CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In openSeaChest v25.05.3, the --showSupportedFormats function has an out-of-bounds write. A malicious NVMe device with a bogus FLBAS byte can write 1 extra byte outside allocated memory.
In openSeaChest v25.05.3, the --showSCSIDefects function has out-of-bounds writes and reads. A malicious SCSI device with a very long defect list can write defect info out of bounds.
Vulnerability in elixir-tesla library (versions 0.8.0 before 1.18.3) allows multipart part header injection via unescaped Content-Disposition parameter values, potentially leading to header forgery and data manipulation.
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in elixir-tesla tesla allows HTTP header injection via Tesla.Multipart.add_content_type_param/2. Tesla.Multipart.add_content_type_param/2 appends caller-supplied strings to the multipart content_type_params list without validating for CR (\r) or LF (\n) characters. Tesla.Multipart.headers/1 then joins these params verbatim with "; " to construct the outgoing Content-Type header value. A param containing \r\n splits the header line, allowing arbitrary headers to be injected into the outbound HTTP request.
Vulnerability in Pterodactyl prior to version 1.12.3. A logic flaw in the Client API allows users to bypass database allocation limits due to a broken locking mechanism.
A third-party vulnerable and outdated components issue was detected in HCL iReflection web application.
Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in elixir-mint Mint allows HTTP Request Splitting and HTTP Request Smuggling. In lib/mint/http1/request.ex, the encode_request_line/2 function splices the caller-supplied method and target arguments directly into the HTTP/1 request line without any character validation. An application that forwards attacker-controlled input as the HTTP method or target to Mint.HTTP.request/5 is therefore exposed to request-line CRLF injection. Mint 1.7.0 introduced validate_request_target/2, which rejects CRLF and other control characters in the target by default, but the method field remains unvalidated.
OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Java TLS ioctl probe reads user-controlled ioctl pointers with bpf_probe_read instead of bpf_probe_read_user. An instrumented local process can therefore point OBI at kernel memory and cause that memory to be copied into telemetry.
In Klaw, a self-service Apache Kafka Topic Management tool, prior to version 2.10.4, inconsistent handling of username case sensitivity in registration and login mechanisms allows a targeted Denial of Service (DoS) and complete account lockout.
A cross-site scripting vulnerability was found in CordysCRM up to version 1.4.1 in the Save function of ModuleFormService.java. Manipulation of the Description argument allows remote XSS attacks. The exploit has been publicly disclosed.
A race condition vulnerability was discovered in Open5GS up to version 2.7.6 in the gmm_state_security_mode function of src/amf/gmm-sm.c in the NGAP Handover component. The attack is remote but requires high complexity.
Vulnerability in westboy CicadasCMS up to version 2431154dac8d0735e04f1fd2a3c3556668fc8dab. An unknown function in ScheduleJobController.java in the task scheduling module is vulnerable to XSS. The attack can be performed remotely.
Vulnerability in Orthanc DICOM Server up to version 1.12.11 in the DcmItem::read function of the DCMTK Parser component causes a stack-based buffer overflow via a local attack. Exploit has been published.
A cross-site scripting vulnerability was found in CordysCRM up to version 1.6.2 in the file RequestParamTrimConfig.java. Remote attack is possible. Patch available in version 1.7.0.
In Kiteworks prior to version 9.3.0, an IDOR vulnerability was found. An authenticated user can access metadata of other users' resources due to insufficient authorization checks.
In SGLang 0.5.10.post1, a reachable assertion vulnerability exists in the file python/sglang/srt/lora/lora_manager.py of the Inference HTTP Endpoint component via the lora_path argument. The attack is remote with high complexity, and an exploit has been disclosed.
A weakness has been identified in code-projects Online Hospital Management System 1.0 in the file viewdoctortimings.php. Manipulation of the delid argument causes improper control of resource identifiers. The attack can be initiated remotely and the exploit is publicly available.
In whisper.cpp up to version 1.8.2, a vulnerability in the whisper_model_load function in ggml/src/ggml.c leads to null pointer dereference. Local access is required, and the exploit is publicly available. The project has not responded.
Vulnerability in SourceCodester Customer Review App 1.0 in the add_review/save_review/get_all_reviews functions of review_app.py causes denial of service (DoS) via manipulation of name/comment arguments in a local attack. Exploit has been published.
In multiple functions of AppOpsService.java, there is a missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed.