CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (JBoss EAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for GET and POST methods, allowing remote attackers to send requests using other methods.
An unspecified vulnerability in BlazeDS 3.2 and earlier, used in LiveCycle, LiveCycle Data Services, Flex Data Services, and ColdFusion, allows remote attackers to obtain sensitive information via injected tags and external entity references in XML documents.
nginx 0.7.64 writes data to a log file without sanitizing non-printable characters. A remote attacker could send an HTTP request containing a terminal escape sequence, potentially modifying a window's title, executing arbitrary commands, or overwriting files.
The updatePosition function in libexpat (Expat 2.0.1) has a buffer over-read vulnerability. Crafted UTF-8 sequences in an XML document can cause an application crash.
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.
The Sage extension before 1.3.10 and Sage++ extensions for Firefox contain a cross-site scripting (XSS) vulnerability. A remote attacker can inject arbitrary web script or HTML via a "<SCRIPT/=''SRC='" sequence in an RSS feed.
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.
Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including Title, Author, and Album. The overflow triggers in the tooltip display string if the sound card driver is disabled or incorrectly installed.
SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer.
Stack-based buffer overflow in the libmms library, as used by MiMMS 0.0.9 and xine-lib 1.1.0 and earlier. A remote attacker can cause a denial of service (application crash) and possibly execute arbitrary code via the send_command, string_utf16, get_data, and get_media_packet functions.
OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid LDAP request that triggers an assert error.
A format string vulnerability in the CF_syslog function in launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file.
A vulnerability in the Apple File Protocol (AFP) server in Apple Mac OS X 10.4 up to 10.4.6 includes the names of restricted files and folders within search results. This might allow remote attackers to obtain sensitive information.
The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a "php://" or other scheme in the third argument, which disables safe mode. This can lead to unauthorized file access.
BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a request for a .cfm file whose name contains an MS-DOS device name such as con, aux, com1, and com2.
The Lanap BotDetect ASP.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page. This makes it easier for remote attackers to conduct automated attacks by replaying the ViewState for a known number.
Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet.
An unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, as demonstrated by the OUSPG PROTOS DNS test suite.
The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses. This allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.
Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via the t, osticket_title, em, e, err parameters and the name and subject fields when adding a ticket.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS