CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
graphql-ruby to implementacja GraphQL w języku Ruby. W wersjach od 1.11.5 do 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17 i 2.3.21, załadowanie złośliwej definicji schematu w `GraphQL::Schema.from_introspection` (lub `GraphQL::Schema::Loader.load`) może prowadzić do zdalnego wykonania kodu.
W wersji 2.8 aplikacji tNexus Airport View występuje problem, który pozwala zdalnemu atakującemu na eskalację uprawnień poprzez wartość ProfileID w punkcie końcowym API [/tnexus/rest/admin/updateUser].
W podatności CVE-2025-1960 występuje problem z inicjalizacją zasobu z niebezpiecznymi domyślnymi ustawieniami. Atakujący może wykonać nieautoryzowane polecenia, jeśli domyślne dane logowania systemu nie zostały zmienione po pierwszym użyciu.
W Smallrye zidentyfikowano lukę, w której smallrye-fault-tolerance jest podatny na problem z brakiem pamięci (OOM). Luka ta jest wywoływana zewnętrznie podczas wywoływania URI metryk, co może prowadzić do problemu z odmową usługi (DoS).
An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site scripting (XSS) vulnerability exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a malicious ICS entry, its embedded JavaScript executes via an ontoggle event inside a <details> tag. This allows an attacker to run arbitrary JavaScript within the victim's session, potentially leading to unauthorized actions such as setting e-mail filters to redirect messages to an attacker-controlled address. As a result, an attacker can perform unauthorized actions on the victim's account, including e-mail redirection and data exfiltration.
W Koha przed wersją 24.11.02 występuje podatność na SQL Injection w funkcji GetLateOrMissingIssues w pliku C4/Serials.pm. Atakujący może wykorzystać parametry supplierid lub serialid w skrypcie /serials/lateissues-export.pl.
Problem w dtp.ae tNexus Airport View w wersji 2.8 umożliwia zdalnemu atakującemu eskalację uprawnień za pomocą punktów końcowych addUser i updateUser.
An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrary code which can compromise an affected device. This issue is not exploitable from the Junos CLI. This issue affects Junos OS: All versions before 21.2R3-S9, 21.4 versions before 21.4R3-S10, 22.2 versions before 22.2R3-S6, 22.4 versions before 22.4R3-S6, 23.2 versions before 23.2R2-S3, 23.4 versions before 23.4R2-S4, 24.2 versions before 24.2R1-S2, 24.2R2.
In the Linux kernel, a vulnerability in the TCP stack causes the security path (secpath) not to be dropped together with the dst object. This retains a reference to the xfrm_state, preventing its proper cleanup when network namespaces are deleted. The issue manifests as a WARN warning in xfrm6_tunnel_net_exit.
A vulnerability related to io_uring has been resolved in the Linux kernel, concerning opcode speculation. Safeguards have been implemented to ensure that sqe->opcode is properly sanitized against speculations.
In the Linux kernel, a vulnerability was found in migrate_device_finalize() where a folio to be freed is incorrectly added to the LRU list. This triggers memcg warnings and may cause unnecessary system overhead.
A use-after-free vulnerability has been identified in the Linux kernel in the geneve_find_dev() function. The issue arises when the geneve_dev.next structure is linked to a backend UDP socket that has already been freed.
A use-after-free vulnerability was found in the ibmvnic driver of the Linux kernel. After sending the transmit buffer to VIOS, the driver incorrectly accessed the skb structure, leading to a race condition between reading skb->len and freeing the skb via an interrupt from VIOS.
In the Linux kernel, a vulnerability in BPF was found where the freeze_mutex was held during the entire mmap operation, potentially leading to deadlocks. The fix reduces the lock hold time to only the necessary write permission checks.
In the Linux kernel, arena_map_free causes a soft lockup on 64k page kernels (aarch64). The address returned by bpf_arena_get_kern_vm_start() may not be page-aligned, leading to an infinite loop in apply_to_pte_range.
In the NVMe over Fabrics subsystem (nvmet) of the Linux kernel, a bug was found causing a crash when disabling a namespace. The percpu counter protecting pending I/O was not properly handled, leading to a crash when trying to disable a namespace with active I/O.
W jądrze Linuxa zidentyfikowano podatność związaną z brakiem sprawdzenia nullowości wskaźnika cstream w funkcji sof_ipc_msg_data(). Niewłaściwe założenie, że cstream nie jest NULL, gdy wskaźnik stream jest NULL, może prowadzić do dereferencji wskaźnika NULL.
A vulnerability in the Linux kernel's acct(2) system call can cause a NULL pointer dereference when writing to a file that triggers an internal lookup (e.g., /sys/power/resume) after the process has exited and called exit_fs().
W jądrze Linuxa zidentyfikowano podatność, która została naprawiona. W wyniku błędu w funkcji `sst_nor_write_data()` tylko jeden bajt danych jest zapisywany, niezależnie od liczby bajtów przekazanych do tej funkcji, co prowadzi do awarii jądra podczas operacji zapisu.
In the Linux kernel SMB (CIFS) client, the function receive_encrypted_standard() lacks a check for the return value of cifs_buf_get() and cifs_small_buf_get(), potentially leading to a null pointer dereference.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS