CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer. A guest user could cause an integer overflow leading to memory corruption.
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer. A user could cause an out-of-bounds write by supplying mismatched memory buffers during event buffer setup.
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer. Improper cleanup of reference counts during error paths could lead to a use-after-free condition.
NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer. A guest could cause an out-of-bounds read.
NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) plugin. A guest VM user may cause an out-of-bounds write by sending a specially crafted RPC message.
NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing component. A guest VM user may cause improper access by sending crafted data through a shared buffer.
NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin). A guest VM user may cause an out-of-bounds write by sending a specially crafted RPC call to the host.
NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer. A user could cause an out-of-bounds write.
NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue.
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit might lead to code execution, privilege escalation, data tampering, denial of service, and information disclosure.
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release of memory resources, leaving a mapping accessible after the underlying memory is reused. A successful exploit might lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit might lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering.
External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43.
Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in Non-Executable Files. This issue affects MediaWiki Wikibase extension: 1.46, 1.45, and 1.43.
apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi), a related issue to CVE-2026-15544.
A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqli_query of the file User/cancel.php of the component Order Cancellation. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_query of the file User/ord.php of the component Order Placement. Executing a manipulation of the argument id/name can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqli_query of the file admin/delete1.php of the component Unauthenticated Action Script. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature.
In JetBrains YouTrack before version 2026.2.19197, an authorization bypass in the scripts debugger allows arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS