CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, attackers can cause a denial of service (invalid free and application crash) or possibly have unspecified other impact because of an off-by-one error. Note that it is unclear whether there are realistic scenarios in which an untrusted party controls the -TT value, given that the entire purpose of -TT is execution of arbitrary commands.
An issue was discovered in app/Controller/UsersController.php in MISP 2.4.92 that allows an adversary to bypass brute-force protection. This can be done by using the PUT HTTP method instead of POST in the login part, as the protection only covered POST requests.
An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.
Wersje curl od 7.20.0 do 7.59.0 zawierają podatność CWE-126: Buffer Over-read, która może prowadzić do odmowy usługi. Atakujący może oszukać curl, aby odczytał dane poza końcem bufora w pamięci, używanego do przechowywania pobranych treści RTSP.
Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution.
The default settings for the CORS filter in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all origins. Users are expected to configure the CORS filter appropriately for their environment rather than relying on the default configuration, so most users are not expected to be impacted.
W MyBiz MyProcureNet w wersji 5.0.0 odkryto problem, który pozwala atakującemu na przesłanie złośliwego pliku na serwer WWW. Atakujący może przesłać skrypt, który umożliwia wydawanie poleceń systemu operacyjnego.
postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation.
An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user, it's simple to execute commands and retrieve their output.
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server.
Vulnerability in Spring Data Commons (versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions) due to improper neutralization of special elements in the property binder. An unauthenticated remote attacker can supply specially crafted request parameters against Spring Data REST backed HTTP resources or use Spring Data's projection-based request payload binding, leading to remote code execution.
Spring Framework versions 5.0 prior to 5.0.5 and 4.3 prior to 4.3.15 (and older unsupported versions) allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user can craft a message to the broker that can lead to remote code execution.
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.
A vulnerability in the Smart Install feature of Cisco IOS and IOS XE Software is caused by improper validation of packet data. An unauthenticated remote attacker can send a crafted Smart Install message to TCP port 4786, causing a buffer overflow that may lead to device reload, arbitrary code execution, or a watchdog crash.
A vulnerability in the QoS subsystem of Cisco IOS and IOS XE Software is due to incorrect bounds checking of values in packets destined for UDP port 18999. An unauthenticated remote attacker can send malicious packets, causing a buffer overflow that may lead to arbitrary code execution with elevated privileges or a device reload.
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. A remote attacker with access to the service can exploit this vulnerability to gain code execution on the system, and the overflow occurs before authentication, so an unauthenticated remote attacker can exploit it.
A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 is due to insecure deserialization of user-supplied content. An unauthenticated remote attacker can send a crafted serialized Java object and execute arbitrary commands on the device with root privileges.
An OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L, DIR-868L, DIR-865L, and DIR-860L routers in specific firmware versions allows remote attackers to execute arbitrary OS commands via the service parameter.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS