CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.29)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In hostapd version 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker who previously successfully bootstrapped public keys with another entity using PKEX can subvert future bootstrapping by passively observing public keys, reusing the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This yields the public ephemeral key X, the only element required to subvert the PKEX association.
A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.
A flaw was found in npm-serialize-javascript where the module does not properly sanitize certain inputs like regex or other JavaScript object types, allowing an attacker to inject malicious code. This code can be executed during deserialization in a web browser, leading to Cross-site scripting (XSS) attacks.
Smartcom Ralink CPE/WiFi routers SAM-4G1G-TT-W-VC and SAM-4F1F-TT-W-A1 have a weak default WiFi password generation algorithm. This allows a remote attacker to recover the password and gain network access.
In SourceCodester Packers and Movers Management System 1.0, a Cross-Site Request Forgery (CSRF) vulnerability exists in Users.php. It allows attackers to create unauthorized admin accounts by sending crafted requests to an authenticated admin user.
A floating point exception (divide-by-zero) vulnerability was discovered in Bento4 1.6.0-641 in the AP4_TfraAtom() function of Ap4TfraAtom.cpp. A remote attacker can exploit this flaw to cause a denial of service (DoS).
The web-based management interface of Cisco ISE guest portals has XSS vulnerabilities. An authenticated attacker with administrative credentials can inject malicious code into specific pages, leading to script execution or access to sensitive data.
The web-based management interface of Cisco ISE guest portals has XSS vulnerabilities. An authenticated attacker with administrative credentials can inject malicious code into specific pages, leading to script execution or access to sensitive data.
The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accept domain names with square brackets, which is invalid per RFC 3986. Square brackets are only meant as delimiters for IPv6 and IPvFuture hosts. This can cause differential parsing between Python's URL parser and other compliant parsers.
Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06 is vulnerable to Cross-Site Scripting (XSS) in the management interface via /bin/goahead. The vulnerability exists in endpoints /goform/setStaticRoute, /goform/fromSetFilterUrlFilter, and /goform/fromSetFilterClientFilter.
A persistent cross-site scripting (XSS) vulnerability was found in NodeBB v3.11.0. An attacker can store arbitrary JavaScript code in the 'About Me' section of their profile.
W podatności CVE-2024-10539 występuje niewłaściwa neutralizacja danych wejściowych podczas generowania stron internetowych w systemie Uyumsoft ERP, co pozwala na ataki typu XSS (Cross-site Scripting) przy użyciu nieprawidłowych znaków. Problem dotyczy wersji Uyumsoft ERP przed Erp4.2109.166p45.
A stored cross-site scripting (XSS) vulnerability in Umbraco CMS v14.3.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. NOTE: This has been disputed by the vendor since this potential attack is only possible via authenticated users who have been manually allowed access to the CMS. There was a deliberate decision made not to apply HTML sanitization at the product level.
An uninitialized pointer dereference in the ngap_handle_pdu_session_resource_setup_response routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDU Session Resource Setup Response.
In multiple locations, there is a possible way to access media content belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
A null dereference vulnerability in OpenAirInterface CN5G AMF (oai-cn5g-amf) version 2.0.0 and earlier occurs when handling unsupported NGAP protocol messages. An attacker with network-adjacent access can trigger a denial of service.
IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0.25 store web pages locally, allowing another system user to read them.
IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0.25 do not restrict domains in CORS, potentially allowing an attacker to perform privileged actions and retrieve sensitive information.
IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0.25 use weaker than expected cryptographic algorithms, potentially allowing an attacker to decrypt highly sensitive information.
In the Linux kernel, a vulnerability was found due to overly strict assertions (WARN_ON) when file handle encoding fails. These assertions are incorrect because encoding can fail for various reasons, and main users (nfsd, name_to_handle_at) are already prepared to handle errors.