CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A buffer overflow vulnerability has been discovered in K7AntiVirus Premium 15.1.0.53 by K7Computing Pvt Ltd, affecting the K7TSMngr.exe process. This vulnerability allows a local attacker to execute arbitrary code on the system.
The vulnerability in K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is caused by incorrect access control. It allows a local attacker to gain elevated privileges on the system.
A buffer overflow vulnerability has been discovered in K7Antivirus Premium 15.1.0.53 by K7Computing Pvt Ltd, specifically in the K7TSMngr.exe component. This vulnerability allows a local attacker to execute arbitrary code.
A buffer overflow vulnerability has been discovered in K7AntiVirus Premium 15.01.00.53 by K7Computing, specifically in the K7TSMngr.exe process. This flaw allows a local attacker to execute arbitrary code.
The vulnerability in K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is caused by incorrect access control in the K7TSMngr.exe component. It allows a local attacker to escalate privileges on the system.
The vulnerability in K7Antivirus Premium 15.1.0.53 is caused by incorrect access control in the K7Sentry.sys driver. It allows a local attacker to execute a process with elevated privileges.
A blind SQL injection vulnerability based on time exists in zzcms version 201910, exploitable through cookie manipulation. An attacker can inject malicious SQL queries via cookie parameters, leading to unauthorized database access.
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
A vulnerability in the EbmlTypeDispatcher::send function of VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv file.
FasterXML jackson-databind w wersjach 2.x przed 2.9.10.8 niewłaściwie obsługuje interakcję między gadżetami serializacyjnymi a typowaniem, co jest związane z org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS