CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to 'User Mode Write AV'.
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a stack buffer overrun.
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to a Read Access Violation on Control Flow.
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a stack buffer overrun.
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to a Data Execution Prevention Violation.
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to 'User Mode Write AV'.
XnView Classic for Windows version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to user mode node insertion.
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to a Data Execution Prevention Violation.
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to a Data Execution Prevention Violation.
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to a user mode write error in the RtlpCoalesceFreeBlocks function.
XnView Classic version 2.40 for Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file. The issue is related to a User Mode Write AV concerning the msvcrt!_VEC_memzero function.
IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue is related to branch selection control concerning the faulting address.
IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to 'Invalid Handle'.
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to branch selection control in ntdll.
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue relates to branch selection control in the memory allocation function.
IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a 'User Mode Write AV'.
IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a user mode write AV.
IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a critical section management issue.
Winamp 5.666 Build 3516 (x86) may allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to 'Error Code (0xe06d7363)'.
Winamp 5.666 Build 3516 (x86) may allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file. The issue relates to branch selection control associated with the faulting address.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

