CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
GOM Player version 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted fpx file.
CVE-2016-9315 identifies a privilege escalation vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier. It allows authenticated, remote users with least privileges to change the Master Admin's password and/or add new admin accounts.
In Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier, a vulnerability allows authenticated, remote users with least privileges to back up the system configuration and download it to their local machine. The backup file contains sensitive information such as passwd/shadow files, RSA certificates, Private Keys, and Default Passphrase.
Zyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a denial of service by flooding with ICMPv4 Port Unreachable packets, leading to high CPU consumption.
An issue was discovered in certain Apple products, including GarageBand before version 10.1.6, related to the 'Projects' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted GarageBand project file.
An issue was discovered in certain Apple products, including iOS before 10.2.1, Safari before 10.0.3, and tvOS before 10.1.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
An issue was discovered in certain Apple products, including GarageBand before 10.1.5 and Logic Pro X before 10.3, related to the 'Projects' component. This allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted GarageBand project file.
An issue was discovered in certain Apple products related to the 'Kernel' component. Affected systems include iOS before 10.2.1, macOS before 10.12.3, tvOS before 10.1.1, and watchOS before 3.1.3. This issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app.
An issue was discovered in certain Apple products affecting iOS before 10.2.1, Safari before 10.0.3, and tvOS before 10.1.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
An issue was discovered in certain Apple products, including iOS before 10.2.1, Safari before 10.0.3, iCloud before 6.1.1, and iTunes before 12.5.5, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
An issue was discovered in certain Apple products affecting iOS before 10.2.1, Safari before 10.0.3, and tvOS before 10.1.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
An issue was discovered in certain Apple products related to the 'Kernel' component. iOS versions before 10.2.1, macOS before 10.12.3, tvOS before 10.1.1, and watchOS before 3.1.3 are vulnerable to attacks that can lead to arbitrary code execution in a privileged context or denial of service (use-after-free) via a crafted app.
An issue was discovered in certain Apple products, including macOS before 10.12.3, related to the 'Graphics Drivers' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
An issue was discovered in certain Apple products affecting iOS before 10.2.1, Safari before 10.0.3, iCloud before 6.1.1, iTunes before 12.5.5, and tvOS before 10.1.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
An issue was discovered in certain Apple products affecting iOS before 10.2.1, Safari before 10.0.3, iCloud before 6.1.1, iTunes before 12.5.5, and tvOS before 10.1.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
An issue was discovered in certain Apple products affecting iOS before 10.2.1, Safari before 10.0.3, iCloud before 6.1.1, iTunes before 12.5.5, and tvOS before 10.1.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
An issue was discovered in certain Apple products, including macOS before 10.12.3, related to the 'Bluetooth' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.
An issue was discovered in certain Apple products, including macOS before 10.12.2, related to the 'xar' component. It allows remote attackers to execute arbitrary code via a crafted archive that triggers the use of uninitialized memory locations.
An issue was discovered in certain Apple products, including iOS before 10.2 and macOS before 10.12.2, related to the 'CoreText' component. It allows remote attackers to cause a denial of service via a crafted string.
An issue was discovered in certain Apple products affecting iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue involves the 'Security' component, allowing remote attackers to spoof certificates via unspecified vectors.