CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In RIOT OS v2025.07, a vulnerability was discovered in the IPv6 fragmentation reassembly implementation. When copying the contents of the first fragment (offset=0) into the reassembly buffer, no size check is performed. It is possible to force the creation of a small reassembly buffer by first sending a shorter fragment (also with offset=0). Overflowing the reassembly buffer corrupts the state of other packet buffers which an attacker might be able to use to achieve further memory corruption (potentially resulting in remote code execution). To trigger the vulnerability, the `gnrc_ipv6_ext_frag` module must be included and the attacker must be able to send arbitrary IPv6 packets to the victim. Version 2025.10 fixes the issue.
Problem dotyczy niewłaściwej walidacji adresów URL w Safari, co może pozwolić na wykorzystanie interfejsów API Web w kontekście, który powinien być ograniczony. Został naprawiony w wersji Safari 26.2 oraz macOS Tahoe 26.2.
Problem z konfiguracją został rozwiązany poprzez wprowadzenie dodatkowych ograniczeń. Problem ten został naprawiony w iOS 26.2, iPadOS 26.2, macOS Tahoe 26.2 oraz visionOS 26.2, gdzie zdjęcia w albumie Ukryte mogą być przeglądane bez uwierzytelnienia.
In DriveLock Operations Center versions 25.1.2 before 25.1.5, a Cross Site Scripting (XSS) issue allows for session takeover over a network.
In DriveLock versions 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5, local unprivileged users can manipulate privileged processes to gain more privileges on Windows computers.
In Tenda AC10V4.0 router version V16.03.10.20, a buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload (field `serviceName`) to /goform/AdvSetMacMtuWan.
AVideo versions prior to 20.1 with the ImageGallery plugin enabled is vulnerable to unauthenticated file upload and deletion. Plugin endpoints responsible for managing gallery images fail to enforce authentication checks and do not validate ownership, allowing unauthenticated attackers to upload or delete images associated with any image-based video.
ChurchCRM before version 5.21.0 contains a pre-authentication remote code execution vulnerability in the setup wizard. An unauthenticated attacker can inject arbitrary PHP code during the installation process, leading to complete server compromise. The issue arises from directly concatenating user input from the setup form into a PHP configuration template without validation.
Pagekit CMS version 1.0.18 contains an Insecure Direct Object Reference (IDOR) vulnerability that allows attackers to escalate privileges.
Pagekit CMS version 1.0.18 contains an authenticated arbitrary file upload vulnerability in the /storage/poc.php component, allowing attackers to execute arbitrary code by uploading a crafted PHP file.
A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. The issue is due to insufficient validation of HTTP requests by the Spam Quarantine feature.
Atakujący może obejść kontrole autoryzacji i zmusić dostawcę Step CA ACME lub SCEP do tworzenia certyfikatów bez ukończenia określonych kontroli autoryzacji protokołu.
Netaxis API Orchestrator (APIO) before version 0.19.3 is vulnerable to Server Side Template Injection (SSTI).
Apache Airflow Providers Edge3 before version 2.0.0 contains a remote code execution (RCE) vulnerability in the webserver context when used with Airflow 2. The vulnerability only affects environments where Edge3 provider is configured in Airflow 2, and allows a Dag author to execute code, which they normally should not be able to do.
Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The Live Update client has already reached End-of-Support (EOS) in October 2021, and no currently supported devices are affected.
An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code execution via Server Side Template Injection.
Meltytech Shotcut version 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and height parameters. Setting these values to extremely large numbers causes excessive memory allocation during image processing, triggering a buffer overflow in the mlt_image_fill_white function.
Platforma Open edX to system zarządzania nauczaniem. Przed wprowadzeniem poprawki, użytkownicy z rolą CourseLimitedStaffRole mogli uzyskać dostęp do edytowania kursów w studio, jeśli przyznano im tę rolę na poziomie organizacji, a nie kursu.
Ampere AmpereOne AC03 devices before 3.5.9.3, AC04 before 4.4.5.2, and M before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM MMCommunicate service that could result in an out-of-bounds write within the UEFI-MM Secure Partition context.
A vulnerability in AmpereOne processors allows an out-of-bounds write in the PCIe driver's S-EL0 address space via a malformed SMC call to UEFI-MM. Affects AmpereOne AC03 before 3.5.9.3, AC04 before 4.4.5.2, and M before 5.4.5.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS