CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Hirschmann HiOS and HiSecOS products contain an authentication bypass vulnerability in the HTTP(S) management module. Unauthenticated remote attackers can gain administrative access by crafting specially formed HTTP requests.
ProSoft Technology ICX35-HWC cellular gateways version 1.3 and prior contain an input validation vulnerability in the web interface, allowing remote attackers to inject and execute system commands with root privileges.
ProSoft Technology ICX35-HWC cellular gateways version 1.3 and prior contain an authentication bypass vulnerability in the web interface. Unauthenticated attackers can gain administrative access without valid credentials.
GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass vulnerability. Unauthenticated attackers can gain unauthorized access by exploiting a hardcoded string in the authentication mechanism.
Piwigo, an open source photo gallery application, prior to version 16.3.0 contains an SQL injection vulnerability in the date filter. Four date parameters are concatenated directly into SQL without escaping or type validation. An unauthenticated attacker can read the entire database, including user password hashes. The issue is patched in version 16.3.0.
Hirschmann HiSecOS devices prior to version 05.3.03 contain a buffer overflow vulnerability in the HTTPS login interface when RADIUS authentication is enabled. Remote attackers can submit a password longer than 128 characters to crash the device or execute arbitrary code.
A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.
A specific API endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.
An authentication bypass vulnerability in Hirschmann Industrial HiVision prior to versions 06.0.07 and 07.0.03 allows unauthenticated remote attackers to execute arbitrary commands with administrative privileges via the master service.
ZimaOS prior to version 1.5.3 exposes a proxy endpoint (/v1/sys/proxy) that can be abused (via an externally reachable domain using Cloudflare Tunnel) to make requests to internal localhost services. This allows unauthenticated access to internal-only endpoints and sensitive local services when the product is reachable from the Internet through a Cloudflare Tunnel.
Microsoft Bing contains a Server-Side Request Forgery (SSRF) vulnerability that allows an unauthorized attacker to elevate privileges over a network.
In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization when the `basic-auth` app is enabled. Even with basic authentication enabled, any network client can submit, read, search, and cancel jobs without credentials.
The Stackfield Desktop app before version 1.10.2 for macOS and Windows has a path traversal vulnerability in decryption functionality. A malicious export can write arbitrary content to any filesystem path.
Budibase prior to version 3.33.4 allows an unauthenticated attacker to achieve Remote Code Execution (RCE) on the server by triggering an automation that contains a Bash step via the public webhook endpoint. The process executes as root inside the container.
Budibase prior to version 3.33.4 has a Server-Side Request Forgery (SSRF) vulnerability in the REST datasource connector. The SSRF protection mechanism (IP blacklist) is ineffective because the BLACKLIST_IPS environment variable is not set by default in any official deployment configuration. When empty, the blacklist function unconditionally returns false, allowing all requests through.
A heap overflow vulnerability was found in the Linux kernel's NFSD module (NFSv4.0) in the LOCK replay cache. The fixed 112-byte buffer cannot accommodate variable-length lock owner fields (up to 1024 bytes), leading to an out-of-bounds write.
In the Linux kernel, the netfilter nf_conntrack_h323 DecodeQ931() function fails to check for zero length before decrementing, causing an integer wrap and out-of-bounds read.
A vulnerability was found in the Linux kernel's smc_tcp_syn_recv_sock() function in the SMC module. A race condition between closing an SMC socket and TCP connection handling in softirq context leads to NULL pointer dereference or use-after-free (UAF). An attacker could exploit this to cause a system panic.
W jądrze systemu Linux zidentyfikowano podatność związana z użyciem po zwolnieniu pamięci (use-after-free) w kontekście DURABLE_REQ_V2, co może prowadzić do dereferencji nieaktualnego wskaźnika. Problem występuje w funkcji parse_durable_handle_context(), która niepoprawnie przypisuje połączenie do aktywnych uchwytów plików.
Azure Databricks contains a Server-Side Request Forgery (SSRF) vulnerability that allows an unauthorized attacker to elevate privileges over a network.