CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems.
A vulnerability was discovered in Siemens SiPass integrated (all versions before V2.70) that could allow an attacker in a Man-in-the-Middle position to read or modify the network communication between the SiPass integrated server and SiPass integrated clients.
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with access to a low-privileged user account to read or write files on the file system of the SiPass integrated server over the network.
A vulnerability was discovered in Siemens SIMATIC Logon (all versions before V1.6) that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically.
A vulnerability was discovered in Siemens OZW672 and OZW772 that allows an attacker to read and manipulate data in TLS sessions. This can be exploited during a man-in-the-middle attack on the integrated web server on port 443/tcp.
A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle (MitM) attack.
ImageMagick version 7.0.6-2 has a memory leak vulnerability in WriteCALSImage in coders/cals.c.
ImageMagick version 7.0.6-2 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.
ImageMagick version 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders/mat.c.
ImageMagick version 7.0.6-2 has a memory leak vulnerability in WriteINLINEImage in coders/inline.c.
ImageMagick version 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c.
ImageMagick version 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c.
ImageMagick version 7.0.6-2 has a memory leak vulnerability in the WriteMAPImage function in coders/map.c.
ImageMagick version 7.0.6-2 has a memory leak vulnerability in the WritePDFImage function in coders/pdf.c.
Podatność typu directory traversal w SAP NetWeaver Application Server Java 7.5 umożliwia zdalnym atakującym odczyt dowolnych plików poprzez wykorzystanie sekwencji '..' w ciągu zapytania. Wykorzystanie tej podatności miało miejsce w sierpniu 2017 roku.
The PS Interpreter in Ghostscript versions 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.
CVE-2016-6220 is an information disclosure vulnerability in the Dashboard and Error Pages in Trend Micro Control Manager SP3 6.0.
Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.
Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.
The ntpd client in NTP versions 4.x before 4.2.8p4 and 4.3.x before 4.3.77 is vulnerable to denial of service attacks. Remote attackers can exploit crafted 'KOD' messages to disrupt service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS