CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.22)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image.
Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before version 49.0 allows remote attackers to execute arbitrary code by leveraging improper interaction between empty filters and CANVAS element rendering.
The mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility implementation in Mozilla Firefox before version 49.0 allows remote attackers to execute arbitrary code via a crafted web site.
The nsImageGeometryMixin class in Mozilla Firefox before version 49.0, Firefox ESR 45.x before version 45.4, and Thunderbird before version 45.4 does not properly perform a cast of an unspecified variable during handling of INPUT elements, allowing remote attackers to execute arbitrary code via a crafted web site.
Buffer overflow in the AAA module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet.
The kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces the use of MD5 passwords on deployed systems, making it easier for attackers to determine cleartext passwords via a brute-force attack.
Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for the /etc/qci/answers file, allowing local users to obtain the root password for the deployed system by reading the file.
The BIOS for Lenovo ThinkCentre, ThinkServer, and ThinkStation devices may allow local users or physically proximate attackers to bypass the Secure Boot protection mechanism by leveraging an AMI test key.
A heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service or execute arbitrary code via a crafted TIFF image with zero tiles.
A heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier can be exploited by remote attackers. Attackers can cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.
Multiple integer overflows in the cvt_by_strip and cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write.
The _TIFFVGetField function in tif_dirinfo.c in LibTIFF version 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image.
Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.
The m_authenticate function in modules/m_sasl.c in Charybdis before 3.5.3 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter.
Xen versions 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory, thereby gaining host OS privileges. The issue arises from mishandling of instruction pointer truncation during emulation.
The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.
CVE-2016-6801 involves a content-type check vulnerability in Jackrabbit-Webdav, allowing remote attackers to hijack the authentication of victims for resource creation via an HTTP POST request with a missing or crafted Content-Type header.
Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.
The management interface of Huawei WS331a routers with software before WS331a-10 V100R001C01B112 is vulnerable to authentication bypass. Remote attackers can gain administrative access by sending 'special packages' to the LAN interface.
PowerDNS Authoritative Server before version 3.4.10 does not properly handle dots in labels, allowing remote attackers to cause a denial of service via a crafted DNS query.