CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
W wersjach ARM mbed TLS przed 2.1.11, 2.7.2 i 2.8.0 występuje błąd przepełnienia bufora w funkcji ssl_parse_server_psk_hint(), który może prowadzić do awarii przy nieprawidłowym wejściu.
W wersjach ARM mbed TLS przed 2.1.11, 2.7.2 i 2.8.0 występuje błąd przepełnienia bufora w funkcji ssl_parse_server_key_exchange(), który może prowadzić do awarii przy nieprawidłowym wejściu.
Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCvd73664.
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software performs incomplete input validation of option 82 information that it receives in DHCP Version 4 (DHCPv4) packets from DHCP relay agents. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuh91645.
A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a Relay Reply denial of service (DoS) condition. The vulnerability exists because the affected software performs incomplete input validation of encapsulated option 82 information that it receives in DHCPOFFER messages from DHCPv4 servers. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device, which the device would then forward to a DHCPv4 server. When the affected software processes the option 82 information that is encapsulated in the response from the server, an error could occur. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvg62754.
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS and IOS XE Software allows an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS). It exists because the software performs incomplete input validation of option 82 information in DHCPv4 packets from DHCP relay agents. Sending a crafted DHCPv4 packet can cause a heap overflow and device reload.
Multiple buffer overflow vulnerabilities in the LLDP subsystem of Cisco IOS, IOS XE, and IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) or execute arbitrary code with elevated privileges. The issue affects LLDP packet processing.
A vulnerability in the IKEv1 implementation of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS). It is due to improper validation of specific IKEv1 packets. Sending crafted IKEv1 packets during IKE negotiation can cause a device reload.
A vulnerability in the IKEv2 module of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device, leading to a denial of service (DoS). It is due to incorrect processing of certain IKEv2 packets. Sending crafted IKEv2 packets can cause continuous memory consumption and eventual device reload.
A vulnerability in the Smart Install feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS). It is due to improper validation of packet data. Sending a crafted packet to TCP port 4786 can cause a device reload. Only Smart Install client switches are affected, not Smart Install directors.
A vulnerability in the BFD offload implementation of Cisco Catalyst 4500 and 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the iosd process, resulting in a denial of service (DoS). It is due to insufficient error handling when the BFD header in a BFD packet is incomplete. Sending a crafted BFD message can trigger a system reload.
A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The issue is due to insufficient handling of VPN traffic. An attacker could exploit this by sending crafted VPN traffic, causing the device to hang or crash.
A vulnerability in Enhancesoft osTicket before version 1.10.2 allows remote attackers to reset arbitrary passwords (when an associated email address is known) by leveraging guest access and guessing a 6-digit number.
Podatność w Kingsoft WPS Office Free 10.2.0.5978 umożliwia lokalnym użytkownikom eskalację uprawnień lub przeprowadzenie ataku typu odmowa usługi poprzez podszywanie się pod nazwane potoki. Problem wynika z niebezpiecznego utworzenia potoku \.\pipe\WPSCloudSvr\WpsCloudSvr, który przyznaje pełny dostęp grupie Everyone.
It was found that when Artemis and HornetQ before version 2.4.0 are configured with UDP discovery and JGroups discovery, a huge byte array is created when receiving an unexpected multicast message. This may result in heap memory exhaustion, full GC, or OutOfMemoryError.
In MISP 2.4.87 in app/Controller/ServersController.php, a vulnerability allows the override of a path variable on certain Red Hat Enterprise Linux and CentOS systems where rh_shell_fix is enabled. This enables site admins to inject arbitrary OS commands.
The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced environment.
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. It occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution, and it was exploited in the wild in January and February 2018.
Apache POI versions prior to 3.17 are vulnerable to Denial of Service attacks. These issues include infinite loops while parsing crafted WMF, EMF, MSG files and macros, as well as Out of Memory exceptions while parsing DOC, PPT, and XLS files.
W OpenSSH przed wersją 7.4 występuje podatność, która pozwala zdalnym atakującym na spowodowanie odmowy usługi poprzez dereferencję wskaźnika NULL i awarię demona, wykorzystując nieprawidłową sekwencję wiadomości NEWKEYS.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS