CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10 in the read_2004_compressed_section function in decode.c at line 2379. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
In InvoicePlane 1.5.11, a misconfigured web server allows an unauthenticated attacker to list directories and download files that should be private via directory traversal.
InvoicePlane 1.5.11 lacks rate-limiting for password reset and uses a weak, predictable token generation mechanism.
A heap-based buffer overflow vulnerability was discovered in GNU LibreDWG version 0.10.2641 in the htmlescape function within escape.c. This flaw could allow an attacker to execute arbitrary code or cause a system crash.
A heap-based buffer overflow vulnerability was found in GNU LibreDWG version 0.10.2641 in the htmlescape function within escape.c at line 48. This flaw allows uncontrolled memory writes beyond the allocated buffer.
A null pointer dereference issue exists in GNU LibreDWG version 0.10.2641 via htmlescape in escape.c:29. This flaw causes a denial of service (DoS) through application crash.
A heap-based buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641 in the htmlescape function at ../../programs/escape.c:46. This flaw allows for uncontrolled memory writes.
In GNU LibreDWG version 0.10.2641, a null pointer dereference issue exists in the output_TEXT function at dwg2SVG.c:114, causing a denial of service via application crash.
A heap-based buffer overflow vulnerability was discovered in GNU LibreDWG version 0.10.2641 in the htmlwescape function at escape.c line 97. This issue can lead to unexpected program behavior.
A heap-based buffer overflow vulnerability was discovered in GNU LibreDWG version 0.10.2641 in the output_TEXT function at programs/dwg2SVG.c:114. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat is to confidentiality, integrity, and system availability. Versions before kernel 5.12-rc6 are affected.
The Data Engine module in Liferay Portal 7.3.0 through 7.3.5 and Liferay DXP 7.3 before fix pack 1 does not check permissions in DataDefinitionResourceImpl.getSiteDataDefinitionByContentTypeByDataDefinitionKey, allowing remote authenticated users to view DDMStructures via GET API calls.
Cross-site scripting (XSS) vulnerability in the Asset Publisher app of the Asset module in Liferay Portal 7.2.1 through 7.3.5, and Liferay DXP 7.1 before fix pack 21, 7.2 before fix pack 10, and 7.3 before fix pack 1. Allows remote attackers to inject arbitrary web script or HTML via the assetEntryId parameter.
Cross-site scripting (XSS) vulnerability in the Layout module's page administration page in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.2 before fix pack 11 and 7.3 before fix pack 1. Allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_name parameter.
Multiple SQL injection vulnerabilities in Liferay Portal 7.3.5 and Liferay DXP 7.3 before fix pack 1 allow remote authenticated users to execute arbitrary SQL commands via the classPKField parameter in CommerceChannelRelFinder.countByC_C and CommerceChannelRelFinder.findByC_C.
Cross-site scripting (XSS) vulnerability in the Asset module's category selector input field in Liferay Portal 7.3.5 and Liferay DXP 7.3 before fix pack 1. Remote attackers can inject arbitrary web script or HTML via the _com_liferay_asset_categories_admin_web_portlet_AssetCategoriesAdminPortlet_title parameter.
Cross-site scripting (XSS) vulnerability in the Redirect module's administration page in Liferay Portal 7.3.2 through 7.3.5 and Liferay DXP 7.3 before fix pack 1. Attackers can inject arbitrary web script or HTML via the destinationURL parameter.
Cross-site scripting (XSS) vulnerability in the Site module's membership request pages in Liferay Portal 7.0.0 through 7.3.5 and Liferay DXP 7.0-7.3 allows remote attackers to inject arbitrary web script or HTML via the comments parameter.
The Portal Store module in Liferay Portal 7.0.0 through 7.3.5 and Liferay DXP 7.0 through 7.3 does not obfuscate the S3 store's proxy password, allowing attackers to steal the proxy password via man-in-the-middle attacks or shoulder surfing.
The SimpleCaptcha implementation in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.3 before fix pack 1 does not invalidate CAPTCHA answers after use. This allows remote attackers to repeatedly perform actions protected by a CAPTCHA challenge by reusing the same CAPTCHA answer.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS