CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The vulnerability in the Installer of QuickTime for Windows related to an untrusted search path allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2215 describes an untrusted search path vulnerability in the installer of 'jizen_setup.exe', allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2208 describes an untrusted search path vulnerability in the installer of the electronic tendering and bid opening system, allowing an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
CVE-2017-2188 involves an untrusted search path vulnerability in the installer of the Denshinouhin Check System, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load malicious firmware via WebUI.
HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI.
Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI.
HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings.
On D-Link DIR-615 routers before v20.12PTb04, there is a CSRF vulnerability that allows a malicious site to send requests to the victim's router without knowing their login credentials. An attacker can exploit this flaw to upload malicious firmware, causing the router to crash.
Yaws version 1.91 allows unauthenticated remote file disclosure via HTTP Directory Traversal using the /%5C../ sequence on port 8080.
EMC RSA Archer versions 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, and 5.5.1.1 are potentially affected by a cross-site request forgery vulnerability. A remote low privileged attacker may exploit this vulnerability to execute unauthorized requests on behalf of the victim, using the authenticated user's privileges.
A vulnerability in the NVIDIA sound driver allows a local malicious application to execute arbitrary code within the kernel context. It requires first compromising a privileged process.
CVE-2017-6247 describes an elevation of privilege vulnerability in the NVIDIA sound driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High due to the potential for local arbitrary code execution in a privileged kernel process.
CVE-2017-0711 is a privilege escalation vulnerability in the MediaTek networking driver affecting the Android kernel.
A privilege escalation vulnerability in the Android kernel related to the Upstream Linux tcb component.
CVE-2017-0707 is a privilege escalation vulnerability in the HTC LED driver affecting the Android kernel.
There is an elevation of privilege vulnerability in the Android system UI. Affects versions 7.1.1 and 7.1.2.
There is an elevation of privilege vulnerability in the Android system UI. This affects versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2.
A remote code execution vulnerability exists in the Android system UI. This affects versions 7.1.1 and 7.1.2.
A remote code execution vulnerability exists in the Android system UI. Affects versions 7.1.1 and 7.1.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS