CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In DriveLock Operations Center versions 25.1.2 before 25.1.5, a Cross Site Scripting (XSS) issue allows for session takeover over a network.
In DriveLock versions 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5, local unprivileged users can manipulate privileged processes to gain more privileges on Windows computers.
In Tenda AC10V4.0 router version V16.03.10.20, a buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload (field `serviceName`) to /goform/AdvSetMacMtuWan.
AVideo versions prior to 20.1 with the ImageGallery plugin enabled is vulnerable to unauthenticated file upload and deletion. Plugin endpoints responsible for managing gallery images fail to enforce authentication checks and do not validate ownership, allowing unauthenticated attackers to upload or delete images associated with any image-based video.
ChurchCRM before version 5.21.0 contains a pre-authentication remote code execution vulnerability in the setup wizard. An unauthenticated attacker can inject arbitrary PHP code during the installation process, leading to complete server compromise. The issue arises from directly concatenating user input from the setup form into a PHP configuration template without validation.
Pagekit CMS version 1.0.18 contains an Insecure Direct Object Reference (IDOR) vulnerability that allows attackers to escalate privileges.
Pagekit CMS version 1.0.18 contains an authenticated arbitrary file upload vulnerability in the /storage/poc.php component, allowing attackers to execute arbitrary code by uploading a crafted PHP file.
A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. The issue is due to insufficient validation of HTTP requests by the Spam Quarantine feature.
Atakujący może obejść kontrole autoryzacji i zmusić dostawcę Step CA ACME lub SCEP do tworzenia certyfikatów bez ukończenia określonych kontroli autoryzacji protokołu.
Netaxis API Orchestrator (APIO) before version 0.19.3 is vulnerable to Server Side Template Injection (SSTI).
Apache Airflow Providers Edge3 before version 2.0.0 contains a remote code execution (RCE) vulnerability in the webserver context when used with Airflow 2. The vulnerability only affects environments where Edge3 provider is configured in Airflow 2, and allows a Dag author to execute code, which they normally should not be able to do.
Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The Live Update client has already reached End-of-Support (EOS) in October 2021, and no currently supported devices are affected.
An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code execution via Server Side Template Injection.
Meltytech Shotcut version 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and height parameters. Setting these values to extremely large numbers causes excessive memory allocation during image processing, triggering a buffer overflow in the mlt_image_fill_white function.
Platforma Open edX to system zarządzania nauczaniem. Przed wprowadzeniem poprawki, użytkownicy z rolą CourseLimitedStaffRole mogli uzyskać dostęp do edytowania kursów w studio, jeśli przyznano im tę rolę na poziomie organizacji, a nie kursu.
Ampere AmpereOne AC03 devices before 3.5.9.3, AC04 before 4.4.5.2, and M before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM MMCommunicate service that could result in an out-of-bounds write within the UEFI-MM Secure Partition context.
A vulnerability in AmpereOne processors allows an out-of-bounds write in the PCIe driver's S-EL0 address space via a malformed SMC call to UEFI-MM. Affects AmpereOne AC03 before 3.5.9.3, AC04 before 4.4.5.2, and M before 5.4.5.1.
Apache Commons Text before 1.10.0 included interpolation features that could be abused when applications passed untrusted input into the text-substitution API. Some interpolators could trigger actions like executing commands or accessing external resources, potentially leading to remote code execution. This has been fully addressed in FileMaker Server 22.0.4.
NVIDIA Isaac Lab zawiera podatność na deserializację. Udane wykorzystanie tej podatności może prowadzić do wykonania dowolnego kodu.
A Path Traversal vulnerability in Allsky WebUI version v2024.12.06_06 allows an unauthenticated remote attacker to achieve arbitrary command execution. By sending a crafted HTTP request to the /html/execute.php endpoint with a malicious payload in the id parameter, an attacker can execute arbitrary commands on the underlying OS, leading to full RCE.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS