CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and crash) via a cycle in the references of remembered mangled types.
CVE-2016-2779 vulnerability in runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
CVE-2016-2539 in ATutor before version 2.2.2 has a CSRF vulnerability in install_modules.php that allows remote attackers to hijack user authentication for uploading arbitrary files and executing arbitrary PHP code via crafted zip files.
dhcpcd before 6.10.0 allows remote attackers to cause a denial of service via invalid reads, leading to crashes.
The aio_mount function in the Linux kernel before version 4.7.7 does not properly restrict execute access, allowing local users to bypass intended SELinux W^X policy restrictions and gain privileges via an io_setup system call.
A race condition in the ip4_datagram_release_cb function in the Linux kernel before version 3.15.2 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect expectations about locking during multithreaded access to internal data structures for IPv4 UDP sockets.
ZoneMinder versions 1.30 and 1.29 are vulnerable to CSRF attacks, allowing a remote attacker to make changes to the web application as the currently logged-in user. The attacker can silently create a new admin user, enabling further attacks.
An integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM chunk, leading to a heap-based buffer overflow.
The TIFFGetField function in GraphicsMagick 1.3.24 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a file containing an 'unterminated' string.
The Utah RLE reader in GraphicsMagick before version 1.3.25 allows remote attackers to cause a denial of service via vectors involving the header information and the file size.
Integer overflow in the vc4_get_bcl function in the VideoCore DRM driver in the Linux kernel before version 4.9.7 may lead to denial of service or other unspecified impacts via a crafted size value in a VC4_SUBMIT_CL ioctl call.
In the Linux kernel version 4.9.x before 4.9.6, there is a bug in atusb.c that incorrectly interacts with the CONFIG_VMAP_STACK option. This allows local users to cause a denial of service (system crash or memory corruption) by leveraging the use of more than one virtual page for a DMA scatterlist.
In the Linux kernel 4.9.x before version 4.9.6, there is a bug in drivers/hid/hid-corsair.c that interacts incorrectly with the CONFIG_VMAP_STACK option. This allows local users to cause a denial of service or memory corruption.
The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service (duplicate freelist entries and system crash) or possibly have unspecified other impact in opportunistic circumstances by leveraging the selection of a large value for a random number.
The load_segment_descriptor implementation in the Linux kernel before version 4.9.5 improperly emulates a 'MOV SS, NULL selector' instruction, which can lead to guest OS crashes or privilege escalation via crafted applications.
The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, potentially leading to system crashes or memory corruption by local users.
An issue was discovered on SendQuick Entera and Avera devices before version 2HF16, where the application failed to check access control, potentially allowing an attacker to shutdown the system.
Unspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and OpenICF improperly call the SearchControls constructor with returnObjFlag set to true, allowing remote attackers to execute arbitrary code via a crafted serialized Java object.
The Type_MLU_Read function in cmstypes.c in Little CMS (lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, leading to an out-of-bounds heap read.
Integer overflow in the js_regcomp function in regexp.c in MuJS before commit b6de34ac6d8bb7dd5461c57940acfbd3ee7fd93e allows attackers to cause a denial of service (application crash) via a crafted regular expression.