CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A race condition in the fsnotify implementation in the Linux kernel through version 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions.
SocuSoft Flash Slideshow Maker Professional up to version 5.20 has a vulnerability that involves trusting user-supplied input in the xml_path parameter, leading to content forgery, cross-site scripting, and unvalidated redirection issues.
The ledger::parse_date_mask_routine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
The find_option function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
CVE-2017-2221 describes an untrusted search path vulnerability in the installer of Baidu IME version 3.6.1.6 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
The vulnerability in the Installer of IP Messenger for Windows 4.60 and earlier allows an attacker to gain privileges via a malicious DLL in an unspecified directory.
MaLion for Windows 5.2.1 and earlier, and MaLion for Mac 4.0.1 to 5.2.1, only when 'Remote Control' is installed, allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent.
The bfd_mach_o_read_symtab_strtab function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap write, potentially leading to code execution via a crafted mach-o file.
The nlm_swap_auxiliary_headers_in function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted nlm file.
The bfd_make_section_with_flags function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause a NULL dereference via a crafted file.
The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils version 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file.
The evax_bfd_print_emh function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.
The _bfd_vms_slurp_egsd function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file.
The _bfd_vms_slurp_eeom function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.
The bfd_mach_o_i386_canonicalize_one_reloc function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted mach-o file.
The _bfd_xcoff_read_ar_hdr function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds stack read via a crafted COFF image file.
The alpha_vms_object_p function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap write, potentially leading to code execution via a crafted vms alpha file.
The _bfd_vms_save_sized_string function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted vms file.
The bfd_cache_close function in the Binary File Descriptor (BFD) library in GNU Binutils 2.29 and earlier allows remote attackers to cause a heap use after free, potentially leading to code execution via a crafted nested archive file. This issue arises from incorrect function calls during an attempt to release memory.
CVE-2017-10949 affects Dell Storage Manager 2016 R2.1 and involves directory traversal leading to information disclosure. The issue arises when the doGet method of the EmWebsiteServlet class does not properly validate user-provided paths before using them in file operations.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS