CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Unauthenticated PHP Object Injection vulnerability in Forminator versions up to 1.57.0. An attacker can send crafted data to execute arbitrary code.
Unauthenticated Cross Site Scripting (XSS) in TranslatePress versions up to and including 3.3.2.
Unauthenticated Cross Site Scripting (XSS) in JetEngine versions up to and including 3.8.14.1.
Unauthenticated Local File Inclusion in Golo Framework versions prior to 1.7.5.
HCL IntelliOps Event Management (IEM) is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables privilege probing.
Unauthenticated Broken Access Control in Altair <= 5.2.2 versions.
Unauthenticated Privilege Escalation vulnerability in Capella versions up to 2.5.5. An attacker can gain higher privileges without logging in.
Unauthenticated SQL Injection vulnerability in Capella versions up to 2.5.5. An attacker can manipulate database queries.
Unauthenticated Local File Inclusion in Shuffle versions up to and including 1.8.
The setWebhookResolver in the application (likely n8n) lacks validation of user-supplied URLs. An authenticated user can make the server send repeated requests to internal endpoints, including link-local metadata addresses. The response is not returned via the API, making the attack blind.
The scanFeedsResolver in the application (likely n8n) lacks URL validation, allowing an authenticated user to direct the server to arbitrary internal endpoints. The response is parsed as an RSS/Atom feed or HTML, limiting disclosure to feed metadata and RSS/Atom links, but allows distinguishing reachable ports from unreachable ones.
In the Convert Forms extension for Joomla (versions < 5.2.5), the front-end Submissions view lacks access control. An unauthenticated visitor can list a form's submissions.
The ipa-enrollment SLAPI plugin in FreeIPA has a null pointer dereference vulnerability. A remote authenticated client can send a malformed LDAP extended operation, omitting the request value for JOIN_OID, causing a server crash and denial of service.
A flaw in FreeIPA allows a remote unauthenticated attacker to exploit the `/ipa/i18n_messages` endpoint by sending an arbitrarily large request body, causing excessive memory consumption, memory exhaustion, and denial of service.
A flaw in FreeIPA allows a remote unauthenticated attacker to send oversized form POST requests to `/ipa/migration/migration.py`, forcing the migration handler to read attacker-controlled bodies fully into memory, leading to increased memory usage, slower handling, and potential DoS.
FreeIPA has a vulnerability due to lack of size limits for OTP key values. A low-privilege authenticated user can submit an oversized OTP key, causing excessive CPU and memory consumption, leading to denial of service.
A privilege escalation flaw was found in FreeIPA. The uniqueness constraint on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations, allowing a user with LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets and potential full domain compromise.
A flaw was found in FreeIPA. When a trust relationship is configured with Active Directory, AD users can bypass authentication for FreeIPA services by impersonating a client name in the TGS due to missing PAC certificate verification. This could allow an authenticated AD user to escalate privileges within the FreeIPA domain.
A flaw in libvirt allows an unprivileged local user to exploit an integer overflow in the NodeGetFreePages RPC handler, bypassing a size check and leading to a heap buffer overflow. This can corrupt the root libvirt daemon's memory, potentially causing DoS or local privilege escalation.
In libsoup, in SoupServer's HTTP Range header processing, the sort_ranges() comparator truncates a 64-bit subtraction result to 32-bit int, causing incorrect sorting for ranges on files larger than ~2 GB. This leads to omission of requested ranges in HTTP 206 Partial Content responses.