CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacters to the cgi-bin/mainfunction.cgi URI. This issue has been fixed in Vigor3900/2960/300B v1.5.1.
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header, which may lead to improper processing of HTTP requests.
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with incorrect syntax or as an "invalid fold". This can lead to incorrect parsing of HTTP requests.
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration. The issue exists because of an incorrect return value upon failure of input validation.
Vulnerability in Oracle Coherence (component: Caching, CacheStore, Invocation) allows an unauthenticated attacker with network access via T3 to compromise the product. Affected versions are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0. CVSS 3.0 Base Score 9.8.
Vulnerability in Oracle WebLogic Server (component: WLS Core Components) allows an unauthenticated attacker with network access via IIOP to compromise the server. Affected versions are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0. CVSS 3.0 Base Score 9.8.
A remote code execution vulnerability exists in Microsoft .NET Framework due to improper input validation, aka '.NET Framework Remote Code Execution Injection Vulnerability'.
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking. This may allow an attacker to abuse polymorphic deserialization to perform dangerous operations.
Pivotal Spring Framework through 5.3.16 may allow remote code execution (RCE) when deserializing untrusted Java data. The issue may or may not occur depending on the library's implementation in a product, and authentication may be required. The vendor states that untrusted data is not an intended use case.
The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that use the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.
The SocketServer class in Log4j 1.2 is vulnerable to deserialization of untrusted data, which can lead to remote execution of arbitrary code. This issue affects Log4j versions from 1.2 up to 1.2.17.
IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as 'admin', and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094.
The vulnerability in class.upload.php (versions up to 1.0.3 and 2.x up to 2.0.4), used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, similar to CVE-2019-19576.
Seria PLC Omron CS i CJ posiada podatność na nieograniczony dostęp do zewnętrznego mechanizmu blokady. Umożliwia to potencjalnym atakującym dostęp do systemu bez odpowiednich uprawnień.
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryption keys are known due to the presence of CVE-2017-11317 or CVE-2017-11357, or other means. Exploitation can result in remote code execution. (As of 2020.1.114, a default setting prevents the exploit. In 2019.3.1023, but not earlier versions, a non-default setting can prevent exploitation.)
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.
W libsixel w wersji 1.8.2 odkryto problem związany z przepełnieniem bufora na stercie w funkcji load_pnm w pliku frompnm.c, spowodowanym przepełnieniem całkowitym.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS