CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
W Remote Desktop Services występuje podatność na zdalne wykonanie kodu, która pozwala nieautoryzowanemu atakującemu na połączenie się z systemem docelowym za pomocą RDP i wysłanie specjalnie przygotowanych żądań. Wykorzystanie tej podatności umożliwia atakującemu wykonanie dowolnego kodu na systemie docelowym bez potrzeby interakcji użytkownika.
W Remote Desktop Services występuje podatność na zdalne wykonanie kodu, która pozwala nieautoryzowanemu atakującemu na połączenie się z systemem docelowym za pomocą RDP i wysłanie specjalnie przygotowanych żądań. Wykorzystanie tej podatności nie wymaga interakcji użytkownika i pozwala na wykonanie dowolnego kodu na systemie docelowym.
W systemie Windows występuje podatność na uszkodzenie pamięci w kliencie DHCP, która pozwala atakującemu na wysłanie specjalnie przygotowanych odpowiedzi DHCP do klienta. Skuteczne wykorzystanie tej podatności umożliwia uruchomienie dowolnego kodu na maszynie klienckiej.
Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection.
There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and Data Center from 4.4.0 before 7.6.14, from 7.7.0 before 7.13.5, from 8.0.0 before 8.0.3, from 8.1.0 before 8.1.2, and from 8.2.0 before 8.2.3 are affected by this vulnerability.
A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command injection attack and execute arbitrary commands with root privileges. The issue is due to insufficient input validation by the web portal framework. An attacker could exploit this by providing malicious input during web portal authentication.
A vulnerability in the Virtual Network Computing (VNC) console implementation of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to access the VNC console session of an administrative user. The issue is due to an insufficient authentication mechanism used to establish a VNC session. An attacker could exploit this by intercepting an administrator VNC session request prior to login.
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.
An issue was discovered in Das U-Boot through 2019.07 related to a stack-based buffer overflow in the nfs_readlink_reply helper function.
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.
An issue was discovered in Das U-Boot through 2019.07 related to unbounded memory copying when parsing a UDP packet. This issue is due to an integer underflow in net_process_received_packet during an udp_packet_handler call.
An issue was discovered in Das U-Boot through 2019.07 related to unbounded memcpy occurring in nfs_read_reply when calling store_block in the NFSv3 case.
An issue was discovered in Das U-Boot through version 2019.07 related to reading out-of-bounds data in the nfs_read_reply function.
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.
An issue was discovered in Das U-Boot through 2019.07 related to unbounded memcpy with unvalidated length in the nfs_readlink_reply function. The issue occurs in the 'else' block after calculating the new path length.
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.
An issue was discovered in Das U-Boot through 2019.07 related to unbounded memcpy with an unvalidated length in the nfs_readlink_reply function. The issue occurs in the 'if' block after calculating the new path length.
An issue was discovered in Das U-Boot through 2019.07 related to unbounded memcpy when parsing a UDP packet. This issue arises from an integer underflow in net_process_received_packet during an nc_input_packet call.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS