CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack.
An illegal memory access was found in ncurses 6.0 in the fmt_entry function in progs/dump_entry.c, potentially leading to a remote denial of service attack.
An illegal memory access was found in ncurses 6.0 in the dump_uses() function in progs/dump_entry.c, potentially leading to a remote denial of service attack.
An illegal memory access was found in ncurses 6.0 in the postprocess_termcap() function in parse_entry.c, leading to a remote denial of service attack.
An illegal memory access was found in ncurses 6.0 in the _nc_read_entry_source() function in progs/tic.c, potentially leading to a remote denial of service attack.
An illegal memory access was found in ncurses 6.0 in the _nc_save_str function in alloc_entry.c, leading to a remote denial of service attack.
In libiberty (as distributed with GNU Binutils 2.29), the C++ symbol demangler routine in cplus-dem.c allows a remote attacker to cause a denial of service (excessive memory allocation and application crash) via a crafted file. This is demonstrated through a call from the BFD library (libbfd).
In MISP before version 2.4.79, there is a persistent XSS vulnerability via the comment field. It only affects users of the same instance because the comment field is not part of MISP synchronization.
The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44, and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin, permitting client and server side cache poisoning in some circumstances.
In Apache Tomcat, when a SecurityManager is configured, the system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible.
The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid user names. Note that the default configuration includes the LockOutRealm which makes exploitation of this vulnerability harder.
Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Web Client). Affected versions are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human interaction and may significantly impact additional products, resulting in unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.0 Base Score 6.8 (Confidentiality impacts).
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software allows an unauthenticated, adjacent attacker to cause autonomic nodes to reload, resulting in a denial of service (DoS). Known affected releases include Denali-16.2.1 and Denali-16.3.1.
W urządzeniach Schneider Electric Modicon PLCs Modicon M221, M241 i M251, w wersjach oprogramowania przed odpowiednio 1.5.0.0 oraz 4.0.5.11, odkryto problem z przewidywalnym zakresem wartości. Affected products generują niewystarczająco losowe numery początkowe sekwencji TCP, co może umożliwić atakującemu przewidywanie tych numerów na podstawie wcześniejszych wartości.
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to detect specific files on the user's computer when affected Microsoft scripting engines do not properly handle objects in memory.
An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property (disabled by default) can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data binding property mappings.
Vulnerability in PeopleSoft Enterprise CS Campus Community component (subcomponent: Frameworks) version 9.2. Allows a high privileged attacker with network access via HTTP to compromise the system, resulting in unauthorized creation, deletion, modification, or access to critical data.
A vulnerability in the detection engine handling SSL packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition because the Snort process unexpectedly restarts. This affects versions prior to the first fixed release when configured with an SSL Decrypt-Resign policy.
OpenStack Glance before Newton has an SSRF vulnerability in the 'copy_from' feature of the Image Service API v1. An attacker can create images with URLs like 'http://localhost:22' to perform masked internal port scans.
Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site (Information Disclosure). This vulnerability is different from CVE-2017-0008 and CVE-2017-0009.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS