CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.01)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In onCreate of WindowState.java, there is a logic error that allows launching a background activity. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. Similar issues affect token generation, refresh, check, and code authentication modules (CVE-2023-41345 through CVE-2023-41348).
W TSplus Remote Access w wersji do 16.0.2.14 odkryto problem, w którym dane uwierzytelniające są przechowywane w postaci niezaszyfrowanej w kodzie źródłowym HTML strony logowania.
W TSplus Remote Access w wersji do 16.0.2.14 odkryto problem związany z uprawnieniami. Niektóre katalogi w %PROGRAMFILES(X86)%\TSplus\UserDesktop\themes mają pełne uprawnienia kontrolne dla wszystkich użytkowników.
An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass authentication and execute arbitrary code via crafted HTTP request.
W Trusted Firmware-M do wersji TF-Mv1.8.0, w przypadku platform integrujących akcelerator CryptoCell, występuje problem z algorytmem Chacha20-Poly1305. Funkcja weryfikacji jednoczęściowej nie porównuje pełnych 16 bajtów, a jedynie pierwsze 4 bajty, co może prowadzić do błędnej identyfikacji nieautoryzowanych danych jako autoryzowane.
A SQL injection vulnerability in the Search functionality of tickets.php page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the combination of 'keywords' and 'topic_id' URL parameters.
A vulnerability in the Embedded Service Router (ESR) of Cisco ISE could allow an authenticated, local attacker to read, write, or delete arbitrary files on the underlying operating system and escalate privileges to root. It is due to improper privilege management in the ESR console, and an attacker could send a crafted request to an affected device.
A stored XSS vulnerability was discovered in REDCap 13.1.35 in the new project creation function. Attackers can inject malicious JavaScript or HTML into the project title parameter, leading to script execution in other users' browsers.
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
A vulnerability in the remote access VPN feature of Cisco ASA and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack to identify valid credentials or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user. The issue is due to improper separation of authentication, authorization, and accounting (AAA) between the remote access VPN feature and the HTTPS management and site-to-site VPN features.
A use-after-free vulnerability exists in the af_unix component of the Linux kernel, exploitable for local privilege escalation. The unix_stream_sendpage() function adds data to the receive queue without locking, leading to a race with the garbage collector and use of a freed skb.
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component is caused by a race condition between netlink control plane transaction and nft_set element garbage collection. Reference counter underflow leads to use-after-free, exploitable for local privilege escalation.
Wtyczka Media Library Assistant dla WordPressa jest podatna na lokalne włączenie plików oraz zdalne wykonanie kodu w wersjach do 3.09 włącznie. Problem wynika z niewystarczających zabezpieczeń dotyczących ścieżek plików przekazywanych do parametru 'mla_stream_file'.
Wtyczka Simple Membership dla WordPressa jest podatna na odzwierciedlone ataki Cross-Site Scripting (XSS) poprzez parametr `list_type` w wersjach do 4.3.5 włącznie, z powodu niewystarczającej sanitizacji wejścia i ucieczki wyjścia. Atakujący bez uwierzytelnienia mogą wstrzykiwać dowolne skrypty webowe na strony, jeśli uda im się oszukać użytkownika do podjęcia akcji, takiej jak kliknięcie złośliwego linku.
Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
A file upload vulnerability in bolo-solo version 2.6 allows a remote attacker to execute arbitrary code by sending a crafted script in the authorization header. This can lead to full server compromise.
Heap-based buffer overflow exists in the GitHub repository vim/vim prior to version 9.0.1873.
CVE-2023-4531 describes an improper neutralization of special elements used in SQL commands, leading to SQL Injection vulnerabilities in Mestav's e-commerce software. This issue affects versions of the software before 20230901.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS