CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Siemens products allows an unauthenticated remote attacker to perform man-in-the-middle attacks due to improper validation of client certificates when connecting to the Analytics Service endpoint.
W OpenStack Keystone w wersjach od 14 do 26 przed 26.1.1, 27.0.0, 28.0.0 i 29.0.0 odkryto problem, który pozwala na tworzenie poświadczeń EC2 przez ograniczone poświadczenia aplikacji. Użytkownik z rolą tylko do odczytu może uzyskać pełne uprawnienia S3 rodzica, omijając ograniczenia ról nałożone na poświadczenia aplikacji.
The code-projects Online Shoe Store 1.0 is vulnerable to XSS in /admin/admin_product.php via the product_name argument. The attack is remote and the exploit is public.
The code-projects Online Shoe Store 1.0 is vulnerable to XSS in /admin/admin_football.php via the product_name argument. The attack is remote and the exploit is public.
The code-projects Online Shoe Store 1.0 is vulnerable to XSS in /admin/admin_running.php via the product_name argument. The attack is remote and the exploit is public.
In GitLab CE/EE from version 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3, an authenticated user with custom role permissions can demote or remove higher-privileged group members due to improper authorization checks.
A cross-site scripting vulnerability was found in SourceCodester Sales and Inventory System 1.0 in the /delete.php file of the GET Parameter Handler component. Manipulation of the ID argument allows remote XSS attacks. The exploit has been published.
A cross-site scripting vulnerability has been detected in code-projects Easy Blog Site 1.0. The issue is in the /posts/update.php file where the postTitle argument is not properly sanitized. The attack can be performed remotely and the exploit has been publicly disclosed.
In LORIS (versions 20.0.0 to 27.0.3 and 28.0.1), a vulnerability in the publication module allows an attacker to forge the baseURL in a POST request, potentially sending an email to an external domain under the attacker's control that appears to come from LORIS. The vulnerability is fixed in versions 27.0.3 and 28.0.1.
LiquidJS before version 10.25.3 has a vulnerability in the replace filter that incorrectly accounts for memory usage when the memoryLimit option is enabled. An attacker controlling template content can bypass DoS protection and cause out-of-memory conditions with approximately 2500x amplification.
Dell PowerProtect Agent Service prior to version 20.1 has incorrect permission assignment for critical resources, allowing a low-privileged local attacker to access information.
The WordPress plugin Image Photo Gallery Final Tiles Grid (versions up to 3.6.11) contains an authorization bypass vulnerability through a user-controlled key, allowing exploitation of incorrectly configured access control security levels.
In Electron prior to versions 39.8.5, 40.8.5, 41.1.0, and 42.0.0-alpha.5, a vulnerability was found in the clipboard.readImage() function. If the clipboard contains image data that fails to decode, passing a null bitmap to image construction causes a controlled abort and process crash. Only apps calling clipboard.readImage() are affected.
Plane is an open-source project management tool. Prior to 1.3.0, a vulnerability was identified in Plane's authentication flow where a user's email address is included as a query parameter in the URL during error handling (e.g., when an invalid magic code is submitted). Transmitting personally identifiable information (PII) via GET request query strings is classified as an insecure design practice. The affected code path is located in the authentication utility module (packages/utils/src/auth.ts).
OrangeHRM Open Source from version 5.0 to 5.8 encrypts sensitive fields with AES in ECB mode, preserving plaintext patterns in ciphertext and enabling pattern disclosure against stored data. Fixed in version 5.8.1.
OrangeHRM is a comprehensive human resource management (HRM) system. From 5.0 to 5.8, OrangeHRM Open Source accepts changes to self-appraisal submissions for administrator users after those submissions have been marked completed, breaking integrity of finalized appraisal records.
Vulnerability in Erlang/OTP DNS module (inet_res, inet_db) allows DNS cache poisoning. It uses a sequential, process-global 16-bit transaction ID without source port randomization, making it easy for an attacker to predict the ID and inject forged responses.
WWBN AVideo versions 26.0 and prior have a vulnerability in the BlockonomicsYPT plugin's check.php endpoint. The endpoint returns payment order data for any Bitcoin address without requiring authentication, allowing an attacker to query payment records for any address used on the platform.
In Meesho Online Shopping App for Android up to version 27.3, the component com.meesho.supply in the file /api/endpoint uses a risky cryptographic algorithm. The attack can be performed remotely but is difficult to exploit.
A flaw was found in Keycloak where a remote attacker can exploit a CORS header injection vulnerability in the UMA token endpoint. The `azp` claim from a client-supplied JWT is used to set the `Access-Control-Allow-Origin` header before signature validation, allowing reflection of attacker-controlled values. This only affects clients misconfigured with `webOrigins: ["*"]`.