CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.01)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In Tuleap Community Edition prior to version 14.11.99.28 and Tuleap Enterprise Edition prior to versions 14.10-6 and 14.11-3, the preview of an artifact link does not respect project, tracker, and artifact level permissions. Users might gain access to information they should not have access to.
CasaOS is an open-source personal cloud system. Prior to version 0.4.4, an authenticated user who successfully connects to a controlled SMB server can execute arbitrary commands.
A mass assignment vulnerability was found in Netmaker, which creates networks with WireGuard, in versions prior to 0.17.1 and 0.18.6 that allows a non-admin user to escalate privileges to those of an admin user.
In Netmaker, which creates networks with WireGuard, an Insecure Direct Object Reference (IDOR) vulnerability was found in the user update function in versions prior to 0.17.1 and 0.18.6. It allows updating another user's password by specifying their username.
In Netmaker, prior to versions 0.17.1 and 0.18.6, hardcoded DNS key usage was found, allowing unauth users to interact with DNS API endpoints. The issue is patched in versions 0.17.1 and 0.18.6.
A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service (DoS) via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature.
CVE-2023-4420 allows a remote unprivileged attacker to intercept communication with SICK LMS5xx devices due to the absence of TLS security. This can lead to unauthorized disclosure of sensitive information and data manipulation.
The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and/or disrupt the functionality of the device.
A remote unprivileged attacker can send multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack. By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.
A stack overflow was discovered in Tenda AC10 v4 related to the parameters macFilterType and deviceList at the endpoint /goform/setMacFilterCfg.
The Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn device was found to contain a stack overflow vulnerability due to improper handling of parameter list and bindnum at the /goform/SetIpMacBind endpoint.
The Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn device was found to contain a stack overflow vulnerability via the macFilterType and deviceList parameters at the URL /goform/setMacFilterCfg.
The Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn device was found to contain a stack overflow via parameter list at the endpoint /goform/SetNetControlList.
The Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn device was found to contain a stack overflow vulnerability due to improper handling of the macFilterType and deviceList parameters at /goform/setMacFilterCfg.
The Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn device was found to contain a stack overflow vulnerability via the timeZone parameter at the /goform/SetSysTimeCfg endpoint.
The Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn device was found to contain a stack overflow vulnerability via the mac parameter at /goform/GetParentControlInfo.
The Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn device was found to contain a stack overflow vulnerability due to improper handling of parameter list and bindnum at the /goform/SetIpMacBind endpoint.
The Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn device was found to contain a stack overflow via parameter list at the endpoint /goform/SetVirtualServerCfg.
The Tenda AC8 v4 device has a stack overflow vulnerability due to improper handling of the parameter list at the endpoint /goform/SetStaticRouteCfg.
The Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn device was found to contain a stack overflow vulnerability via the time parameter at /goform/PowerSaveSet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS