CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The TAP plugin in Jenkins before version 1.25 has a directory traversal vulnerability that allows remote attackers to read arbitrary files via an unspecified parameter.
The Script Security plugin in Jenkins before version 1.18.1 may allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs direct field access or get/set array operations.
Integer overflow in the DHCP client (udhcpc) in BusyBox before version 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, leading to an out-of-bounds heap write.
The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in GStreamer before version 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted tag value.
Multiple incomplete blacklist vulnerabilities in Dotclear before version 2.8.2 allow remote authenticated users with permissions to manage their own media items and entries/comments to execute arbitrary PHP code by uploading a file with a .pht, .phps, or .phtml extension.
In NetCommWireless HSPA 3G10WVE wireless routers with firmware before version 3G10WVE-L101-S306ETS-C01_R05, the ping.cgi script allows remote attackers to bypass intended access restrictions via a direct request.
The IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. An attacker could exploit this vulnerability by placing a specially-crafted DLL in the victim's path, allowing arbitrary code to run with the victim's privileges.
IBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files. An attacker could exploit this vulnerability to upload a malicious file, which would only be executed through a phishing attack to trick an unsuspecting victim.
A vulnerability in Audioserver allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it is mitigated by current platform configurations.
CVE-2017-0449 describes an elevation of privilege vulnerability in the Broadcom Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Moderate as it requires compromising a privileged process first.
CVE-2017-0447 describes an elevation of privilege vulnerability in the HTC touchscreen driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
The CVE-2017-0446 vulnerability in the HTC touchscreen driver may allow a local malicious application to elevate privileges and execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
The CVE-2017-0445 vulnerability in the HTC touchscreen driver allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2017-0444 is a privilege escalation vulnerability in the Realtek sound driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
A vulnerability in the Qualcomm Wi-Fi driver allows a local malicious application to execute arbitrary code within the context of the kernel. It requires first compromising a privileged process.
CVE-2017-0442 describes an elevation of privilege vulnerability in the Qualcomm Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2017-0441 is a privilege escalation vulnerability in the Qualcomm Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2017-0440 is a privilege escalation vulnerability in the Qualcomm Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2017-0439 is a privilege escalation vulnerability in the Qualcomm Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
A vulnerability in the Qualcomm Wi-Fi driver allows a local malicious application to execute arbitrary code within the context of the kernel. It requires first compromising a privileged process.