CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.24)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An issue was discovered in versions 6.0 before 6.0.5 and 5.2 before 5.2.14 regarding response headers that do not vary on cookies if a session is not modified, while `SESSION_SAVE_EVERY_REQUEST` is set to `True`. A remote attacker can steal a user's session after that user visits a cached public page.
The development server contains a path traversal vulnerability on Windows when serving files from `servedir`. Due to the use of `path.Clean()` (which only normalizes forward-slash `/` separators) instead of a Windows-aware path normalization function, it is possible to craft malicious requests.
An issue was discovered in versions 6.0 before 6.0.5 and 5.2 before 5.2.14 in `django.middleware.cache.UpdateCacheMiddleware`, which erroneously caches requests where the `Vary` header contained an asterisk (`'*'`). This can lead to private data being stored and served.
Vulnerability in Tar 1.15.1 fails to properly warn users when extracting files with setuid or setgid bits set. This could allow local or remote attackers to escalate privileges.
In libarchive before version 3.6.2, the software does not check for an error after calling the calloc function, which can return a NULL pointer, leading to a NULL pointer dereference.
The ifconfig command in Linux kernel 2.2 and later does not report when the network interface is in promiscuous mode if it was enabled using PACKET_MR_PROMISC. This could allow attackers to sniff network traffic undetected.
The GD Graphics Library (LibGD) through version 2.3.2 has an out-of-bounds read due to the lack of certain gdGetBuf and gdPutBuf return value checks.
A flaw was found in Poppler's Pdfinfo utility. Using the -dests parameter with a malformed input file can cause the utility to crash.
In the Linux kernel's btrfs filesystem, a use-after-free of the block device file occurs in __btrfs_free_extra_devids(). The issue may arise when mounting two btrfs images with the same fsid.
A timing side-channel in ECDSA signature computations could potentially allow recovering the private key by an attacker. Measuring timing could lead to private key recovery.
Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes.
A vulnerability in GNU Nano allows privilege escalation through an insecure temporary file. If Nano is killed while editing, it saves an emergency file with the permissions of the running user.
A heap-buffer-overflow vulnerability was found in LibTIFF in the extractImageSection() function at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801, which can lead to denial of service via a crafted TIFF file.
In xmllint from libxml2 before versions 2.11.8 and 2.12.7, formatting error messages with --htmlout can cause a buffer over-read in xmlHTMLPrintFileContext.
In Vim before 9.1.0764, a use-after-free occurs when closing a buffer and a BufWinLeave auto command reopens the same buffer in a new split window.
In the GNU C Library (glibc) through version 2.29, there is uncontrolled recursion in the check_dst_limits_calc_pos_1 function in posix/regexec.c, which may lead to performance issues or application crashes.
In CPython's 'http.cookies' module, parsing cookies with backslash-escaped characters uses a quadratic algorithm, causing excessive CPU usage.
Wykryto lukę w narzędziach chfn i chsh z pakietu util-linux, gdy są skompilowane z obsługą Readline. Biblioteka Readline wykorzystuje zmienną środowiskową 'INPUTRC' do uzyskania ścieżki do pliku konfiguracyjnego biblioteki, a w przypadku błędu parsowania pliku, wyświetla komunikat zawierający dane z tego pliku.
W narzędziu `readelf` pakietu binutils znaleziono lukę, która pozwala lokalnemu atakującemu na wykorzystanie dwóch podatności typu Denial of Service (DoS) poprzez dostarczenie specjalnie przygotowanego pliku w formacie ELF. Jedna z tych podatności, związana z wyczerpaniem zasobów, może prowadzić do błędu braku pamięci.
GNU Libc jest podatny na obejście zabezpieczeń, co pozwala atakującemu na zgadywanie adresów sterty wątków utworzonych przez pthread. Problem dotyczy komponentu glibc.