CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In the Linux kernel, in the tls module, there is a vulnerability due to a race between tx work scheduling and socket close. The submitting thread (recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete(). The fix reorders scheduling the work before calling complete().
In the Linux kernel, a TLS module issue was fixed regarding the handling of crypto requests that may be backlogged. When the CRYPTO_TFM_REQ_MAY_BACKLOG flag is set, crypto_aead functions can return -EBUSY instead of -EINPROGRESS, causing the async callback to be invoked twice. The fix converts -EBUSY to -EINPROGRESS to avoid modifying error handling paths.
In the Linux kernel, there is a race condition in the TLS implementation between async notify and socket close. The submitting thread may exit as soon as the async crypto handler calls complete(), risking access to already freed data.
Use-after-free vulnerability in the Linux kernel's TLS implementation with partial reads and async decrypt. tls_decrypt_sg does not take a reference on pages from clear_skb, so put_page() in tls_decrypt_done releases them, leading to use-after-free in process_rx_list.
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in compound request. smb2_get_msg() in smb2_get_ksmbd_tcon() and smb2_check_user_session() will always return the first request smb2 header in a compound request. if SMB2_TREE_CONNECT_HE is the first command in compound request, will return 0, i.e. The tree id check is skipped. This patch use ksmbd_req_buf_next() to get current command in compound.
In the Linux kernel, the ksmbd module has an out-of-bounds access in init_smb2_rsp_hdr(). If a client sends an SMB2 negotiate request and then an SMB1 negotiate request, the function is called for the SMB1 request, leading to an issue. The fix ignores SMB1 packets after need_neg is set to false.
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob(). If authblob->SessionKey.Length is bigger than session key size(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes. cifs_arc4_crypt copy to session key array from SessionKey from client.
W podatności CVE-2024-22245 występują luki w zakresie arbitralnego przekazywania uwierzytelnienia oraz przejmowania sesji w przestarzałym wtyczce VMware Enhanced Authentication Plug-in (EAP). Mogą one umożliwić złośliwemu aktorowi oszukanie użytkownika domeny, który ma zainstalowaną wtyczkę EAP w przeglądarce, do żądania i przekazywania biletów usługowych dla dowolnych nazw głównych usług Active Directory (SPN).
Niektóre drukarki HP LaserJet Pro, HP Enterprise LaserJet oraz HP LaserJet Managed mogą być podatne na zdalne wykonanie kodu z powodu przepełnienia bufora podczas renderowania czcionek osadzonych w pliku PDF.
Wtyczka MasterStudy LMS dla WordPressa jest podatna na atak typu SQL Injection z wykorzystaniem parametru 'user' w trasie REST /lms/stm-lms/order/items we wszystkich wersjach do 3.2.5 włącznie. Problem wynika z niewystarczającego zabezpieczenia parametru dostarczonego przez użytkownika oraz braku odpowiedniego przygotowania istniejącego zapytania SQL.
Wtyczka Piraeus Bank WooCommerce Payment Gateway dla WordPressa jest podatna na czasowe ślepe wstrzykiwanie SQL poprzez parametr 'MerchantReference' we wszystkich wersjach do 1.6.5.1 włącznie. Problem wynika z niewystarczającego zabezpieczenia dostarczonego przez użytkownika oraz braku odpowiedniego przygotowania istniejącego zapytania SQL.
Schemat eID w niemieckiej karcie tożsamości narodowej do 15 lutego 2024 roku umożliwia obejście uwierzytelniania poprzez fałszowanie. Atakujący typu man-in-the-middle może przyjąć tożsamość ofiary, uzyskując dostęp do zasobów rządowych, medycznych i finansowych oraz wyciągając dane osobowe z karty.
The POSTAHSİL Online Payment System has an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This issue affects versions of the system before 14.02.2024.
CVE-2023-5155 vulnerability affects the SoliPay mobile app, which prior to version 5.0.8 is susceptible to SQL Injection attacks. This allows attackers to inject malicious SQL commands into the application.
A use of externally-controlled format string in Fortinet FortiOS, FortiProxy, FortiPAM, and FortiSwitchManager allows an attacker to execute unauthorized code or commands via specially crafted packets.
The UNI-PA University Information System has an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This issue affects versions of the system before 12.12.2023.
Remote code execution vulnerability in Microsoft Outlook. Allows an attacker to execute code remotely on the victim's machine.
Microsoft Exchange Server Elevation of Privilege Vulnerability. Technical details are not provided in the description.
A vulnerability in Microsoft Azure Kubernetes Service Confidential Container allows elevation of privilege. An attacker could exploit it to gain higher privileges in the confidential container environment.
Elevation of privilege vulnerability in the Microsoft Entra Jira Single-Sign-On plugin. It allows an attacker to elevate privileges in the Jira application.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS