CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles binary files, allowing local users to obtain root access via unspecified vectors.
Cisco Access Point devices with software 8.2(102.43) are vulnerable to remote attacks that can lead to denial of service via crafted ARP packets.
EMC Data Domain OS versions 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 store session identifiers of GUI users in a world-readable file, allowing local users to hijack arbitrary accounts via unspecified vectors.
The up.time agent in Idera Uptime Infrastructure Monitor versions 7.5 and 7.6 on Linux allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2016-4449 describes an XXE vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before version 2.9.4. This vulnerability, when not in validating mode, allows attackers to read arbitrary files or cause denial of service through unspecified vectors.
The xmlParseElementDecl function in libxml2 before version 2.9.4 allows context-dependent attackers to cause a denial of service via a crafted file, resulting in heap-based buffer underread and application crash.
SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.
Interfejs WAP w Trihedral VTScada w wersjach 8.x do 11.x przed 11.2.02 umożliwia zdalnym atakującym spowodowanie odmowy usługi poprzez nieokreślone wektory, co prowadzi do odczytu poza zakresem i awarii aplikacji.
HPE Project and Portfolio Management Center (PPM) versions 9.2x and 9.3x before 9.32.0002 allow remote authenticated users to execute arbitrary commands or obtain sensitive information via unspecified vectors.
Red Hat OpenShift Enterprise 3.2 improperly restricts access to STI builds, allowing remote authenticated users to access the Docker socket and gain privileges via vectors related to build-pod.
Red Hat OpenShift Enterprise 3.2 with multi-tenant SDN enabled allows remote authenticated users to access network resources on restricted pods when a build is run in a namespace that would normally be isolated from other pods. The issue occurs with builder images that contain ONBUILD commands or lack a tar binary.
Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder image.
HPE Discovery and Dependency Mapping Inventory (DDMi) versions 9.30, 9.31, 9.32, and updates 1, 2, and 3 allow remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
The Universal Discovery component in HPE Universal CMDB versions 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attackers to obtain sensitive information via unspecified vectors.
HPE Insight Control server deployment allows remote attackers to obtain sensitive information via unspecified vectors.
HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors.
HPE Insight Control server deployment allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.
HPE LoadRunner and Performance Center in versions 11.52 to 12.50 and respective patches are vulnerable to an attack that can lead to denial of service.
HPE Matrix Operating Environment before version 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
HPE Matrix Operating Environment before version 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.