CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.25)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Hyper Module Management (HMM) software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions allows the operator to modify the user configuration of iMana through privilege escalation.
The Hyper Module Management (HMM) software of Huawei Tecal E9000 Chassis V100R001C00SPC160 and earlier versions could allow a non-super-domain user who accesses HMM through SNMPv3 to perform operations on a server as a super-domain user.
There is a vulnerability in Huawei Tecal devices that may lead to unauthorized access to the system. This affects multiple models, including RH1288 V2, RH2265 V2, RH2285 V2, and others with specific software versions.
There is a vulnerability in Huawei Tecal devices that may lead to unauthorized access to the system. This affects multiple models, including RH1288 V2, RH2265 V2, RH2285 V2, and others with specific software versions.
Huawei home gateway WS318 with software V100R001C01B022 and earlier versions is affected by the PIN offline brute force cracking vulnerability of the WPS protocol. The weak random number generator makes it easier to crack the PIN code, allowing an attacker to access the Internet via the cracked device.
Huawei devices USG9500, USG2100, USG2200, and USG5100 with specified software versions may be vulnerable to a CSRF attack that can be conducted by an unauthenticated, remote attacker. This affects users of the web interface.
Huawei FusionManager versions V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.
Huawei devices AC6605, ACU, and series S2300, S3300, S2700, S3700, S5300, S5700, S6300, S6700, S7700, S9300, S9300E, S9700 with specified software are vulnerable to an attack that can lead to denial of service by sending a special SSH packet.
Huawei Campus devices S7700, S9300, and S9700 with specific software versions allow unauthorized users to upgrade the bootrom or bootload software, bypass menu protection mechanisms, and conduct menu compromise attacks.
Huawei Campus S3700HI, S5700, S7700, LSW S9700, S2350, S2750, S5300, S6300, S6700, S9300, and S9300E devices have a vulnerability that allows attackers to send malformed packets, potentially leading to a denial of service (DoS) attack via heap overflow.
Huawei Quidway S9700, S9300, S7700, S6700, S6300, S5700, and S5300 devices have a vulnerability that allows attackers to launch DoS attacks by sending malformed packets. This flaw affects versions V200R003C00SPC500 and V200R003C00SPC300.
Huawei S9300 and S2300, S3300, S5300, S6300 devices with software before V100R006SPH013 and V100R006SPH010 have the Y.1731 vulnerability in processing special packets. This vulnerability can cause switches to restart.
In Huawei eSpace Meeting with software V100R001C03SPC201 and earlier versions, attackers can obtain permissions assigned to common users, allowing them to elevate privileges and access key resources.
Huawei Eudemon8000E firewall with software V200R001C01SPC800 and earlier versions allows users to log in to the device using Telnet or SSH. An attacker can slow down the login process by sending a mass of TCP packets with a special structure.
An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS versions before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service via memory corruption.
An issue was discovered in certain Apple products related to the 'FontParser' component. This affects iOS versions before 10.3, macOS versions before 10.12.4, tvOS versions before 10.2, and watchOS versions before 3.2.
An issue was discovered in certain Apple products related to the 'Security' component. It affects iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted X.509 certificate file.
An issue was discovered in certain Apple products, including iOS before 10.3, related to the 'Phone' component. It allows attackers to trigger telephone calls to arbitrary numbers via a third-party app.
An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. A buffer overflow allows attackers to execute arbitrary code in a privileged context.
An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. A buffer overflow allows attackers to execute arbitrary code in a privileged context.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS