CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: 01/10/2026(UTC) (v2026.10.01)

All Critical High Medium Low Actively exploited85,997 results

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

01/06/2023(UTC)

Insufficient authentication in the MQTT backend allows an attacker to access and manipulate the telemetry data of the entire fleet of vehicles using the HopeChart HQT-401 telematics unit. Other models may also be affected.

01/06/2023(UTC)

In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, leading to a write-what-where condition.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 is found to have a stack overflow vulnerability via the Edit_BasicSSID interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 is found to have a stack overflow vulnerability via the AddMacList interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the SetMobileAPInfoById interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 is found to have a stack overflow vulnerability via the Edit_BasicSSID_5G interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 is found to have a stack overflow vulnerability via the DelDNSHnList interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 is found to have a stack overflow vulnerability via the ipqos_lanip_editlist interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 is found to contain a stack overflow via the EdittriggerList interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 is found to have a stack overflow vulnerability via the UpdateWanParams interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 was found to have a stack overflow vulnerability via the ipqos_lanip_dellist interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the DelSTList interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the EditvsList interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the DeltriggerList interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the DelvsList interface at /goform/aspForm.

31/05/2023(UTC)

H3C Magic R300 version R300-2100MV100R004 was found to contain a stack overflow via the UpdateSnat interface at /goform/aspForm.

31/05/2023(UTC)

An issue was discovered in BMC Patrol before version 22.1.00 that allows the agent's configuration to be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key, which can lead to remote code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS