CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.13)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Memory corruption while preprocessing IOCTLs in sensors.
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
Memory Corruption when multiple threads concurrently access and modify shared resources.
Memory corruption while processing identity credential operations in the trusted application.
Memory corruption while processing a secure logging command in the trusted application.
Cryptographic issue may occur while encrypting license data.
A memory corruption vulnerability occurs while handling sensor utility operations. Improper data processing leads to memory corruption.
The vulnerability causes memory corruption while processing a video session to set video parameters. This could lead to unexpected system behavior or potential code execution.
The vulnerability causes memory corruption during deinitialization of an HDCP session. This may lead to unexpected system behavior or crashes.
Memory corruption while accessing a synchronization object during concurrent operations.
Memory corruption while performing sensor register read operations.
Memory corruption while parsing clock configuration data for a specific hardware type.
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
Memory corruption while handling buffer mapping operations in the cryptographic driver.
A memory corruption vulnerability occurs while processing a config call from userspace. Improper handling of input data leads to memory corruption.
Information disclosure while processing a firmware event.
A transient denial of service (DOS) vulnerability occurs while parsing video packets received from the video firmware. Improper packet processing leads to temporary service unavailability.
Podatność CVE-2025-32300 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w DZS Video Gallery, co prowadzi do ataków typu Cross-site Scripting (XSS). Problem ten dotyczy wersji DZS Video Gallery od n/a do 12.25.
Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services bound to external network interfaces instead of the local authentication interface.
Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2 allows a local attacker to perform unauthorized configuration changes via unauthenticated administrative configuration requests.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS