CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
GNU Bash w wersji do 4.3 bash43-026 nieprawidłowo analizuje definicje funkcji w wartościach zmiennych środowiskowych, co pozwala zdalnym atakującym na wykonywanie dowolnych poleceń poprzez spreparowane środowisko. Przykłady obejmują wykorzystanie funkcji ForceCommand w OpenSSH sshd oraz modułów mod_cgi i mod_cgid w serwerze Apache HTTP.
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter.
The Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication and gain privileges via incorrect validation of the HTTP Authorization header.
Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, allowing remote attackers to obtain sensitive information (clients and router configuration) via a request to /JNAP/.
The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12 does not verify X.509 certificates from SSL servers when using HTTPS, allowing man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certificate.
Juniper Installer Service (JIS) Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local users to gain privileges via unspecified vectors.
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops.
The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents.
The Linux kernel before version 2.6.36 has a flaw in include/linux/netdevice.h that incorrectly uses macros for netdev_printk and its related logging implementation. This allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) by sending invalid packets to a VxLAN interface.
The SMB2_tcon function in the Linux kernel before version 3.16.3 allows remote CIFS servers to cause a denial of service through NULL pointer dereference, leading to client system crashes. It may also lead to unspecified other impacts by deleting the IPC$ share during DFS referral resolution.
The file net/ceph/auth_x.c in Ceph, as used in the Linux kernel before version 3.16.3, does not properly validate auth replies, allowing remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via crafted data from the IP address of a Ceph Monitor.
In Ceph, used in the Linux kernel before version 3.16.3, memory allocation errors are not properly handled, potentially leading to system crashes or other unspecified impacts via a long unencrypted auth ticket.
Buffer overflow in net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a long unencrypted auth ticket.
The assoc_array_gc function in the associative-array implementation in the Linux kernel before version 3.16.3 does not properly implement garbage collection, which may lead to system crashes or other unspecified impacts.
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted environment.
Unspecified vulnerability in IBM Security QRadar SIEM 7.1 MR2 and 7.2 MR2 allows remote attackers to execute arbitrary code via unknown vectors.
The Infusionsoft Gravity Forms plugin versions 1.5.3 to 1.5.10 for WordPress does not properly restrict access, allowing remote attackers to upload arbitrary files and execute arbitrary PHP code via a request to utilities/code_generator.php.
A vulnerability in Mozilla Network Security Services (NSS) before version 3.16.2.1 and in various browser versions involves improper parsing of ASN.1 values in X.509 certificates. This allows remote attackers to spoof RSA signatures using a crafted certificate.
The ALG module in Cisco IOS versions 15.0 through 15.4 does not properly implement SIP over NAT, allowing remote attackers to cause a denial of service (device reload) via multipart SDP IPv4 traffic.
Cisco IOS versions 12.4 and 15.0 through 15.4 and IOS XE 3.1.xS to 3.11.xS before 3.12S are vulnerable to an attack that can lead to denial of service via a crafted SIP message.