CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.14)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Out-of-bounds write and classic buffer overflow in X-TRACK up to v2.7 in inflate.C (PNGdec). May lead to memory corruption.
Out-of-bounds write and heap-based buffer overflow in wxhelper up to 3.9.10.19-v1 in mongoose.C. May lead to memory corruption.
Out-of-bounds read in WickedEngine up to 0.71.727 in lparser.C (LUA). May lead to data disclosure or crash.
UEVR before version 1.05 has an out-of-bounds write vulnerability in the lua/src modules, specifically in ldebug.C and lvm.C. This can lead to memory corruption and potential crashes.
Infinite loop vulnerability in tis before v4.3.0 in ChangeDomainAction.Java. May lead to service hang.
Unrestricted file upload and untrusted data deserialization in tis before v4.3.0 in XmlFile.Java. May allow uploading malicious files and code execution.
Integer overflow vulnerability in swoole-src before 6.0.2 in sds.C (hiredis). May lead to unexpected behavior or memory corruption.
SKRoot-linuxKernelRoot has a NULL pointer dereference vulnerability in the testRoot/jni/utils module, in cJSON.Cpp. This can lead to program crashes.
Vulnerability in root-project root up to 6.36.00-rc1 in inftrees.C (zlib). Exact type not specified, but may lead to malfunction.
Podatność w projekcie root (moduły builtins/zlib) związana z plikami programowymi inffast.C. Problem ten dotyczy oprogramowania root.
Classic buffer overflow in rethinkdb up to v2.4.4 in cJSON.Cc. May lead to memory corruption.
RawTherapee through version 5.11 has an integer overflow vulnerability in the rtengine module, in dcraw.Cc. This can lead to unexpected behavior or crashes.
Infinite loop vulnerability in the lede project (mt7603e driver modules) related to bn_lib.C files. Versions through r25.10.1 are affected.
Infinite loop vulnerability in the lede project (mt7615d driver modules) related to bn_lib.C files. Versions through r25.10.1 are affected.
Classic buffer overflow (out-of-bounds write) vulnerability in the furnace project (zlib modules) related to inflate.C files.
Improper restriction of memory buffer operations in DagorEngine (miniupnpc modules) related to upnpreplyparse.C files. Versions through dagor_2025_01_15 are affected.
Improper restriction of memory buffer operations in the cardboard project (WorldImpl modules) related to WorldImpl.Java files. Versions before 1.21.4 are affected.
Podatność CVE-2026-24793 dotyczy błędu zapisu poza granicami w module zlib w azerothcore-wotlk, co prowadzi do klasycznego przepełnienia bufora. Problem ten występuje w plikach programu inflate.C i dotyczy wersji azerothcore-wotlk do v4.0.0.
EZCast Pro II version 1.17478.146 has multiple buffer overflows in the Admin UI, allowing attackers to cause program crashes and potential remote code execution.
The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user with permission management rights on one dashboard can read and modify permissions on other dashboards, leading to an organization-internal privilege escalation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS