CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
AeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied is taken directly from a network packet. This can cause a buffer overflow and denial of service.
The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This uninitialized type value leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system.
Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay, not the exit relay's family. This may allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families.
The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure.
The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering certain error responses from a MySQL server or a loss of a network connection to a MySQL server.
Versions of MCollective prior to 2.10.4 deserialized YAML from agents without calling safe_load, allowing the potential for arbitrary code execution on the server. The fix for this is to call YAML.safe_load on input.
In avcodec 2.2.x, used in VideoLAN VLC media player 2.2.7-x before June 29, 2017, there is a flaw that allows out-of-bounds heap memory write. This is due to an incorrect size passed to memcpy(), leading to application crashes or potentially code execution.
An XML External Entity (XXE) issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET), exploitable by sending a crafted standard-conforming OSCI message from within the infrastructure.
A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750, SR 760, SR 469, SR 489, SR 745, SR 369, and Multilin Universal Relay and URplus devices. Firmware versions prior to specified versions are susceptible to dictionary attacks due to the use of a non-random initialization vector.
W urządzeniach sterujących Rockwell Automation Allen-Bradley MicroLogix 1100 i MicroLogix 1400 zidentyfikowano problem związany z słabymi wymaganiami dotyczącymi haseł. Dotyczy to wersji 16.00 i wcześniejszych, które używają numerycznego hasła o małej maksymalnej długości.
A 'Reusing a Nonce, Key Pair in Encryption' issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 programmable logic controllers. Exploiting this vulnerability may allow an attacker to capture and replay a valid request until the nonce is changed.
A Predictable Value Range from Previous Values issue was discovered in Allen-Bradley MicroLogix 1100 and 1400 programmable logic controllers, related to insufficiently random TCP initial sequence numbers. An attacker may predict these numbers from previous values.
An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 devices, where user credentials are sent to the web server using the HTTP GET method, potentially leading to their logging.
W urządzeniach sterujących Rockwell Automation Allen-Bradley MicroLogix 1100 i MicroLogix 1400 zidentyfikowano problem z niewłaściwym ograniczeniem nadmiernych prób uwierzytelnienia. Wersje 16.00 i wcześniejsze nie penalizują wielokrotnego wprowadzania błędnych haseł.
An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE (all versions prior to 4.0.14) and AirLink Raven XT (all versions prior to 4.0.11). Sensitive information is insufficiently protected during transmission and vulnerable to sniffing.
An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE (all versions prior to 4.0.14) and AirLink Raven XT (all versions prior to 4.0.11). Several files and directories can be accessed without authentication, which may allow a remote attacker to perform sensitive functions including arbitrary file upload, file download, and device reboot.
A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE (all versions prior to 4.0.14) and AirLink Raven XT (all versions prior to 4.0.11). Affected devices do not verify if a request was intentionally sent by the logged-in user, which may allow an attacker to trick a client into making an unintentional request to the web server.
An Unrestricted Upload issue was discovered in Marel Food Processing Systems M3000 and M3210 terminals, allowing attackers to modify operations and upload firmware changes without detection.
A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web application does not sufficiently verify that requests were provided by the user who submitted the request.
W protokole Modicon Modbus firmy Schneider Electric odkryto problem z ominięciem uwierzytelniania poprzez przechwycenie i powtórzenie. Wrażliwe informacje są przesyłane w postaci niezaszyfrowanej, co umożliwia atakującemu powtórzenie poleceń takich jak uruchomienie, zatrzymanie, przesyłanie i pobieranie.