CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
InCopy versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. User interaction is required (opening a malicious file).
Stack-based buffer overflow vulnerability in InDesign Desktop versions 21.3, 20.5.3 and earlier. Could lead to arbitrary code execution in the context of the current user after opening a malicious file.
A heap-based buffer overflow vulnerability in InDesign Desktop allows remote code execution in the context of the current user. User interaction is required to open a malicious file.
InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. User interaction is required (opening a malicious file).
A heap-based buffer overflow vulnerability in InDesign Desktop allows remote code execution in the context of the current user. User interaction is required to open a malicious file.
A heap-based buffer overflow vulnerability in InDesign Desktop allows remote code execution in the context of the current user. User interaction is required to open a malicious file.
A stack-based buffer overflow vulnerability in InDesign Desktop allows remote code execution in the context of the current user. User interaction is required to open a malicious file.
InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Use After Free vulnerability. This could allow arbitrary code execution in the context of the current user after opening a malicious file.
A stack-based buffer overflow vulnerability in InDesign Desktop allows remote code execution in the context of the current user. User interaction is required to open a malicious file.
Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a reflected XSS vulnerability. An attacker can inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account. Requires user interaction.
NETGEAR gaming routers are vulnerable to code execution by an attacker who can intercept and tamper with traffic between the router and the internet.
Listed NETGEAR router models have a vulnerability due to insufficient authentication and input validation. Users connected to the local network can execute commands affecting confidentiality or change device configuration.
An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.
A vulnerability in OpenSSL during CMS password-based decryption (RFC 3211) allows an attacker to trigger a heap out-of-bounds read. The attacker can select a stream-mode cipher as the KEK, bypassing guards and causing a read beyond the allocated buffer.
A signed integer overflow in ASN1_mbstring_ncopy() when sizing the destination buffer for Unicode output can lead to a heap buffer overflow. This may allow attacker-controlled code execution or a crash.
Hermes WebUI before version 0.51.311 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by placing malicious executable Git configuration in a workspace repository's .git/config file. Attackers can exploit Git subprocess invocations in api/workspace_git.py through vectors such as core.fsmonitor, protocol.ext.allow, credential.helper, core.askPass, core.gitProxy, or inherited environment variables including GIT_SSH_COMMAND.
Hermes WebUI before version 0.51.296 has a workspace boundary bypass vulnerability. An authenticated attacker can set a remote terminal working directory to a system path like /etc, causing early return before blocked-root checks, allowing read access to system files.
Stack overflow vulnerability in FreeSWITCH before version 1.11.1. A single unauthenticated WebSocket frame with a deeply nested JSON document crashes the FreeSWITCH process, terminating all calls and sessions on the host.
Vulnerability in FreeSWITCH before version 1.11.1. The mod_verto's WebSocket frame loop intercepts a #-prefixed speed-test protocol (#SPU / #SPB / #SPE) before any authentication check. The declared payload size in #SPU was parsed with atoi() and only rejected non-positive values, so an unauthenticated peer could request up to INT_MAX bytes. The server then wrote roughly size * 10 bytes back during the download phase, on the order of 20 GB per request, yielding strong outbound bandwidth amplification from a short request.
FreeSWITCH prior to version 1.11.0 has a flaw in STUN packet handling where a declared attribute length shorter than the structure causes out-of-bounds memory access on the media buffer.