CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Johnson Controls Airwall before 4.1 involves the use of a hard-coded cryptographic key, allowing a cryptanalytic attack.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Vulnerability in Johnson Controls Airwall before 4.1 allows external control of file name or path, enabling file manipulation.
CWE-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows cryptanalytic attack.
Vulnerability in PAX Technology Q80 Application Installer allows bypass of cryptographic signature verification, enabling remote code execution by a network-adjacent attacker without authentication.
Vulnerability in PAX Technology Q80 AIP file parsing allows link following, enabling remote code execution by a network-adjacent attacker without authentication.
Vulnerability in PAX Technology Q80 XCB daemon is due to missing authentication before allowing access to functionality, allowing a network-adjacent attacker to disclose sensitive information and modify configuration.
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal.
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command.
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting.
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command.
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path.
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments.
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary locations due to path traversal.
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to command injection.
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement.
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths.
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS