CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping" feature is in use, which could make SQL Injection attacks possible in certain contexts.
W podatności CVE-2026-40447 występuje przepełnienie lub owinięcie liczb całkowitych w Samsung Open Source Escargot, co prowadzi do nieokreślonego zachowania. Problem ten dotyczy wersji Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
Incorrect default permissions in Galaxy Wearable prior to version 2.2.68.26 allow local attackers to access sensitive information.
Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock.
Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.
Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows a physical attacker to bypass App Pinning.
Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows an adjacent attacker to access sensitive information.
Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard.
A vulnerability in code-projects Simple ChatBox 1.0 affects the SimpleChatbox_PHP function in the chatbox.sql file (Endpoint component). Manipulation leads to file and directory information exposure. The attack can be performed remotely, and the exploit has been publicly disclosed.
A vulnerability was found in code-projects Simple ChatBox up to 1.0 in an unknown function of /chatbox/insert.php (Endpoint component). Manipulation of the 'msg' argument leads to cross-site scripting. The attack can be performed remotely, and the exploit has been publicly disclosed and may be used.
W podatności CVE-2026-40446 występuje problem z dostępem do zasobów przy użyciu niekompatybilnego typu ('confusion type') w Samsung Open Source Escargot, co umożliwia manipulację wskaźnikami. Problem ten dotyczy wersji Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
Bluetooth ACPI Drivers provided by Dynabook Inc. contain a stack-based buffer overflow vulnerability. An attacker may execute arbitrary code by modifying certain registry values.
Boundary-unlimited vulnerability in the application read module. Successful exploitation may affect availability.
An out-of-bounds write vulnerability in the file system allows writing beyond the intended memory boundary. Successful exploitation may affect system availability.
Race condition vulnerability in the power consumption statistics module. Successful exploitation may affect availability.
A race condition vulnerability exists in the thermal management module. Successful exploitation may affect availability.
Use-after-free (UAF) vulnerability in the kernel module. Successful exploitation will affect availability and confidentiality.
A use-after-free vulnerability in the communication module allows access to freed memory. Successful exploitation may affect system availability.
Use-after-free (UAF) vulnerability in the communication module. Successful exploitation may affect availability.
Out-of-bounds write vulnerability in the kernel module. Successful exploitation will affect availability and confidentiality.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS