CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation. Product: Android, Versions: Android kernel.
In Connx version 6.2.0.1269 (20210623), the application may issue a cookie without the Secure flag set. This means the cookie can be transmitted over unencrypted HTTP connections.
In Connx version 6.2.0.1269 (20210623), a cookie can be issued by the application without the HttpOnly flag set. The absence of this flag allows potential client-side script access to the cookie.
A cross-site scripting (XSS) vulnerability exists in Mini CMS V1.11. The vulnerability is located on the post-edit.php page during article upload.
curl's HSTS support can be bypassed when the host name in the URL uses a trailing dot while the HSTS cache entry does not (or vice versa). This allows the insecure clear-text HTTP step to occur despite HSTS being enabled.
libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if the host name is provided with a trailing dot. The built-in rudimentary check fails in this case when Public Suffix List support is not available. As a result, arbitrary sites can set cookies that would then be sent to a different and unrelated site or domain.
A vulnerability in curl 7.83.0 related to insufficient protection of credentials. When following HTTP redirects to the same host but a different port, authentication or cookie header data may leak.
A vulnerability in curl from version 4.9 up to and including 7.82.0 related to insufficient protection of credentials. When following HTTP(S) redirects with authentication, credentials may leak to other services on different protocols or ports.
ACEweb Online Portal 3.5.065 was found to have a cross-site scripting (XSS) vulnerability via the txtNmName1 parameter in person.awp. An attacker can inject malicious JavaScript code that executes in the victim's browser.
An out-of-bounds read flaw was found in the Linux kernel's TeleTYpe subsystem. It occurs when a user triggers a race condition using ioctls TIOCSPTLCK, TIOCGPTPEER, TIOCSTI, and TCXONC, causing memory leakage in the flush_to_ldisc function. This allows a local user to crash the system or read unauthorized random data from memory.
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.
A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running within the NOSi container. This vulnerability exists because the health check RPM opens TCP port 6379 by default upon activation. An attacker could exploit this vulnerability by connecting to the Redis instance on the open port. A successful exploit could allow the attacker to write to the Redis in-memory database, write arbitrary files to the container filesystem, and retrieve information about the Redis database. Given the configuration of the sandboxed container that the Redis instance runs in, a remote attacker would be unable to execute remote code or abuse the integrity of the Cisco IOS XR Software host system.
The default configuration of the TreeGrid component uses Object::toString as a key in client-side and server communication in Vaadin, potentially disclosing values that should not be available on the client side. Affected versions include Vaadin 14.8.5-14.8.9, 22.0.6-22.0.14, 23.0.0.beta2-23.0.8, and 23.1.0.alpha1-23.1.0.alpha4.
Multiple cross-site scripting (XSS) vulnerabilities were found in the /obcs/user/profile.php component of Online Birth Certificate System v1.2. Attackers can inject malicious JavaScript or HTML via the fname or lname parameters, leading to arbitrary script execution in the victim's browser.
Diary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name parameter in search-result.php. This allows an attacker to inject malicious scripts into the page.
A vulnerability in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows a local attacker to block S0/S2 protected Z-Wave networks by sending crafted S0 NonceGet packets that exploit included but absent NodeIDs.
In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.
In spring framework versions prior to 5.3.20+, 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.
Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier. A remote unauthenticated attacker can execute arbitrary code via the fileToUpload parameter in the uploadFile task.
Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK version 10.11 and earlier. A remote unauthenticated attacker can execute arbitrary code via the searchString parameter in the wikiScrapper task.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS