CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
W urządzeniach Modicon M580, M340, Quantum i Premium występuje podatność CWE-754: Niewłaściwa kontrola warunków nietypowych lub wyjątkowych, która może prowadzić do awarii usługi kontrolera podczas odczytu określonych bloków pamięci za pomocą Modbus TCP.
W Modicon M580, Modicon M340, Modicon Quantum oraz Modicon Premium występuje podatność CWE-754: Niewłaściwa kontrola warunków nietypowych lub wyjątkowych, która może prowadzić do odmowy usługi podczas zapisywania określonych bloków pamięci fizycznej za pomocą Modbus TCP.
W Modicon M580, Modicon M340, Modicon Quantum oraz Modicon Premium występuje podatność CWE-754: Niewłaściwe sprawdzenie nietypowych lub wyjątkowych warunków, która może prowadzić do odmowy usługi podczas odczytu danych z nieprawidłowym indeksem za pomocą Modbus TCP.
W wersji 1.8.4 biblioteki libsixel występuje przepełnienie całkowitej liczby w funkcji sixel_frame_resize w pliku frame.c. Może to prowadzić do nieprzewidzianego zachowania aplikacji.
W wersji 1.8.4 biblioteki libsixel odkryto problem związany z przepełnieniem bufora na stercie w funkcji gif_out_code w pliku fromgif.c.
The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. Parameter-provided templates are disabled by default but can be enabled by setting `params.resource.loader.enabled` to `true`, which requires configuration API access. Solr 8.4 removed the params resource loader entirely and only enables configset-provided template rendering when the configset is `trusted`.
W libsixel w wersji 1.8.4 odkryto problem związany z przepełnieniem bufora na stercie w funkcji gif_init_frame w pliku fromgif.c.
TVT NVMS-1000 devices allow GET /.. Directory Traversal, which allows access to files outside the web root. The vulnerability can be exploited to read sensitive system files.
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that use the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.
In PHP, the EXIF extension parsing EXIF information from an image (e.g., via exif_read_data()) in versions 7.2.x below 7.2.26, 7.3.x below 7.3.13, and 7.4.0 can read past the allocated buffer, potentially leading to information disclosure or crash.
In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to the mail() function, if the header is supplied in lowercase, it can result in double-freeing certain memory locations.
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, the bcmath extension functions on some systems, including Windows, can be tricked into reading beyond the allocated space by supplying a string containing characters that are identified as numeric by the OS but aren't ASCII numbers. This can lead to disclosure of the content of some memory locations.
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, the DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g., in applications checking paths that the code is allowed to access.
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 on Windows, the link() function accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g., in applications checking paths that the code is allowed to access.
The SocketServer class in Log4j 1.2 is vulnerable to deserialization of untrusted data, which can lead to remote execution of arbitrary code. This issue affects Log4j versions from 1.2 up to 1.2.17.
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server. The vulnerability does not allow reading file contents, only detecting their existence.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS