CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.24)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The JPC_NOMINALGAIN function in JasPer through version 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors.
The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer.
The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before version 1.900.14 allow remote attackers to cause a denial of service (assertion failure).
Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure.
The dwarf_get_aranges_list function in dwarf_arrange.c in Libdwarf before version 20161124 allows remote attackers to cause a denial of service via an out-of-bounds read.
Heap-based buffer overflow in the _dwarf_skim_forms function in libdwarf/dwarf_macro5.c in Libdwarf before version 20161124 can be exploited by remote attackers.
The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure.
Buffer overflow in coders/tiff.c in ImageMagick before version 6.9.4-1 allows remote attackers to cause application crash or unspecified other impact via a crafted TIFF file.
Buffer overflow in the WriteGROUP4Image function in coders/tiff.c in ImageMagick before version 6.9.5-8 allows remote attackers to cause application crashes or have other unspecified impacts via a crafted file.
Buffer overflow in the sixel_decode function in coders/sixel.c in ImageMagick before version 6.9.5-8 allows remote attackers to cause application crashes or have other unspecified impacts via a crafted file.
Buffer overflow in the WritePDBImage function in coders/pdb.c in ImageMagick before version 6.9.5-8 allows remote attackers to cause application crashes or other unspecified impacts via a crafted file.
Buffer overflow in the WriteMAPImage function in coders/map.c in ImageMagick before version 6.9.5-8 allows remote attackers to cause application crashes or other unspecified impacts via a crafted file.
Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before version 6.9.5-6 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
A use-after-free vulnerability in the ReadPWPImage function in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.
Buffer overflow in the ReadRLEImage function in ImageMagick before version 6.9.4-4 allows remote attackers to cause application crashes or other unspecified impacts via a crafted RLE file.
Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.
Nessus versions 6.6.2 to 6.10.3 contain a flaw related to insecure permissions that may allow a local attacker to escalate privileges when the software is running in Agent Mode.
Buffer overflow in APNGDis 2.8 and below allows a remote attacker to execute arbitrary code via a crafted filename.
QNAP QTS before version 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file.