CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.07)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Microsoft SharePoint Server allows attackers to remotely trigger an error, leading to a denial of service (DoS). Exploiting this flaw may result in service unavailability for users.
Discourse is an open source discussion platform, where prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches, an attacker could use the new topics dismissal endpoint to reveal the number of recently created topics in categories they didn't have access to.
A Reflected XSS vulnerability was discovered in HotelDruid version 3.0.5, allowing an attacker to inject malicious code into webpage parameters, potentially tricking users in their browsers or exfiltrating data.
SSPanel-Uim version 2023.3 does not restrict access to the /link/ interface, which can lead to a leak of user information.
In Zoom Meeting SDK before version 5.13.0, there is a buffer copy issue without checking the size of input, which may allow an authenticated user to potentially enable a denial of service via local access. This issue may result in the Zoom Meeting SDK crashing and needing to be restarted.
Improper input validation in Zoom for Windows, Zoom Rooms, and Zoom VDI before version 5.14.0 may allow an authenticated user to potentially enable privilege escalation via network access.
Keystone is a content management system for Node.JS that has an open redirect vulnerability in the `@keystone-6/auth` package in versions 7.0.0 and prior. The redirect leading `/` filter can be bypassed, allowing users to be redirected to unexpected domains.
GL.iNET GL-AR750S-Ext firmware v3.215 uses an insecure protocol in its communications, allowing attackers to eavesdrop via a man-in-the-middle attack.
In GL.iNET GL-AR750S-Ext firmware v3.215, the admin authentication token is included in a GET request when downloading the OpenVPN Server config file. The token remains in browser history or access logs, potentially allowing attackers to bypass authentication via session replay.
A race condition within a thread exists in the GitHub repository it-novum/openitcockpit prior to version 4.6.5, which may lead to unexpected application behavior.
A vulnerability has been identified in CP-8031 MASTER MODULE and CP-8050 MASTER MODULE, which are versions earlier than CPCI85 V05. The affected devices contain an exposed UART console login interface.
A vulnerability has been identified in CP-8031 MASTER MODULE and CP-8050 MASTER MODULE, which contain the hash of the root password in a hard-coded form. Versions below CPCI85 V05 are vulnerable to an attack that could allow UART console login to the device.
An infinite loop due to an unreachable exit condition exists in Fortinet FortiOS, FortiProxy, and FortiWeb. Versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, and other listed versions are vulnerable to an attacker performing a denial of service via specially crafted HTTP requests.
SAP CRM ABAP in versions 700, 701, 702, 712, 713, 714 does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on the confidentiality and integrity of the application.
SAP NetWeaver Enterprise Portal version 7.50 does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting (XSS) vulnerability. Successful exploitation allows an attacker to view or modify information, causing limited impact on confidentiality and integrity of the application.
SAP NetWeaver (Design Time Repository) version 7.50 returns an unfavorable content type for some versioned files, which could allow an authorized attacker to create a file with malicious content and send a link to a victim in an email or instant message. Under certain circumstances, this could lead to a Cross-Site Scripting vulnerability.
A use after free issue was discovered in the Linux Kernel in the outbound_phy_packet_callback function in the driver/firewire module. A local attacker with special privileges may cause a use after free problem when queue_event() fails.
A flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel, occurring when font->width and font->height values greater than 32 are provided. The lack of checks leads to a shift-out-of-bounds, resulting in undefined behavior and possible denial of service.
A stored cross-site scripting (XSS) vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL Keyword List text field.
AMI BMC contains a vulnerability in the IPMI handler, allowing an attacker to upload and download arbitrary files under certain circumstances. This may lead to denial of service, privilege escalation, information disclosure, or data tampering.