CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vulnerability has been identified, which may allow remote code execution.
Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg versions 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file.
Inteno routers have a JUCI ACL misconfiguration that allows the 'user' account to read files, write to files, and add root SSH keys via JSON commands to ubus.
An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows for a buffer over-read in the fr_dhcp_decode_suboptions() function, leading to a denial of service.
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows for an infinite read in dhcp_attr2vp(), leading to a denial of service.
An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows 'Infinite loop and memory exhaustion with 'concat' attributes', leading to denial of service.
The FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows a buffer overflow when decoding option 63 in DHCP, leading to a denial of service.
FreeRADIUS 2.x versions before 2.2.10 have an FR-GV-205 issue that allows a buffer over-read in the fr_dhcp_decode_options() function and leads to a denial of service.
FreeRADIUS 2.x versions before 2.2.10 have a memory leak issue in the fr_dhcp_decode() function, leading to a denial of service.
FreeRADIUS 2.x versions before 2.2.10 have an FR-GV-203 issue that leads to a memory leak in the decode_tlv() function and can cause denial of service.
An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows 'Read / write overflow in make_secret()' and a denial of service.
The shoco_decompress function in the API in shoco through July 17, 2017, allows remote attackers to cause a denial of service via malformed compressed data, leading to buffer over-read and application crash.
EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG products allow an application administrator to upload arbitrary files that may contain malicious code. Such a file could then be executed on the affected system with the privileges of the user the application is running under.
The try_read_command function in memcached before version 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read.
Apache OpenMeetings version 1.0.0 updates user passwords in an insecure manner, potentially allowing unauthorized access.
Apache OpenMeetings version 1.0.0 does not check the contents of uploaded files. An attacker can cause a denial of service by uploading multiple large files to the server.
Apache OpenMeetings version 1.0.0 discloses Tomcat version and detailed error stack trace, which is not secure.
Apache OpenMeetings version 3.2.0 is vulnerable to parameter manipulation attacks, allowing an attacker to access restricted areas.
Apache OpenMeetings version 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end.
Apache OpenMeetings version 1.0.0 has an overly permissive crossdomain.xml file, allowing Flash content to be loaded from untrusted domains.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS