CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The WePupil Quiz Expert plugin versions up to 1.5.0 contain a Cross-Site Request Forgery (CSRF) vulnerability. This allows attackers to send unauthorized requests on behalf of users.
CSRF vulnerability in ChubbyNinjaa Template Debugger plugin versions <= 3.1.2 allows unauthorized actions on behalf of the user.
The StoreApps Stock Manager plugin for WooCommerce versions <= 2.10.0 has a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can exploit this flaw to perform unauthorized actions on behalf of the user.
The Securimage-WP plugin versions up to 3.6.16 contain a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can exploit this flaw to perform unauthorized actions on behalf of a logged-in user.
A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering a Geometry Dash level.
CSRF vulnerability in the Prem Tiwari Disable WordPress Update Notifications and auto-update Email Notifications plugin in versions <= 2.3.3 allows attackers to perform unauthorized actions on behalf of the user.
A vulnerability exists in the memory management subsystem of the Linux kernel, related to incorrect lock handling for accessing virtual memory areas. This can lead to use-after-free issues, allowing arbitrary kernel code execution and privilege escalation.
Cross-Site Request Forgery (CSRF) vulnerability exists in Andy Whalen's Galleria plugin versions <= 1.0.3. This allows attackers to send unauthorized requests on behalf of users.
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Recent Posts Slider plugin by Neha Goel in versions <= 1.1. This allows attackers to send unauthorized requests on behalf of users.
The AREOI All Bootstrap Blocks plugin versions up to 1.3.6 contain a Cross-Site Request Forgery (CSRF) vulnerability. This may allow attackers to perform unauthorized actions on behalf of an authenticated user.
The NextGen GalleryView plugin for WordPress versions <= 0.5.5 contains a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can exploit this flaw to perform unauthorized actions on behalf of a logged-in user.
CSRF vulnerability in Andrea Tarantini's Menubar plugin versions <= 5.8.2 allows attackers to perform unauthorized actions on behalf of users.
CSRF vulnerability in WPMobilePack.Com WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps, present in versions <= 3.4.1.
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). This vulnerability involves type confusion while parsing STP files, which could allow an attacker to execute code in the context of the current process.
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The application is vulnerable to stack-based buffer overflow while parsing specially crafted SPP files.
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The application is vulnerable to stack-based buffer overflow while parsing specially crafted STP files.
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file, which could allow an attacker to execute code in the context of the current process.
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files.
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008) and V2302 (All versions < V2302.0002). The application is vulnerable to heap-based buffer overflow while parsing specially crafted PRT files, which could allow an attacker to execute code in the context of the current process.
A vulnerability has been identified in RUGGEDCOM ROX MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, and RX5000 devices in versions below V2.16.0. The SCEP CA Certificate Name parameter in the web interface is vulnerable to command injection due to missing server-side input sanitation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS