CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.20)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability was found in GNU LibreDWG up to version 0.13.4, involving a null pointer dereference in the dwg_next_entity function of src/dwg.c when processing the next_obj argument. The attack requires local access and the exploit has been made public.
In body-parser versions prior to 1.20.6 (1.x line) and 2.3.0 (2.x line), an invalid limit option value (e.g., unparseable string or NaN) causes bytes.parse to return null, silently skipping the request body size check. Applications relying on limit as their primary safeguard against oversized requests will accept arbitrarily large payloads, leading to excessive memory and CPU usage and denial of service.
A vulnerability in Pinniped Supervisor allows a user authenticating to Kubernetes clusters to gain elevated privileges. This requires an ActiveDirectoryIdentityProvider with an empty groupName field and the attacker's ability to modify group distinguished names (DN) in Active Directory.
Vulnerability in CoreWCF (a port of WCF for .NET Core) versions prior to 1.8.1 and 1.9.1. The WS-Security 1.0 receive pipeline validates the ds:SignedInfo SignatureMethod against the configured SecurityAlgorithmSuite but does not validate each ds:Reference DigestMethod, allowing a sender to use a rejected digest algorithm such as SHA-1 while the message is still accepted.
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page.
The BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure.
An improper authorization vulnerability in GraphQL operations in GitLab EE allowed an authenticated user with auditor-level access to modify compliance violation records under certain conditions. Affected versions are 18.2 through 18.11.7, 19.0 through 19.0.4, and 19.1 through 19.1.2.
A vulnerability in Parse Server allows a LiveQuery subscriber to receive object field values they are not authorized to read. This occurs when a single save operation changes both an object field and the subscriber's ACL read access, causing incorrect handling of leave and enter events.
A vulnerability in Parse Server allows bypassing the default file upload extension blocklist by uploading a file with a non-standard or compound extension and dangerous content type. This enables storage adapters like S3 and GCS to serve attacker-supplied active content, leading to stored cross-site scripting (XSS).
A vulnerability in GitLab CE/EE allows an authenticated user to create a repository where the content displayed in the web interface differs from the content available for download. The issue is due to improper handling of Git reference name resolution and affects versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2.
Path equivalence vulnerability in the File Upload module of Progress MOVEit Transfer allows potential security bypass. Affects versions before 2025.0.8 and from 2025.1.0 before 2025.1.4.
Incorrect authorization vulnerability in the Audit User module of Progress MOVEit Transfer. The flaw allows unauthorized access to user audit functions.
Limited authentication bypass by spoofing vulnerability in the HTTPS module of Progress MOVEit Transfer. Affects versions before 2025.0.7 and from 2025.1.0 before 2025.1.3.
BBOT's `github_workflows` module could be induced to write a downloaded artifact outside its configured output directory. Its path-containment check did not resolve `..`, so a crafted `CODE_REPOSITORY` URL could traverse out of the intended folder.
The vulnerability in BBOT's unarchive module fails to detect symlinks in zip and 7z archives when their listing carries a DOS-attribute prefix before the unix mode, as produced by legacy p7zip versions. This allows an attacker-controlled symlink to be written into the extraction directory when such an archive is downloaded and extracted during a scan, bypassing the guard.
A heap buffer overflow vulnerability in ImageMagick before 7.1.2-19 exists in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out-of-bounds read by crafting malicious FTXT image files, leading to denial of service or information disclosure.
In ImageMagick before version 7.1.2-15, there is a heap-buffer-overflow read vulnerability in the GetPixelIndex function. The issue arises because OpenPixelCache updates image channel metadata before allocating pixel cache memory. Attackers can trigger memory and disk allocation failures, causing a heap-buffer-overflow read that affects any writer calling GetPixelIndex.
A path traversal vulnerability in Dell PowerProtect Data Domain allows a highly privileged remote attacker to modify files outside the restricted directory. The issue affects multiple versions including LTS2024, LTS2025, and LTS2026 releases.
In 389 Directory Server, the PBKDF2-SHA256 password verification function uses standard memcmp() instead of a constant-time comparison function. This allows a remote attacker to potentially infer partial hash information by measuring response times of LDAP bind requests.
A vulnerability in OpenSSH before version 10.4 allows remote attackers to cause a denial of service (DoS) via excessive GSSAPI authentication attempts. The issue stems from improper handling of the MaxAuthTries limit for GSSAPIAuthentication.