CVE Watch
Every published CVE, mapped to engagement reality.
Crawled from cve.org every day. Each entry annotated with the QSearch coverage signal — how many of our agents, skills, and playbooks address the technique. Subscribe via RSS for SIEM pipe, or get the weekly digest by email.
Kiteworks is a private data network (PDN)
Kiteworks is a private data network (PDN). Prior to version 9.3.0, a stored XSS vulnerability in Kiteworks Secure Data Forms could allow an authenticated attacker to execute arbitrary JavaScript code in other users' sessions. Upgrade Kiteworks to version 9.3.0 or later to receive a patch.
accellionCWE-79Kiteworks is a private data network (PDN)
Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade Kiteworks to version 9.3.0 or later to receive a patch.
accellionCWE-639Kiteworks is a private data network (PDN)
Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Data Forms could allow an external attacker to trick a user into executing arbitrary JavaScript code. Upgrade Kiteworks to version 9.3.0 or later to receive a patch.
accellionCWE-79Memory Corruption when processing fastboot commands to set display mode
Memory Corruption when processing fastboot commands to set display mode.
qualcommCWE-1286Memory corruption while processing fastboot commands with improperly formatted input
Memory corruption while processing fastboot commands with improperly formatted input.
qualcommCWE-1286Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow
Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.
qualcommCWE-306Memory corruption while processing fastboot commands with invalid input
Memory corruption while processing fastboot commands with invalid input.
qualcommCWE-1286Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
qualcommCWE-306Memory corruption while processing fastboot OEM commands
Memory corruption while processing fastboot OEM commands.
qualcommCWE-1286Memory Corruption when processing display command line information due to improper initialization of a variable
Memory Corruption when processing display command line information due to improper initialization of a variable.
qualcommCWE-121A vulnerability was identified in itsourcecode Fees Management System 1.0
A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown part of the file /manage_course.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
CWE-74CWE-89A vulnerability was determined in itsourcecode Fees Management System 1.0
A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
CWE-74CWE-89Memory Corruption when sending random number generator command with insufficient output buffer size
Memory Corruption when sending random number generator command with insufficient output buffer size.
qualcommCWE-787Memory Corruption when output buffer size is smaller than input buffer size during data copying operation
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
qualcommCWE-121Memory corruption in windows drivers while sending incorrect trusted application request
Memory corruption in windows drivers while sending incorrect trusted application request
qualcommCWE-121Memory corruption in diagnostic services due to absence of input validation
Memory corruption in diagnostic services due to absence of input validation
qualcommCWE-787Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.
qualcommCWE-367Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
qualcommCWE-126Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.
qualcommCWE-476Memory Corruption when processing device identifier strings that exceed the expected maximum length
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
qualcommCWE-787
5.4 MEDIUM
8.2 HIGHWeekly digest
Get the curated CVE digest every Monday
One email a week, sent Monday morning CET. The CVEs published or modified in the last seven days, severity-ordered, with the QSearch coverage signal. Unsubscribe with one click — included in every send.
Pipe the CVE feed into your stack.
CVE Watch publishes RSS, Atom, and JSON feeds — wire them into your SIEM, Slack, Discord, or your RSS reader of choice. Or get the curated weekly digest by email.