CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A memory corruption vulnerability exists in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash.
Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability. The flaw requires authentication but allows arbitrary code execution on the server.
The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notifications when the merchant secret is unset, which is the default state. This allows unauthenticated attackers to forge a payment confirmation and mark any order as paid without payment.
Permission control vulnerability in the Bluetooth module. Successful exploitation of this vulnerability may affect availability.
Permission control vulnerability in the autofill service module. Successful exploitation of this vulnerability may affect service confidentiality.
XunRuiCMS (dayrui) through version 4.7.4 has a flaw in the str_replace function in /var/www/html/zzmob/index.php within the Mobile Site Directory component. Manipulation of the dirname argument results in code injection, and the attack can be launched remotely.
A Denial of Service (DoS) vulnerability was found in the window module. Successful exploitation may affect service availability.
An out-of-bounds read (OOB read) vulnerability was found in the peripheral module. Successful exploitation may affect service confidentiality.
A use-after-free (UAF) vulnerability was found in the location service module. Successful exploitation may affect service availability.
A race condition vulnerability was found in the location service module. Successful exploitation may affect service availability.
A permission control vulnerability was found in the WLAN module. Successful exploitation may affect service confidentiality.
A Denial of Service (DoS) vulnerability was found in the file parsing module. Successful exploitation may affect service availability.
A buffer overflow vulnerability exists in the file preview module. Successful exploitation of this vulnerability may affect availability.
A permission control vulnerability exists in the Optimizer module. Successful exploitation of this vulnerability may affect service confidentiality.
A permission control vulnerability was found in the event notification management module. Successful exploitation may affect service confidentiality.
A null pointer dereference vulnerability exists in the ArkWeb module. Successful exploitation of this vulnerability may affect availability.
A DoS vulnerability exists in the DSoftBus module. Successful exploitation of this vulnerability may affect availability.
A DoS vulnerability exists in the DSoftBus module. Successful exploitation of this vulnerability may affect availability.
A permission control vulnerability exists in the graphics module. Successful exploitation of this vulnerability may affect confidentiality.
A permission control vulnerability exists in the background task management module. Successful exploitation of this vulnerability may affect service integrity.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS