CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.25)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-2017-2193 describes an untrusted search path vulnerability in the installer of Tera Term 4.94 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
The vulnerability in the RW-5100 tool to verify the execution environment in version 1.1.0.0 for Windows 7 and 1.2.0.0 for Windows 8.1 allows an attacker to gain privileges via a malicious DLL in an unspecified directory.
CVE-2017-2191 describes an untrusted search path vulnerability in the RW-5100 driver installer for Windows 7 version 1.0.0.9 and for Windows 8.1 version 1.0.1.0. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
The vulnerability in the RW-4040 tool for verifying the execution environment on Windows 7 version 1.2.0.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2189 involves an untrusted search path vulnerability in the RW-4040 driver installer for Windows 7 version 2.27, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
The Hands-on Vulnerability Learning Tool 'AppGoat' version 3.0.2 and earlier allows remote attackers to obtain local files via unspecified vectors, which is a different vulnerability than CVE-2017-2179 and CVE-2017-2181.
The Hands-on Vulnerability Learning Tool 'AppGoat' version 3.0.2 and earlier allows remote attackers to access local files via unspecified vectors. This is a different vulnerability than CVE-2017-2179 and CVE-2017-2182.
The Hands-on Vulnerability Learning Tool 'AppGoat' version 3.0.2 and earlier allows remote code execution via unspecified vectors, posing a serious security threat to web applications.
CVE-2017-2178 describes an untrusted search path vulnerability in the installer of the electronic tendering and bid opening system, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2177 describes an untrusted search path vulnerability in the Installer of Shogyo Touki Denshi Ninsho Software version 1.7 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2176 describes an untrusted search path vulnerability in screensaver installers that allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
The untrusted search path vulnerability in WinSparkle versions prior to 0.5.3 allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory.
Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.
Cybozu Dezie versions 8.0.0 to 8.1.1 allow remote attackers to bypass access restrictions to delete an arbitrary DBM file in Cybozu Dezie proprietary format via unspecified vectors.
Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via unspecified vectors.
Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allow authenticated attackers to bypass access restrictions to enable the debug option via unspecified vectors.
A cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operations.
Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to cause a denial-of-service (DoS) or execute arbitrary code via unspecified vectors.
The firmware of I-O DATA DEVICE TS-WRLP version 1.01.02 and earlier and TS-WRLA version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.
CVE-2016-7818 involves an untrusted search path vulnerability in installers for various programs, allowing remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS