CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.11)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
W jądrze Linuxa do wersji 5.9.9 odkryto problem w pliku spk_ttyio.c, który może prowadzić do lokalnego ataku typu denial of service przez lokalnych napastników korzystających z sterownika speakup. Problem ten występuje z powodu nieprawidłowego zwolnienia pamięci, gdy dyscyplina linii jest używana więcej niż raz.
In MISP version 2.4.134, there is an XSS vulnerability in the template element index view due to mishandling of the id parameter.
Firma Western Digital zidentyfikowała podatność bezpieczeństwa w protokole Replay Protected Memory Block (RPMB), który jest określony w wielu standardach interfejsów urządzeń pamięci masowej, w tym we wszystkich wersjach eMMC, UFS i NVMe. Istnieje kilka scenariuszy, w których stan RPMB może być zmieniony przez atakującego bez wiedzy zaufanego komponentu korzystającego z funkcji RPMB.
A vulnerability in Microweber v1.1.18 causes the user session not to expire after logout. This allows an attacker to reuse a valid session for unauthorized access.
A cross-site scripting (XSS) vulnerability in QNAP QTS systems could allow remote attackers to inject malicious code. Fixed in specific QTS versions.
Multiple stored XSS vulnerabilities exist in the YOURLS Admin Panel, versions 1.5-1.7.10. An authenticated user can inject malicious code by modifying a PHP plugin and uploading it.
A vulnerability in the TLS handler of Cisco ASA and FTD Software for Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The issue is due to improper implementation of countermeasures against the Bleichenbacher attack for RSA-based cipher suites. An attacker could send crafted TLS messages, enabling a chosen-ciphertext attack and potential decryption of previously captured TLS sessions.
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these by persuading a user to click a crafted link.
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these by persuading a user to click a crafted link.
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these by persuading a user to click a crafted link.
Multiple vulnerabilities in the web services interface of Cisco ASA and FTD Software allow an unauthenticated, remote attacker to conduct XSS attacks against users of the interface. The issues are due to insufficient validation of user-supplied input. A successful exploit could allow arbitrary script execution in the interface context or access to sensitive browser-based information.
A vulnerability in the web services interface of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to bypass a configured access rule and access parts of the WebVPN portal that are supposed to be blocked. The issue is due to insufficient URL validation when portal access rules are configured. An attacker could exploit this by accessing certain URLs on the device.
A vulnerability in the TCP Intercept functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured Access Control Policies (including Geolocation) and Service Policies. This is because TCP Intercept is invoked when the embryonic connection limit is reached, causing the detection engine to process packets incorrectly. An attacker could send a crafted traffic stream to match an incorrect policy, potentially forwarding traffic that should be dropped or vice versa.
A vulnerability in the FTP inspection engine of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to bypass FTP inspection. The issue is due to ineffective flow tracking of FTP traffic. An attacker could exploit this by sending crafted FTP traffic through the device, allowing bypass of inspection and successful FTP connections.
A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to inject arbitrary HTTP headers in responses. The issue is due to improper input sanitization. An attacker could exploit this by persuading a user to click a crafted link, enabling CRLF injection and redirecting users to arbitrary websites.
A vulnerability in the SIP inspection process of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a DoS condition. The issue is due to a watchdog timeout and crash during cleanup of threads associated with a SIP connection being deleted. An attacker could exploit this by sending a high rate of crafted SIP traffic.
Multiple vulnerabilities in the secure boot process of Cisco ASA and FTD Software for Firepower 1000 and 2100 Series Appliances could allow an authenticated, local attacker to bypass the secure boot mechanism. The vulnerabilities are due to insufficient protections of the secure boot process. An attacker could inject code into specific files referenced during boot, allowing them to break the chain of trust and maintain persistence across reboots.
A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access hidden commands. This is due to undocumented configuration commands. Successful exploitation could allow configuration changes to sections that should not be exposed to CLI access.
A vulnerability in the Snort detection engine of multiple Cisco products could allow an unauthenticated, remote attacker to bypass a configured File Policy for HTTP. The issue is due to incorrect detection of modified HTTP packets used in chunked responses. An attacker could send crafted HTTP packets through an affected device, potentially bypassing the policy and delivering a malicious payload.
In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed.