CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Podatność w Apache Tomcat 7.0.0 do 7.0.79 na systemie Windows umożliwia przesyłanie plików JSP na serwer poprzez specjalnie skonstruowane żądanie, gdy HTTP PUT jest włączone. Po przesłaniu, plik JSP może być wywołany, co prowadzi do wykonania zawartego w nim kodu przez serwer.
Apache Solr's Kerberos plugin can be configured to use delegation tokens, allowing an application to reuse the authentication of an end-user or another application. There are two issues with this functionality that may lead to a leak of security configuration.
XnView Classic version 2.41 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a user mode write AV at jbig2dec.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a 'Read Access Violation on Control Flow'.
IrfanView 4.44 - 32bit contains a vulnerability that allows attackers to cause a denial of service or potentially have unspecified other impact via a crafted .ani file. The issue relates to branch selection in the RtlpCoalesceFreeBlocks function.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file. The issue is related to a Read Access Violation on Control Flow.
STDU Viewer version 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, potentially leading to stack corruption.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file. The issue is related to an 'Illegal Instruction' violation concerning an unknown symbol.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a 'User Mode Write AV'.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file. The issue relates to an 'Illegal Instruction Violation'.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file. The issue is related to an 'Illegal Instruction Violation'.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file. The issue is related to a user mode write access violation during initialization.
STDU Viewer version 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a read access violation.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file. The issue is related to an illegal instruction violation.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file. The issue is related to an 'Illegal Instruction Violation'.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file.
STDU Viewer version 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, which may lead to stack corruption.
STDU Viewer version 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file.
STDU Viewer version 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a 'Read Access Violation on Block Data Move'.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS