CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In JetBrains TeamCity before 2026.1, the SAML plugin allows an open redirect, which can be used for phishing attacks.
In JetBrains YouTrack before version 2026.1.13162, an information disclosure vulnerability was possible on fetchApp requests, allowing attackers to access unauthorized data.
QuickCMS is vulnerable to Cross-Site Scripting (XSS) through its insecure HTTP-based plugin-fetching mechanism. An attacker can perform a Man-in-the-Middle (MITM) attack by impersonating the opensolution.org server and serving arbitrary HTML or JavaScript at the plugin list endpoint. The issue was fixed in a patch to version 6.8 published on 15.05.2026.
In the Indian Motorcycle Scout Bobber + Tech 2025, a vulnerability in the Infotainment system allows an adjacent-network attacker to bypass the PIN screen. The system skips PIN if no WCM traffic is detected during boot. An attacker can silence the WCM (e.g., via CAN bus-off) and gain full interface access.
In the Indian Motorcycle Scout Bobber + Tech 2025, a vulnerability in the Infotainment system allows an adjacent-network attacker to bypass the PIN screen. The system skips PIN if no WCM traffic is detected during boot. An attacker can silence the WCM (e.g., via CAN bus-off) and gain full interface access.
OpenSC before version 0.27.0 (fixed in commit 0358817) contains a stack and heap buffer overrun in the do_key_value() function in src/pkcs15init/profile.c. Attackers can supply a crafted profile configuration file, causing buffer overrun and memory corruption.
OpenSC before 0.27.0-rc1 has a stack buffer overflow in piv_process_history() in src/libopensc/card-piv.c. A physically present attacker can present a crafted PIV smart card or USB device returning a URL field longer than 118 bytes in the Key History Object ASN.1 response, causing memory corruption.
In the Quay config-tool's GitLab OAuth validator, sensitive credentials (client_id and client_secret) are transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This can lead to disclosure of these credentials in system logs such as server access logs, reverse proxy logs, and other monitoring systems.
Inappropriate implementation in Media in Google Chrome on Windows prior to 148.0.7778.216 allows a remote attacker who compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High).
A race condition in WebRTC in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Insufficient validation of untrusted input in Google Chrome on iOS prior to 148.0.7778.216 allows a remote attacker who has compromised the renderer process to bypass same origin policy via a crafted HTML page. This vulnerability is rated as High severity by Chromium.
An uninitialized use vulnerability in the ANGLE component of Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
In Google Chrome on Android prior to version 148.0.7778.216, an uninitialized use in GPU was discovered. A remote attacker who had compromised the renderer process could leak cross-origin data via a crafted HTML page.
An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users permission to view or generate recovery codes for other users, bypassing access controls.
An inappropriate implementation in the Skia library in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. The issue is rated as high severity.
In AnythingLLM prior to version 1.13.0, an approved mobile device token created in single-user mode can survive migration to multi-user mode even when the device record has userId = null. In multi-user mode, this stale token is still accepted by the mobile authentication middleware, allowing enumeration of workspaces and content without per-user filtering.
In AnythingLLM prior to version 1.13.0, the agent filesystem copy tool validates only the top-level source and destination paths. The recursive copy helper does not validate each child entry or reject symlinks, allowing bypass of restrictions and copying files from outside the allowed filesystem root.
Ubuntu Linux w wersjach 6.8, 6.17 i 7.0 zawiera poprawki SAUCE, które mogą prowadzić do dereferencji wskaźnika NULL podczas obsługi mediacji gniazd AF_INET/AF_INET6. Błąd może być wywołany przez nieuprzywilejowanego lokalnego użytkownika, co może skutkować błędem jądra.
Ubuntu Linux 6.8 zawiera poprawki SAUCE, które mogą prowadzić do użycia nieinicjalizowanej zmiennej w kodzie mediacji gniazd AppArmor dla AF_INET/AF_INET6. Błąd może być wywołany przez nieuprzywilejowanego lokalnego użytkownika, co może skutkować nieprawidłową mediacją gniazd sieciowych.
Ubuntu Linux 6.8, 7.17, and 7.0 contain AppArmor SAUCE patches that can, under certain circumstances, use an uninitialized variable in notification handling code. The bug can be triggered by an unprivileged local user and can result in the incorrect caching of AppArmor notification responses.