CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. This is a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2022.
HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-2026.
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-2027.
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. This is a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2030.
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. This is a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2022, and CVE-2016-2030.
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. This is a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030.
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. This is a different vulnerability than CVE-2016-2017, CVE-2016-2020, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030.
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.
Cisco Aironet Access Point Software version 8.2(100.0) on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local users to obtain Linux root access via crafted CLI command parameters.
The libclamav library in ClamAV, used in Cisco Email Security Appliance and Web Security Appliance devices, has a vulnerability that allows remote attackers to cause a denial of service via a crafted document. This affects versions before 9.7.0-125 for ESA and before 9.0.1-135 and 9.1.1-041 for WSA.
The vulnerability in Symantec Embedded Security allows remote authenticated users to conduct argument-injection attacks by leveraging access to certain named pipes. It affects versions before 1.0 MP5, 6.5.0 before MP1, before 5.2.9 MP6, and 6.x before 6.5 MP1 and 6.6 before MP1.
A directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection allows remote authenticated users to write update-package data to arbitrary agent locations.
CVE-2015-8798 describes a directory traversal vulnerability in the Management Server of Symantec Embedded Security products. It allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVE-2015-8157 is a SQL injection vulnerability in the Management Server of Symantec Embedded Security products. It allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service through resource consumption and Traffic Management Microkernel restart via an SSL alert during the handshake.
Multiple SQL injection vulnerabilities in the scoped_search function in Katello allow remote authenticated users to execute arbitrary SQL commands via the sort_by or sort_order parameter.
In nginx before 1.10.1 and 1.11.x before 1.11.1, a vulnerability allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a crafted request, involving writing a client request body to a temporary file.
The CInArchive::ReadFileItem method in 7zip versions 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.
Apache James Server version 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors.