CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.02)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The ifconfig command in Linux kernel 2.2 and later does not report when the network interface is in promiscuous mode if it was enabled using PACKET_MR_PROMISC. This could allow attackers to sniff network traffic undetected.
The Node.js ImageResponse implementation from next/og is affected by an upstream vulnerability, leading to remote code execution. Affected applications pass attacker-controlled values into SVG content, attributes, or styles during image generation.
In the Linux kernel, a null pointer dereference occurs due to a race between smmu driver probe and client driver probe, when of_dma_configure() for client is called after the iommu_device_re.
A vulnerability exists in the nodemailer package (npm) affecting versions from 2.7.2 to 10.0.1. Details are not fully described in the provided snippet, but vulnerable versions are confirmed.
W jądrze systemu Linux rozwiązano podatność związaną z obsługą remapowania w kontekście obciążenia 3D. Użytkownicy zgłaszali ostrzeżenia związane z funkcją vm_bind_ioctl_ops_unwind.
Przepełnienie bufora oparte na stercie w funkcji __hash_open w pliku lib/dbm/src/hash.c w Mozilla Network Security Services (NSS) może pozwolić atakującym, w zależności od kontekstu, na osiągnięcie nieokreślonego wpływu przy użyciu spreparowanego pliku cert8.db.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS