CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A CWE-23 Relative Path Traversal vulnerability in the Console WebUI of Waterfall WF-500 TX and RX Hosts version 7.9.1.0 R2502171040 allows remote unauthenticated attackers to read arbitrary files from the device.
An OS command injection vulnerability (CWE-78) was identified in the Administration WebUI of Waterfall WF-500 TX Host version 7.9.1.0 R2502171040. It allows remote authenticated attackers to execute arbitrary operating system commands on the device.
An OS command injection vulnerability (CWE-78) was identified in the Administration WebUI of Waterfall WF-500 TX Host version 7.9.1.0 R2502171040. It allows remote authenticated attackers to execute arbitrary operating system commands on the device.
An OS command injection vulnerability (CWE-78) was identified in the Administration WebUI of Waterfall WF-500 TX Host version 7.9.1.0 R2502171040. It allows remote authenticated attackers to execute arbitrary operating system commands on the device.
In OpenShift Router, when a Route has insecureEdgeTerminationPolicy set to Allow, the HTTP frontend does not remove X-SSL-Client-* headers from incoming requests. An unauthenticated attacker can send crafted HTTP requests with fake headers, bypassing mutual TLS authentication and impersonating client certificate identities.
A flaw in OpenShift Router allows a user with EndpointSlice write access to create a Service backed by an FQDN EndpointSlice that resolves to a cloud metadata endpoint. The router then proxies requests to this endpoint, leading to disclosure of instance credentials and other sensitive metadata. This bypasses previous IP address validation security measures.
The Media Library Assistant plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to and including 3.35. This is due to missing nonce verification on the bulk action handlers in the settings tab handlers, allowing unauthenticated attackers to trick an administrator into performing bulk delete, edit, or purge operations on plugin settings and attachment metadata via a forged request.
The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands.
A vulnerability in MediaTek devices allows an unauthenticated attacker on the LAN to execute arbitrary UCC commands via a debug service exposed on TCP port 9000. The /sbin/mtk_dut binary is exposed without any authentication.
A CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, running in the default Standard security mode on Linux and Windows, allows an unauthenticated remote attacker to steal an authenticated user's session token and perform Administrator Account Takeover via a malicious cross-origin web page.
An SQL injection vulnerability in Mautic's API contact filtering mechanism. An authenticated API user can bypass input filtering and inject arbitrary SQL commands due to insufficient recursive sanitization of nested query parameters.
The Link Whisper Free plugin for WordPress up to version 0.9.0 is vulnerable to stored XSS via the user_id parameter due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary scripts that execute whenever a user visits an affected page.
The WooCommerce Infinite Scroll and Ajax Pagination plugin for WordPress is vulnerable to PHP Object Injection in versions up to and including 1.8 via the 'settings' parameter in the 'import_settings' function. This is due to deserialization of untrusted data without capability checks. Authenticated attackers with Subscriber-level access or higher can inject a PHP Object, and if a POP chain exists via another plugin or theme, it could allow file deletion, data theft, or code execution.
A vulnerability in Armoury Crate software stems from incorrect permission assignment for a critical resource. A local user can bypass the driver's validation mechanism, gaining unauthorized read and write access to physical memory.
An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary code via a crafted RPC call that bypasses the validation mechanism.
Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
An integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
A Use-After-Free vulnerability in the Input component in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as High severity in Chromium.
A Use-After-Free vulnerability in WebXR in Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
A Use-After-Free vulnerability in the Core component of Google Chrome on Windows prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as High severity in Chromium security severity.