CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A flaw in the FlashArray Purity management interface allows an authenticated low-privileged user, under specific conditions, to access functionality beyond their assigned privileges.
Substance3D Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. User interaction is required (opening a malicious file).
Substance3D Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. User interaction is required (opening a malicious file).
Vulnerability in Dreamweaver Desktop (versions 21.7 and earlier) involving access to an uninitialized pointer, which could allow remote code execution in the context of the current user. Requires user interaction (opening a malicious file).
Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Access Control vulnerability. This could allow arbitrary code execution in the context of the current user after opening a malicious file. The scope is changed.
Dependency on a vulnerable third-party component vulnerability in Dreamweaver Desktop versions 21.7 and earlier. Could lead to arbitrary code execution in the context of the current user after opening a malicious file.
Substance3D Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. User interaction is required (opening a malicious file).
Substance3D Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. User interaction is required (opening a malicious file).
Heap-based buffer overflow vulnerability in the FTS5 extension of SQLite before version 3.53.2. An attacker can supply a crafted database, causing a crash or arbitrary code execution during FTS5 MATCH query processing.
Memory corruption vulnerabilities in the FTS5 extension of SQLite before version 3.53.2. An attacker can supply a crafted database, causing process crashes, memory exhaustion, or arbitrary code execution during FTS5 MATCH query processing.
Multiple Microsoft-signed UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the operating system loads. Specific UEFI DBX update is required to block these vulnerable boot loaders.
SEMCMS 5.0 is vulnerable to unauthorized access in SEMCMS_copy.php.
A buffer overflow vulnerability was discovered in the webAuthUserInfo parameter of the formAddWebAuthUser function in Tenda W20E router version 15.11.0.6. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the macAddr parameter of the formDelStaState function in Tenda W20E router version 15.11.0.6. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the picCropName parameter of the formCropAndSetWewifiPic function in Tenda W20E router version 15.11.0.6. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function in Tenda W20E firmware version 15.11.0.6. This flaw allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the bindMACAddr parameter of the fromSetDhcpRules function in Tenda W20E router version 15.11.0.6. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the wewifiWhiteUserInfo parameter of the formAddWewifiWhiteUser function in Tenda W20E router version 15.11.0.6. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function in Tenda W15E router version 15.11.0.10. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.
A buffer overflow vulnerability was discovered in the wewifiWhiteUserInfo parameter of the formAddWewifiWhiteUser function in Tenda W15E router version 15.11.0.10. Attackers can cause a Denial of Service (DoS) via a crafted HTTP request.