CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An issue was discovered in MISP version 2.4.128, where app/Controller/EventsController.php lacks an event ACL check before allowing a user to send an event contact form.
An issue was discovered in MISP version 2.4.128 related to insufficient ACL checks in the attachment downloader in app/Controller/AttributesController.php.
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.
A vulnerability in PAN-OS SAML authentication due to improper signature verification when the 'Validate Identity Provider Certificate' option is disabled. An unauthenticated network-based attacker can access protected resources, and for PAN-OS/Panorama web interfaces, can log in as an administrator. Affects PAN-OS 9.1 < 9.1.3, 9.0 < 9.0.9, 8.1 < 8.1.15, and all 8.0 versions (EOL).
A flaw was found in ActiveMQ Artemis from versions 2.7.0 to 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properties) when executing the `resetUsers` operation. A local attacker can use this flaw to read the contents of the Artemis shadow file.
Adobe Campaign Classic before 20.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
MISP version 2.4.127 lacks an ACL check on attribute correlations. This occurs when querying the attribute restsearch API, revealing metadata about a correlating but unreachable attribute.
W pakiecie jsrsasign dla Node.js przed wersją 8.0.17 wykryto podatność w implementacji RSASSA-PSS (RSA-PSS). Implementacja nie wykrywa manipulacji sygnaturą polegającej na dodaniu bajtów '\0' na początku sygnatury i akceptuje tak zmodyfikowane sygnatury jako prawidłowe.
W pakiecie jsrsasign dla Node.js przed wersją 8.0.18 odkryto podatność w implementacji deszyfrowania RSA PKCS1 v1.5. Implementacja nie wykrywa modyfikacji szyfrogramu polegającej na dodaniu bajtów '\0' na początku, co pozwala na deszyfrowanie zmodyfikowanych danych bez zgłaszania błędu. Atakujący może wykorzystać tę lukę do wywołania problemów z pamięcią.
An issue was discovered in the jsrsasign package through 8.0.18 for Node.js, allowing malleability in ECDSA signatures due to not checking overflows in the length of a sequence and '0' characters appended or prepended to an integer. Modified signatures are verified as valid.
A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to gain root shell access to the underlying OS and overwrite or read arbitrary files. The attacker would need valid administrative credentials. The issue is due to improper input validation of CLI command arguments. Successful exploitation could allow root shell access and arbitrary file read/write.
In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains an empty non-terminal entry containing an asterisk ("*") character, this defect cannot be encountered. A would-be attacker who is allowed to change zone content could theoretically introduce such a record in order to exploit this condition to cause denial of service, though we consider the use of this vector unlikely because any such attack would require a significant privilege level and be easily traceable.
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).
FasterXML jackson-databind w wersjach 2.x przed 2.9.10.5 niewłaściwie obsługuje interakcję między gadżetami serializacji a typowaniem, co jest związane z oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (znanym jako apache/drill).
FasterXML jackson-databind w wersjach 2.x przed 2.9.10.5 niewłaściwie obsługuje interakcję między gadżetami serializacyjnymi a typowaniem, co jest związane z com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (znanym również jako xalan2).
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).
Jackson, when configured with default typing, has a deserialization vulnerability that could lead to arbitrary code execution. Spring Batch, using Jackson with global default typing, may allow code execution if an attacker has write access to the JobRepository data store.
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS