CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service.
USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service.
Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service.
Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution.
TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service.
RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service.
The IEEE 802.11 protocol dissector in Wireshark versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 can crash, leading to denial of service.
The Catapult DCT2000 protocol dissector in Wireshark versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 can crash, leading to denial of service.
The IEEE C37.118 Synchrophasor protocol dissector in Wireshark versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 has a memory leak, leading to denial of service.
The Microsoft Network Monitor file parser in Wireshark versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 has a large loop, leading to denial of service.
The CSN.1 protocol dissector in Wireshark versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 can crash, leading to denial of service.
The MBIM protocol dissector in Wireshark versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 can crash, leading to denial of service.
The ZigBee ZCL protocol dissector in Wireshark versions 4.6.0 to 4.6.8 can crash, leading to denial of service.
The PEAK CAN TRC file parser in Wireshark versions 4.6.0 to 4.6.8 can crash, leading to denial of service.
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service.
The Sharkd utility in Wireshark versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 can crash, leading to denial of service.
Crash in the SPDY protocol dissector in versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service.
The TTL file parser in Wireshark versions 4.6.0 to 4.6.8 has an infinite loop, leading to denial of service.
GitLab CE/EE contains a missing authorization check on linked work items within visible epics. An authenticated user could read private child issue contents, including titles and descriptions, from projects they had no access to.
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS