CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.05)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In JetBrains TeamCity versions before 2023.05.1, stored XSS was possible while viewing the build log.
In JetBrains TeamCity before 2023.05.1, build chain parameters of the 'password' type could be written to the agent log.
In JetBrains TeamCity before version 2023.05.1, it was possible to perform a stored XSS attack while running custom builds.
In JetBrains TeamCity before 2023.05.1 parameters of the 'password' type could be shown in the UI in certain composite build configurations.
In JetBrains TeamCity versions before 2023.05.1, stored XSS was possible when using a custom theme.
Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang.
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL.
A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message of type XFRM_MSG_GETSA or XFRM_MSG_GETPOLICY with the DUMP flag set, potentially leading to denial of service or another unspecified impact.
In the iwnpi server, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
In hci_server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
In FM service, there is a possible missing params check, which could lead to local denial of service with System execution privileges needed.
In the Bluetooth service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In the Bluetooth service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In the telephony service, there is a missing permission check, which could lead to local information disclosure with no additional execution privileges needed.
In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In the libimpl-ril library, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
In the libimpl-ril library, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
In the fastDial service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.
In the fastDial service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.