CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
AiKaan Cloud Controller wykorzystuje jednego hardcodowanego klucza prywatnego SSH oraz nazwę użytkownika `proxyuser` do zdalnego dostępu terminalowego do wszystkich zarządzanych urządzeń IoT/edge. W momencie, gdy administrator inicjuje 'Otwórz zdalny terminal' z pulpitu AiKaan, kontroler wysyła ten sam statyczny klucz prywatny do docelowego urządzenia, co stwarza ryzyko nieautoryzowanego dostępu.
A deserialization vulnerability exists in h2oai/h2o-3 versions <= 3.46.0.8 due to improper handling of JDBC connection parameters. Attackers can bypass regular expression checks using double URL encoding, allowing them to read arbitrary system files and execute arbitrary code.
Wersje Starch 0.14 i wcześniejsze generują identyfikatory sesji w sposób niebezpieczny. Domyślny generator identyfikatorów sesji zwraca skrót SHA-1, który jest podatny na przewidywanie.
MapServer prior to 8.4.1 is vulnerable to Boolean-based SQL injection in the PropertyName directive of the XML Filter Query. Expression checking is bypassed by introducing double quote characters in PropertyName, allowing manipulation of backend database queries. The vulnerability is fixed in 8.4.1.
Vasion Print mounts host configuration and secret material under /var/www/efs_storage into many Docker containers with overly-permissive permissions, exposing files like secrets.env, GPG-encrypted blobs, MySQL client keys, and session files. An attacker with access to any container can read or modify these artifacts.
Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (VA and SaaS deployments) contain dangerous PHP dead code in multiple Docker-hosted PHP instances. A script named /var/www/app/resetroot.php lacks authentication checks and, when executed, performs a SQL update that sets the database administrator username to 'root' and its password hash to the SHA-512 hash of 'password'. Separately, commented-out code in /var/www/app/lib/common/oses.php would unserialize session data—a pattern that can enable remote code execution. An attacker able to reach resetroot.php can reset the MySQL root password and obtain full database control; combined with deserialization issues this can lead to full remote code execution and system compromise.
Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application contain multiple Docker containers running primary application processes (e.g., PHP workers, Node.js servers, custom binaries) as the root user. This increases the blast radius of a container compromise and enables lateral movement and host compromise.
Vasion Print Virtual Appliance Host versions prior to 22.0.1002 and Application prior to 20.0.2614 contain multiple Docker containers with outdated, unsupported, or vulnerable third-party components such as Nginx 1.17.x, OpenSSL 1.1.1d, and EOL base images and Laravel/PHP libraries. This increases the attack surface and enables exploitation chains.
Vasion Print Virtual Appliance Host versions prior to 22.0.951 and Application prior to 20.0.2368 (VA and SaaS deployments) contain shared, hardcoded SSH host private keys (RSA, ECDSA, ED25519) in the appliance image. The same keys are present across installations, allowing an attacker to impersonate the appliance and perform man-in-the-middle attacks on administrative SSH sessions.
Vasion Print Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 (Windows client deployments) contain a remote code execution vulnerability during driver installation due to unquoted program paths. The PrinterInstallerClient launches programs using an unquoted path, allowing execution of a program at a short-path location such as C:\Program.exe.
Vasion Print Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 include Windows client components (PrinterInstallerClientInterface.exe, PrinterInstallerClient.exe, PrinterInstallerClientLauncher.exe) that lack modern compile-time and runtime exploit mitigations and rely on outdated runtimes. These binaries are 32-bit without DEP, ASLR, CFG, or stack protection, and use legacy Pascal/Delphi and Python 2; some run as SYSTEM and automatically download printer drivers.
Vasion Print Virtual Appliance Host versions prior to 22.0.893 and Application prior to 20.0.2140 (macOS/Linux client deployments) are built against OpenSSL 1.0.2h-fips, which has been end-of-life since 2019. Continued use of this outdated cryptographic library exposes deployments to known, unpatched vulnerabilities.
CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known.
In the lpfc SCSI driver (Linux kernel), a use-after-free window was found in the deferred receive path. The bug was due to incorrect order of freeing the RQ buffer and clearing the context pointer, which could lead to double-free or UAF.
Wtyczka Service Finder Bookings dla WordPressa jest podatna na eskalację uprawnień poprzez przejęcie konta we wszystkich wersjach do 6.0 włącznie. Problem wynika z niewłaściwej walidacji tożsamości użytkownika przed przejęciem biznesu przy użyciu akcji AJAX claim_business.
Motyw Goza - Nonprofit Charity dla WordPressa jest podatny na nieautoryzowane przesyłanie plików z powodu braku sprawdzenia uprawnień w funkcji 'beplus_import_pack_install_plugin' we wszystkich wersjach do 3.2.2 włącznie. Umożliwia to nieautoryzowanym atakującym przesyłanie plików zip zawierających webshale podszywające się pod wtyczki, co prowadzi do zdalnego wykonania kodu.
A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.
Wrażliwość polega na tym, że klucz używany do walidacji tokenów uwierzytelniających jest zakodowany w oprogramowaniu urządzenia w dotkniętych wersjach. Atakujący, który zdobędzie ten klucz, może obejść proces uwierzytelniania, uzyskując pełny dostęp do systemu.
Urządzenia Dover Fueling Solutions ProGauge MagLink LX4 mają domyślne dane logowania dla konta root, które nie mogą być zmienione za pomocą standardowych metod administracyjnych. Atakujący z dostępem do sieci urządzenia może uzyskać dostęp administracyjny do systemu.
In the Linux kernel, NFSD has a send buffer overflow vulnerability in NFSv2 READ. A client can send an excessively large RPC record, shrinking the reply buffer and preventing full payload construction, potentially leading to overflow.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS