wersji 3.15.0. Sterownik CSU OPTEE-OS dla urządzeń SoC NXP i.MX6UL nie ma odpowiedniej konfiguracji dostępu do rejestrów związanych z budzeniem, co prowadzi do obejścia TrustZone, umożliwiając NonSecure World wykonywanie dowolnych operacji odczytu/zapisu pamięci w pamięci Secure World.
Sterownik OPTEE-OS CSU dla urządzeń NXP i.MX SoC nie posiada odpowiedniej konfiguracji zabezpieczeń dostępu dla kilku modeli, co prowadzi do obejścia TrustZone. W wyniku tego, świat niesekretny może wykonywać dowolne operacje odczytu/zapisu pamięci w pamięci świata zabezpieczonego.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS