CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Podatność w ssh-agent w OpenSSH przed wersją 7.4 umożliwia zdalnym atakującym wykonywanie dowolnych lokalnych modułów PKCS#11 poprzez wykorzystanie kontroli nad przekazywanym gniazdem agenta.
In Dotclear before version 2.10.3, there is an unrestricted file upload vulnerability in the fileUnzip->unzip method that allows remote authenticated users with permissions to manage media items to execute arbitrary code by uploading a ZIP file containing a file with a crafted extension.
Arista EOS versions 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service (device reboot) by sending crafted packets to the control plane.
In PHP before 5.6.28 and 7.x before 7.0.13, a vulnerability allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document.
A stack consumption vulnerability exists in the gdImageFillToBorder function in the GD Graphics Library (libgd) before version 2.2.2. This allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers the use of a negative color value.
Tor versions before 0.2.8.9 and 0.2.9.x before 0.2.9.4-alpha had functions that expected buf_t data to be NUL terminated. The implementation in or/buffers.c did not ensure this termination, allowing remote attackers to cause a denial of service (client, hidden service, relay, or authority crash) via crafted data.
NETGEAR Arlo base stations and Arlo Q and Arlo Q Plus devices with specific firmware versions use an easily predictable pattern for password generation, making them vulnerable to dictionary attacks.
OpenAM 10.1.0 has an XXE (XML External Entity) vulnerability in the path /SSOPOST/metaAlias/%realm%/idpv2, allowing remote attackers to read arbitrary files via the SAMLRequest parameter.
CVE-2016-10096 is an SQL injection vulnerability in register.php in GeniXCMS before version 1.0.0 that allows remote attackers to execute arbitrary SQL commands via the activation parameter.
The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations when the KERNEL_DS option is set. This allows local users to read or write to arbitrary kernel memory locations and can cause a denial of service (use-after-free) by leveraging access to a /dev/sg device.
The admin/languages.php file in Piwigo up to version 2.8.3 has a vulnerability that allows remote authenticated administrators to conduct File Inclusion attacks via the tab parameter.
The admin/batch_manager.php file in Piwigo up to version 2.8.3 has a vulnerability that allows remote authenticated administrators to conduct File Inclusion attacks via the $page['tab'] variable (aka the mode parameter).
QEMU with NE2000 device emulation support is vulnerable to an OOB (out-of-bounds) access issue during r/w operations on 'ioport'. A privileged (CAP_SYS_RAWIO) user/process could exploit this flaw to leak or corrupt QEMU memory bytes.
Version 0.93.1 of Shutter contains a vulnerability that allows user-assisted remote attackers to execute arbitrary commands. The issue occurs during the 'Run a plugin' action when an image name is mishandled.
In Shutter through version 0.93.1, there is a vulnerability that allows user-assisted remote attackers to execute arbitrary commands via a crafted image name mishandled during a 'Show in Folder' action.
An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5 related to improper sanitization of paths provided to the ResourceServlet, leading to directory traversal attacks.
The Suite REST API in VMware vRealize Operations (vROps) 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during deserialization.
The drag-and-drop function in VMware Workstation Pro 12.x before 12.5.2, VMware Workstation Player 12.x before 12.5.2, and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS users to execute arbitrary code on the host OS or cause a denial of service via unspecified vectors.
VMware vCenter Server versions 5.5 before U3e and 6.0 before U2a allow remote authenticated users to read arbitrary files via a Log Browser, Distributed Switch setup, or Content Library XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory.