CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.04)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2023-33898
Medium

In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.

CVE-2023-33897
Medium

In the libimpl-ril library, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

CVE-2023-33896
Medium

In the libimpl-ril library, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

CVE-2023-33895
Medium

In the fastDial service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.

CVE-2023-33894
Medium

In the fastDial service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.

CVE-2023-33893
Medium

In the fastDial service, there is a missing permission check, which could lead to local information disclosure with no additional execution privileges needed.

CVE-2023-33892
Medium

In the fastDial service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.

CVE-2023-33891
Medium

In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.

CVE-2023-33890
Medium

In the telephony service, there is a missing permission check, which could lead to local information disclosure with no additional execution privileges needed.

CVE-2023-33889
Medium

In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.

CVE-2023-33888
Medium

In the telephony service, there is a missing permission check, which could lead to local information disclosure with no additional execution privileges needed.

CVE-2023-33887
Medium

In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.

CVE-2023-33886
Medium

In telephony service, there is a missing permission check, which could lead to local information disclosure with no additional execution privileges needed.

CVE-2023-33885
Medium

In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.

CVE-2023-33884
Medium

In the telephony service, there is a missing permission check, which could lead to local information disclosure with no additional execution privileges needed.

CVE-2023-33883
Medium

In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.

CVE-2023-33882
Medium

In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.

CVE-2023-33881
Medium

In the telephony service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.

CVE-2023-37200
Medium

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server.

CVE-2023-37199
MediumEPSS 50%

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS