CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in SWFTools 0.9.2 allows for a heap-based buffer over-read when processing a crafted file in the readBlock() function in lib/ttf.c.
In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events.
The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. An attacker can exhaust computational resources on the remote endpoint by repeatedly sending ISAKMP fragment packets in a specific order.
A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker to elevate privileges to root and run dangerous commands on the server. The vulnerability occurs because a 'tomcat' user on the system can run certain shell commands, allowing the user to overwrite any file on the filesystem.
A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000, 5500, and 5700 Series devices and Cisco Virtualized Packet Core (VPC) Software allows an authenticated, local attacker to execute arbitrary shell commands as a Linux root user.
In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted file.
In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted file.
In SWFTools version 2013-04-09-1007 on Windows, the png2swf tool allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file.
In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file.
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file. The issue relates to Branch Selection control at the faulting address.
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file.
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file.
IrfanView version 4.44 (32bit) with TOOLS plugin 4.50 allows attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a 'Read Access Violation on Block Data Move starting at ntdll_77df0000!memcpy+0x0000000000000033.'
XnView Classic version 2.40 for Windows allows remote attackers to execute code via a crafted .bie file, related to a 'Read Access Violation on Block Data Move starting at Xjbig+0x000000000000121b.'
XnView Classic version 2.40 for Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS