CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In Crafter CMS Crafter Studio 3.0.1, a directory traversal vulnerability exists that allows unauthenticated attackers to overwrite operating system files, potentially leading to remote code execution (RCE).
MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php.
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.
Versions 1.0.0 through 1.0.5 of the 'deephas' library contain a prototype pollution vulnerability that allows an attacker to cause a denial of service and may lead to remote code execution.
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and is documented at https://airflow.apache.org/docs/1.10.11/security.html#api-authentication. Note this change fixes it for new installs but existing users need to change their config to default `[api]auth_backend = airflow.api.auth.backend.deny_all` as mentioned in the Updating Guide: https://github.com/apache/airflow/blob/1.10.11/UPDATING.md#experimental-api-will-deny-all-request-by-default
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
Heap buffer overflow in the UI of Google Chrome on Android prior to 86.0.4240.185. A remote attacker who had compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page.
Heap buffer overflow in FreeType in Google Chrome prior to 86.0.4240.111. A remote attacker could potentially exploit heap corruption via a crafted HTML page.
SSRF vulnerability in osTicket before version 1.14.3 allows an attacker to add a malicious file to the server or perform port scanning.
Vulnerability in the Oracle WebLogic Server Console (Oracle Fusion Middleware) affecting versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. An unauthenticated attacker with network access via HTTP can easily exploit it and take over the server.
If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109.
An SSRF vulnerability in the downloadimage interface of CRMEB 3.0 allows remote attackers to download arbitrary files from the server and execute arbitrary code remotely.
In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP. This may lead to arbitrary code execution if the content is crafted.
Vulnerability in the Oracle WebLogic Server Console (Oracle Fusion Middleware) affecting versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. An unauthenticated attacker with network access via HTTP can easily exploit it and take over the server.
Vulnerability in the Pluggable authentication module of Oracle Solaris affecting versions 10 and 11. An unauthenticated attacker with network access via multiple protocols can easily exploit it and take over the system; it is not exploitable on Solaris 11.1 and later or ZFSSA 8.7 and later.
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.
A vulnerability in PcVue prior to version 12.0.17 is caused by the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. It affects SonicOS Gen 6 versions 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0.
NETGEAR JGS516PE devices before 2.6.0.43 are affected by a lack of access control at the function level. This allows functions to be invoked that a user should not be authorized to use.
The manual/search.texi documentation in the GNU C Library (glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root. This may allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS