CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The overlayfs implementation in the Linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivileged overlay mounts, an attacker could use this to gain elevated privileges.
Appspace 6.2.4 is vulnerable to a broken authentication mechanism. Pages such as /medianet/mail.aspx can be called directly, exposing the framework with layouts, menus, and functionalities.
W bibliotece Libsixel w wersji 1.8.6 występuje przepełnienie bufora w funkcji 'sixel_encoder_encode_bytes', co umożliwia atakującym wywołanie odmowy usługi (DoS).
Win32k Elevation of Privilege Vulnerability.
A vulnerability in INTELBRAS TIP200 IP phone version 60.61.75.22 allows an attacker to access sensitive information via the /cgi-bin/cgiServer.exx endpoint.
Vulnerability in SonicWall Email Security version 10.0.9.x allows a post-authenticated attacker to upload an arbitrary file to the remote host.
Unibox SMB 2.4, UniBox Enterprise Series 2.4, and UniBox Campus Series 2.4 contain a cross-site request forgery (CSRF) vulnerability in several endpoints, including /tools/network-trace, /list_users, /list_byod?usertype=raduser, /dhcp_leases, and /go?rid=202. A specially crafted HTTP request may allow an attacker to reconfigure the device without administrator consent.
UniBox U-50 2.4, UniBox Enterprise Series 2.4, and UniBox Campus Series 2.4 contain an OS command injection vulnerability in the /tools/ping script. This flaw allows an attacker to gain complete control over the device.
In RetroArch 1.9.0 for Windows, the accessibility_speak_windows function in platform_win32.c passes unsanitized input to PowerShell, allowing attackers with write access to filesystems used by RetroArch to execute code via command injection using specially crafted file and directory names.
A type confusion issue exists in Apple products (macOS, iOS, iPadOS, watchOS, tvOS, Safari) due to improper state handling. Processing maliciously crafted web content may lead to arbitrary code execution.
A race condition exists in Apple products (macOS, iOS, iPadOS, watchOS, tvOS) due to improper locking. A malicious application may be able to elevate privileges. Apple is aware of reports that this issue may have been actively exploited.
A Server Side Request Forgery (SSRF) vulnerability in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the API to perform an SSRF attack to steal administrative credentials.
The /password.html page of the Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) web management interface exposes the administrator password in plaintext. The page can be intercepted over HTTP.
The Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) web management allows changing the administrator password via a crafted HTTP GET request without prior authentication, only requiring knowledge of the default username (admin).
An information leakage vulnerability exists in Micro Focus Access Manager due to advanced configuration. It affects all versions prior to 5.0.
MicroLogix 1400 w wersji 21.6 i niższej może pozwolić zdalnemu, nieautoryzowanemu atakującemu na wysłanie specjalnie skonstruowanego pakietu Modbus, co umożliwia atakującemu pobranie lub modyfikację losowych wartości w rejestrze. W przypadku udanego wykorzystania tej podatności może dojść do przepełnienia bufora, co prowadzi do stanu odmowy usługi.
Podatność na eskalację uprawnień w McAfee Data Loss Prevention (DLP) dla systemu Windows przed wersją 11.6.100 pozwala lokalnemu, nisko uprzywilejowanemu atakującemu na załadowanie wybranych przez siebie bibliotek DLL poprzez wykorzystanie junctions. Wymaga to stworzenia i usunięcia junctions przez atakującego oraz wysłania konkretnego polecenia IOTL w odpowiednim czasie.
Fluxbb 1.5.11 is vulnerable to a denial of service (DoS) attack by sending an extremely long password via the login form. The password hashing process exhausts CPU and memory resources on the server.
Serwer NATS w wersjach 2.x przed 2.2.0 oraz biblioteka JWT przed 2.0.1 mają niewłaściwe zarządzanie kontrolą dostępu z powodu błędnego przetwarzania powiązań tokenów importu.
A use-after-free vulnerability exists in Blink in Google Chrome prior to 89.0.4389.90. A remote attacker could potentially exploit heap corruption via a crafted HTML page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS