CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.20)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In ImageMagick before versions 7.1.2-26 and 6.9.13-51, a heap-based buffer over-write vulnerability exists when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.
Hono before version 4.11.10 contains a timing attack vulnerability in the basicAuth and bearerAuth middlewares due to non-constant-time string comparison in the timingSafeEqual function. Attackers can exploit early termination of string equality checks to infer valid credentials through precise timing measurements.
A memory leak vulnerability in ImageMagick through version 7.1.2-18 exists in the ASHLAR coder when an action fails. Attackers can trigger failed actions to exhaust memory resources and cause denial of service.
In jadx-gui prior to version 1.5.6, there is an HTML injection vulnerability in the Summary tab. This occurs because SummaryNode.java appends arches and perArchCount values from .so file paths in an APK into an HTML panel without proper escaping.
HCL BigFix Platform is affected by a user enumeration vulnerability. An attacker, through careful system control and response time monitoring, can determine which users are registered with the BigFix service.
ColdFusion is affected by an Insufficient Session Expiration vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information. Exploit depends on conditions beyond the attacker's control and does not require user interaction.
In Devolutions Server 2026.1.22.0 and 2026.2.11.0, the Recovery Kit response file generation feature inserts sensitive information into a file. This allows an attacker with access to the generated file to obtain the Azure Key Vault client secret in cleartext, even when the option to exclude sensitive data is selected.
An improper authorization vulnerability in the secure messages deletion endpoint of Devolutions Server 2026.2.11 and 2026.1.22 allows an authenticated user to delete another user's messages via a direct object reference to the message identifier.
An exposure of sensitive information to an unauthorized actor in the Windows Kernel allows an authorized attacker to disclose information locally.
A vulnerability in Windows Win32K allows an authorized attacker to disclose sensitive information to an unauthorized actor locally.
A vulnerability in Easy!Appointments prior to version 1.6.0 allows any logged-in backend user (admin, provider, secretary) to hijack another provider's Google sync. The attacker can replace the OAuth token, causing customer data (name, email) to be sent to their own Google calendar.
SSRF vulnerability in Easy!Appointments allows authenticated backend users to access loopback, RFC1918, and link-local hosts on the deployment network. Lack of scheme and host validation in the `caldav_url` parameter enables attackers to send REPORT requests to arbitrary addresses, with partial response disclosure in JSON messages.
A vulnerability in Easy!Appointments before version 1.6.0 allows an authenticated provider to inject appointments into another provider's schedule. The `appointments/store` and `appointments/update` endpoints do not verify that the provider ID belongs to the current session, breaking provider isolation. Additionally, the `store` path has a write-before-crash bug that persists unauthorized data in the database.
A stored XSS vulnerability in Easy!Appointments allows an administrator to inject malicious HTML/JavaScript into the booking disabled message field. This content is displayed unsanitized on the public booking page, affecting every unauthenticated visitor.
An HTTP Response Splitting vulnerability in FortiOS and FortiProxy allows an attacker to inject arbitrary HTTP headers via crafted captive portal authentication requests. Affected versions include FortiOS 7.6.0-7.6.4, 7.4.x, 7.2.x and FortiProxy 7.6.0-7.6.4, 7.4.x, 7.2.x.
An HTTP Response Splitting vulnerability in FortiOS and FortiProxy allows an attacker with a valid web filter override token to inject arbitrary HTTP headers by tricking a user into clicking a crafted link.
A vulnerability was found in open62541 up to version 1.5.5, affecting the function responseReadNamespacesArray in src/client/ua_client_connect.c. Manipulation of the Server_NamespaceArray argument causes a null pointer dereference, potentially leading to application crashes. The attack can be executed remotely but requires high complexity and is difficult to exploit.
A classic buffer overflow vulnerability was found in the SUSE Virtual Machine Driver Pack due to copying data without checking input size. An attacker with registry modification capabilities could affect driver integrity. No feasible exploitation method is currently known.
A security vulnerability has been detected in code-projects Online Job Portal 1.0. An unknown function in the file /Admin/DetailJob.php leads to cross-site scripting (XSS). The attack can be carried out remotely, and the exploit has been publicly disclosed.