CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIFFTAG_JPEGTABLES of length one.
The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII to values that access 0-byte arrays.
Incorrect HTTP Request header comparison in Squid HTTP Proxy versions 3.5.0.1 through 3.5.22 and 4.0.1 through 4.0.16 results in the Collapsed Forwarding feature mistakenly identifying some private responses as suitable for delivery to multiple clients.
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy leads to client-specific Cookie data being leaked to other clients.
An issue was discovered in eClinicalWorks healow@work 8.0 build 8 related to a blind SQL injection in EmployeePortalServlet. It can be exploited by unauthenticated users via an HTTP POST request, allowing database data to be dumped to a malicious server.
An out-of-bounds read vulnerability exists in Aerospike Database Server 3.10.0.3 that can be exploited by an attacker to disclose memory within the process. A specially crafted packet can also trigger a denial of service.
A heap write out of bounds vulnerability exists in the decoding of BPG images in the Libbpg library. A crafted BPG image decoded by libbpg can cause an integer underflow vulnerability leading to out of bounds heap write and remote code execution.
Privilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and Miix systems running Windows allows local users to execute code with elevated privileges.
CVE-2016-8225 describes an unquoted service path vulnerability in the Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21, allowing local users to execute code with elevated privileges.
Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation.
A vulnerability in Cisco WebEx Meetings Server allows an authenticated, remote attacker to execute predetermined shell commands on other hosts.
A vulnerability in Cisco WebEx Meetings Server allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against an administrative user.
A vulnerability in Cisco Hybrid Meeting Server allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against the user of the web interface.
In Wireshark versions 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could enter a large loop triggered by packet injection or a malformed capture file. This was addressed by changing a data type to avoid an integer overflow.
In Wireshark versions 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could enter an infinite loop triggered by packet injection or a malformed capture file. This was addressed by changing a data type to avoid an integer overflow.
Multiple buffer overflows in Autodesk FBX-SDK before version 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DFX format files.
An issue was discovered in Pagekit CMS before 1.0.11 that allows a remote attacker to reset a registered user's password when the debug toolbar is enabled. The password can be successfully recovered using this exploit.
The php_wddx_pop_element function in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service via a NULL pointer dereference, leading to application crash.
The object_common1 function in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call.
Integer overflow in the phar_parse_pharfile function in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service via a truncated manifest entry in a PHAR archive.