CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Dell PowerProtect Data Domain contains a stack-based buffer overflow vulnerability. A high-privileged attacker with remote access could exploit it, leading to denial of service.
Dell PowerProtect Data Domain contains a relative path traversal vulnerability in the certificate. A high-privileged attacker with remote access could exploit it, leading to denial of service.
EdoWEB contains an authorization bypass through a user-controlled key vulnerability, allowing access to functionality not properly constrained by ACLs. This affects versions before 780-g7.
In affected versions of Octopus Server, a user with permission to upload a malicious nuget package can deploy a script step so the script executes outside of the parent directory.
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
Use-after-free vulnerability in the Graphics: Text component of Firefox and Thunderbird. The issue was fixed in Firefox 159 and Thunderbird 159.
Use-after-free vulnerability in the Graphics: WebRender component enabling a sandbox escape in Firefox and Thunderbird. The issue was fixed in Firefox 159 and Thunderbird 159.
Use-after-free vulnerability in the Disability Access APIs component enabling a sandbox escape in Firefox and Thunderbird. The issue was fixed in Firefox 159 and Thunderbird 159.
Use-after-free vulnerability in the XPCOM component enabling a sandbox escape in Firefox and Thunderbird. The issue was fixed in Firefox 159 and Thunderbird 159.
Use-after-free vulnerability in the Layout component of Firefox and Thunderbird. The issue was fixed in Firefox 159 and Thunderbird 159.
Race condition and use-after-free vulnerability in the DOM: File component of Firefox and Thunderbird. The issue was fixed in Firefox 159 and Thunderbird 159.
A spoofing issue exists in the Downloads component of Firefox for Android. This vulnerability was fixed in Firefox 159.
Use-after-free vulnerability in the SVG component of Firefox and Thunderbird. The issue was fixed in Firefox 159 and Thunderbird 159.
Use-after-free vulnerability in the DOM: Core & HTML component of Firefox and Thunderbird. The issue was fixed in Firefox 159 and Thunderbird 159.
Use-after-free vulnerability in the DOM: Core & HTML component of Firefox and Thunderbird. The issue was fixed in Firefox 159 and Thunderbird 159.
Use-after-free vulnerability in the JavaScript Engine: JIT component of Firefox and Thunderbird. The issue was fixed in Firefox 159 and Thunderbird 159.
Use-after-free vulnerability in the Layout: Images, Video, and HTML Frames component of Firefox and Thunderbird. It may lead to undefined behavior or potential code execution. The vulnerability was fixed in Firefox 159 and Thunderbird 159.
Use-after-free vulnerability in the DOM: Animation component of Firefox and Thunderbird. It may lead to undefined behavior or potential code execution. The vulnerability was fixed in Firefox 159 and Thunderbird 159.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS