CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In the Linux kernel, the af_alg crypto subsystem now caps the AEAD associated data length to 0x80000000 to prevent arithmetic overflows when checking the TX buffer size.
In the Linux kernel netfilter subsystem, a reference leak of an expectation object was found in nft_ct_expect_obj_eval(). The function allocates an expectation but never releases the local reference before returning.
A logical error was found in the Linux kernel's DRM subsystem within the change handle logic. Incorrect replacement of the IDR pointer with a new object caused a warning and potential resource leak during file close.
In the Linux kernel DRM TTM subsystem, a bug causes an infinite LRU walk when swapout fails. After ttm_tt_swapout() failure, restoring the resource's LRU position leads to the same resource being found again, resulting in an infinite loop.
In the Linux kernel, a vulnerability was found in the USB MIDI 2.0 parser that does not properly validate descriptor lengths when scanning endpoint extra data. This could allow out-of-bounds reads by a malicious USB device.
In the Linux kernel, the ALSA USB-audio driver has a vulnerability where the MIDI endpoint descriptor scan is not properly bounded. The snd_usbmidi_get_ms_info() function fails to check if the endpoint descriptor size exceeds the remaining bytes in the endpoint-extra scan, potentially leading to out-of-bounds reads.
A kernel BUG_ON crash in __ceph_build_xattrs_blob() was discovered in the Linux kernel's Ceph filesystem. The issue is a race condition introduced by commit d93231a6bc8a, which moved blob size calculation before __build_xattrs(), allowing handle_cap_grant() to modify the blob concurrently.
In the Linux kernel, a vulnerability in the TTM (Translation Table Manager) driver causes an infinite loop during LRU list traversal in the ttm_bo_shrink() function when backup fails. The fix moves the bulk_move deletion to occur only after successful backup completion.
In the Linux kernel, the i2c-dev driver's I2C_TIMEOUT ioctl improperly validates the timeout argument, allowing integer overflow when multiplied by 10. This results in a negative timeout value, corrupting the SMBus state machine and causing a local denial of service.
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the frappe.ui.Tree component.
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the Number Card component.
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to unsafe evaluation of user-controlled data in the Number Card component.
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the Notifications > Events panel.
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the MultiSelectDialog component.
A Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of untrusted input in the Form Dashboard headline renderer.
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the File View breadcrumb renderer.
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the Desk desktop icon renderer.
A Reflected Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the dashboard-view component.
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the frappe.get_avatar function.
A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev. An authenticated attacker with write access to Auto Repeat can persist HTML/JavaScript in reference_document, leading to script execution when users open the affected Auto Repeat form.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS