CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Podatność CVE-2025-1496 w BG-TEK Coslat Hotspot umożliwia przeprowadzenie ataku typu brute force na hasła oraz nadużycie uwierzytelnienia. Problem dotyczy wersji przed 6.26.0.R.20250227.
A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.go#L112. Because of this unsafe filepath construction, an authenticated user can manipulate the path to retrieve any JSON files on the console's pod by using sequences of ../ and valid directory paths.
W podatności CVE-2024-12136 w urządzeniu Elfatek Elektronics ANKA JPD-00028, przed wersją V.01.01, występuje brak krytycznego kroku w procesie uwierzytelniania, co umożliwia ominięcie uwierzytelnienia.
A flaw in the 389-ds-base LDAP Server occurs when the return value of a function is not checked during a Modify DN operation, leading to a NULL pointer dereference. A privileged user performing a MODDN operation after a failed operation can cause a Denial of Service (DoS) or system crash.
In containerd prior to versions 1.6.38, 1.7.27, and 2.0.4, containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0).
In Keylime 7.12.0, strict type checking prevents the registrar from reading database entries created by older versions (e.g., 7.11.0). Older versions store agent registration data as bytes, while the updated registrar expects str. This causes an exception when processing agent registration requests, making the agent fail.
A vulnerability in the SoundCloud iOS application version 7.65.2 allows a local attacker to escalate privileges and obtain sensitive information through the session handling component.
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when NO_PROXY is set to "*.example.com", a request to "[::1%25.example.com]:80" will incorrectly match and not be proxied.
An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site scripting (XSS) vulnerability exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a malicious ICS entry, its embedded JavaScript executes via an ontoggle event inside a <details> tag. This allows an attacker to run arbitrary JavaScript within the victim's session, potentially leading to unauthorized actions such as setting e-mail filters to redirect messages to an attacker-controlled address. As a result, an attacker can perform unauthorized actions on the victim's account, including e-mail redirection and data exfiltration.
An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrary code which can compromise an affected device. This issue is not exploitable from the Junos CLI. This issue affects Junos OS: All versions before 21.2R3-S9, 21.4 versions before 21.4R3-S10, 22.2 versions before 22.2R3-S6, 22.4 versions before 22.4R3-S6, 23.2 versions before 23.2R2-S3, 23.4 versions before 23.4R2-S4, 24.2 versions before 24.2R1-S2, 24.2R2.
A bug in the Linux kernel's gtp_net_exit_batch_rtnl() function can cause double invocation of gtp_dellink() for the same GTP device during network namespace cleanup. This leads to list corruption and a kernel panic when CONFIG_DEBUG_LIST is enabled. The issue is fixed by removing the for_each_netdev() loop and delegating device destruction to default_device_exit_batch().
The Linux kernel's drop_monitor module has an incorrect initialization order. If the module is loaded dynamically, a netlink NET_DM_CMD_START message can be sent before the spinlock is initialized, causing a 'spinlock bad magic' error and potential system hang.
In the Linux kernel, a vulnerability was found in migrate_device_finalize() where a folio to be freed is incorrectly added to the LRU list. This triggers memcg warnings and may cause unnecessary system overhead.
In the Linux kernel, a deadlock occurs in the USB gadget f_midi driver due to a re-entrant call to f_midi_transmit acquiring a lock twice. The issue is fixed by using queue_work() to schedule the inner f_midi_transmit() call.
In the Linux kernel, a vulnerability in BPF was found where the freeze_mutex was held during the entire mmap operation, potentially leading to deadlocks. The fix reduces the lock hold time to only the necessary write permission checks.
W jądrze Linuxa zidentyfikowano podatność związaną z brakiem sprawdzenia nullowości wskaźnika cstream w funkcji sof_ipc_msg_data(). Niewłaściwe założenie, że cstream nie jest NULL, gdy wskaźnik stream jest NULL, może prowadzić do dereferencji wskaźnika NULL.
A vulnerability in the Linux kernel's acct(2) system call can cause a NULL pointer dereference when writing to a file that triggers an internal lookup (e.g., /sys/power/resume) after the process has exited and called exit_fs().
W jądrze Linuxa zidentyfikowano podatność, która została naprawiona. W wyniku błędu w funkcji `sst_nor_write_data()` tylko jeden bajt danych jest zapisywany, niezależnie od liczby bajtów przekazanych do tej funkcji, co prowadzi do awarii jądra podczas operacji zapisu.
A stored cross-site scripting (XSS) vulnerability in OpenMRS v2.4.3 Build 0ff0ed allows attackers to inject malicious JavaScript or HTML into the personName.middleName parameter at /openmrs/admin/patients/shortPatientForm.form, leading to script execution in the victim's browser.
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS