CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Version 2.0.2 of the image-size library contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attackers can craft an ICNS buffer containing valid magic bytes and a zero-valued entry length field, triggering an infinite loop in the ICNS parser.
Version 2.0.2 of the image-size library contains a denial of service vulnerability that allows remote attackers to block the Node.js event loop. Attackers can trigger an infinite loop in the JXL or HEIF image parsers by supplying a specially crafted image with a zero-valued size field.
Slate Digital Connect version 1.37.0 for macOS installs a privileged helper tool that exposes the XPC service to race conditions related to process identifiers. A local attacker can exploit PID reuse, leading to unauthorized access to privileged helper functionality.
Slate Digital Connect version 1.37.0 for macOS installs a privileged helper tool that exposes the XPC service. The helper only validates connecting XPC clients based on the subject.OU value of the client's signing certificate, allowing a local attacker to gain access to privileged functionality.
The Newsletters plugin for WordPress up to version 4.13 is vulnerable to time-based SQL injection via the 'wpmlsubscriber_id' parameter. Insufficient escaping and lack of proper SQL query preparation allow unauthenticated attackers to append additional SQL queries, potentially extracting sensitive information from the database.
Vulnerability in Concrete CMS below version 9.5.2 allows an unauthenticated attacker to perform PHP object injection via unserialize() calls in Permission, Cache, and Search components. The attack requires a malicious payload to be placed in the database.
Vulnerability in the Anti-Spam by CleanTalk WordPress plugin before version 6.79: improper content sanitization in a custom shortcode used in email encoding. Unauthenticated attackers can inject arbitrary web scripts into approved comments.
The Xstore WordPress theme before 9.7.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
Some Dahua products have a vulnerability allowing an unauthenticated remote attacker to send a crafted packet, triggering an exception causing unexpected system reboot, leading to denial of service.
A vulnerability in the ldns library (versions 1.2.0 to 1.9.0) used as a UDP resolver lacks verification of the response source address and port, as well as the query ID and question. This enables off-path DNS cache poisoning attacks.
Local privilege escalation vulnerability in the ansible.posix authorized_key module. The keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW, allowing an unprivileged user to replace symbolic links and take over system files.
A buffer overflow vulnerability in File Station 5. A remote attacker with a user account can exploit this vulnerability to modify memory or crash processes. The vulnerability has been fixed in File Station 5 version 5.5.6.5208 and later.
A missing authorization vulnerability in QuMagie allows remote attackers to access unauthorized data or perform unauthorized actions. The issue is fixed in version 2.9.0.
An incorrect authorization vulnerability in File Station 6 allows a remote attacker who gains a user account to bypass intended access restrictions. The issue is fixed in File Station 5 version 5.5.6.5243 and later.
A command injection vulnerability has been reported in several QNAP operating system versions. A remote attacker with an administrator account can exploit it to execute arbitrary commands. The issue has been fixed in newer QTS and QuTS hero versions.
NULL pointer dereference vulnerability in QNAP operating systems. A remote attacker with an administrator account can exploit this to cause a denial-of-service (DoS) attack.
A command injection vulnerability has been reported in several QNAP operating system versions. A remote attacker with an administrator account can exploit it to execute arbitrary commands. The issue has been fixed in newer QTS and QuTS hero versions.
A NULL pointer dereference vulnerability has been found in QNAP operating systems (QTS and QuTS hero). A remote attacker can exploit this vulnerability to launch a denial-of-service (DoS) attack.
An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. The issue has been fixed in versions: QTS 5.2.9.3410 build 20260214 and later, QuTS hero h5.2.9.3410 build 20260214 and later, QuTS hero h5.3.4.3500 build 20260520 and later, QuTS hero h6.0.0.3397 build 20260206 and later.
A command injection vulnerability in QNAP operating systems. A remote attacker with an administrator account can execute arbitrary commands.